./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1265740719 <...> udit: type=1400 audit(1695567701.577:64): avc: denied { rlimitinh } for pid=221 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.483677][ T30] audit: type=1400 audit(1695567701.577:65): avc: denied { siginh } for pid=221 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.718964][ T226] sftp-server (226) used greatest stack depth: 22096 bytes left Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. execve("./syz-executor1265740719", ["./syz-executor1265740719"], 0x7fffc8252ab0 /* 10 vars */) = 0 brk(NULL) = 0x555556b82000 brk(0x555556b82d40) = 0x555556b82d40 arch_prctl(ARCH_SET_FS, 0x555556b823c0) = 0 set_tid_address(0x555556b82690) = 291 set_robust_list(0x555556b826a0, 24) = 0 rseq(0x555556b82ce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1265740719", 4096) = 28 getrandom("\xef\xfe\x27\x29\x29\x95\xe6\xfd", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556b82d40 brk(0x555556ba3d40) = 0x555556ba3d40 brk(0x555556ba4000) = 0x555556ba4000 mprotect(0x7f963026e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.pMmUUH", 0700) = 0 chmod("./syzkaller.pMmUUH", 0777) = 0 chdir("./syzkaller.pMmUUH") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 293 ./strace-static-x86_64: Process 293 attached [pid 293] set_robust_list(0x555556b826a0, 24) = 0 [pid 293] chdir("./0") = 0 [pid 293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 293] setpgid(0, 0) = 0 [pid 293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 293] write(3, "1000", 4) = 4 [pid 293] close(3) = 0 [pid 293] symlink("/dev/binderfs", "./binderfs") = 0 [pid 293] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 293] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 293] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 293] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[294]}, 88) = 294 [pid 293] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 293] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 294 attached [pid 294] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 294] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 294] memfd_create("syzkaller", 0) = 3 [pid 294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 294] munmap(0x7f9627d89000, 262144) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 294] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 294] close(3) = 0 [pid 294] mkdir("./file0", 0777) = 0 [ 19.949724][ T30] audit: type=1400 audit(1695567710.057:66): avc: denied { execmem } for pid=291 comm="syz-executor126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.953173][ T30] audit: type=1400 audit(1695567710.057:67): avc: denied { read write } for pid=291 comm="syz-executor126" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.957664][ T30] audit: type=1400 audit(1695567710.057:68): avc: denied { open } for pid=291 comm="syz-executor126" path="/dev/loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.962473][ T30] audit: type=1400 audit(1695567710.057:69): avc: denied { ioctl } for pid=291 comm="syz-executor126" path="/dev/loop0" dev="devtmpfs" ino=112 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.970276][ T294] loop0: detected capacity change from 0 to 512 [ 19.977740][ T294] ======================================================= [ 19.977740][ T294] WARNING: The mand mount option has been deprecated and [ 19.977740][ T294] and is ignored by this kernel. Remove the mand [ 19.977740][ T294] option from the mount to silence this warning. [ 19.977740][ T294] ======================================================= [ 19.977758][ T30] audit: type=1400 audit(1695567710.077:70): avc: denied { mounton } for pid=293 comm="syz-executor126" path="/root/syzkaller.pMmUUH/0/file0" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [pid 294] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 294] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 294] chdir("./file0") = 0 [pid 294] ioctl(4, LOOP_CLR_FD) = 0 [pid 294] close(4) = 0 [pid 294] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 294] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] <... futex resumed>) = 0 [pid 293] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 293] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... futex resumed>) = 0 [pid 294] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 294] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... futex resumed>) = 0 [pid 293] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... futex resumed>) = 1 [pid 294] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 294] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... futex resumed>) = 0 [pid 293] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... futex resumed>) = 1 [pid 294] creat("./bus", 000) = 6 [pid 294] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... futex resumed>) = 0 [pid 293] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... futex resumed>) = 1 [pid 294] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 294] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... futex resumed>) = 0 [pid 293] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... futex resumed>) = 1 [pid 294] open("./bus", O_RDONLY) = 7 [pid 294] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... futex resumed>) = 0 [pid 293] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... futex resumed>) = 1 [ 20.015361][ T294] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 20.050915][ T294] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 20.060952][ T294] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 20.071731][ T30] audit: type=1400 audit(1695567710.177:71): avc: denied { mount } for pid=293 comm="syz-executor126" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [pid 294] sendfile(6, 7, NULL, 140737974943952 [pid 293] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 293] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 293] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 293] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[297]}, 88) = 297 [pid 293] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 293] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 20.095604][ T30] audit: type=1400 audit(1695567710.187:72): avc: denied { write } for pid=293 comm="syz-executor126" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 20.117460][ T30] audit: type=1400 audit(1695567710.187:73): avc: denied { add_name } for pid=293 comm="syz-executor126" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 293] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 297 attached [pid 297] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 297] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 297] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 293] <... futex resumed>) = 0 [pid 297] sendmsg(-1, 0x20000000, 0 [pid 293] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... futex resumed>) = 0 [pid 297] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 0 [pid 293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 20.138248][ T30] audit: type=1400 audit(1695567710.187:74): avc: denied { create } for pid=293 comm="syz-executor126" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 20.158460][ T30] audit: type=1400 audit(1695567710.187:75): avc: denied { read write open } for pid=293 comm="syz-executor126" path=2F726F6F742F73797A6B616C6C65722E704D6D5555482F302F66696C65302F627573202864656C6574656429 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [pid 297] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] exit_group(0 [pid 297] <... futex resumed>) = ? [pid 293] <... exit_group resumed>) = ? [pid 297] +++ exited with 0 +++ [pid 294] <... sendfile resumed>) = ? [pid 294] +++ exited with 0 +++ [pid 293] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=293, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 [ 20.310808][ T294] syz-executor126 (294) used greatest stack depth: 21552 bytes left clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 298 ./strace-static-x86_64: Process 298 attached [pid 298] set_robust_list(0x555556b826a0, 24) = 0 [pid 298] chdir("./1") = 0 [pid 298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 298] setpgid(0, 0) = 0 [pid 298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 298] write(3, "1000", 4) = 4 [pid 298] close(3) = 0 [pid 298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 298] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 298] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 298] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[299]}, 88) = 299 [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] memfd_create("syzkaller", 0) = 3 [pid 299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 299] munmap(0x7f9627d89000, 262144) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 299] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 299] close(3) = 0 [pid 299] mkdir("./file0", 0777) = 0 [pid 299] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 299] chdir("./file0") = 0 [pid 299] ioctl(4, LOOP_CLR_FD) = 0 [pid 299] close(4) = 0 [pid 299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [pid 299] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [pid 299] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 0 [pid 299] creat("./bus", 000) = 6 [pid 299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [pid 299] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [pid 299] open("./bus", O_RDONLY) = 7 [pid 299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [ 20.377515][ T299] loop0: detected capacity change from 0 to 512 [ 20.385830][ T299] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 20.399299][ T299] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 20.408888][ T299] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 299] sendfile(6, 7, NULL, 140737974943952 [pid 298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 298] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 298] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 302 attached => {parent_tid=[302]}, 88) = 302 [pid 302] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 302] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 302] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 302] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 302] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 298] <... futex resumed>) = 0 [pid 302] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] exit_group(0) = ? [pid 302] <... futex resumed>) = ? [pid 302] +++ exited with 0 +++ [pid 299] <... sendfile resumed>) = ? [pid 299] +++ exited with 0 +++ [pid 298] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=298, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 304 ./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x555556b826a0, 24) = 0 [pid 304] chdir("./2") = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] setpgid(0, 0) = 0 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 304] write(3, "1000", 4) = 4 [pid 304] close(3) = 0 [pid 304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 304] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 304] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 304] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[305]}, 88) = 305 [pid 304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 304] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 305 attached [pid 305] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] memfd_create("syzkaller", 0) = 3 [pid 305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 305] munmap(0x7f9627d89000, 262144) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 305] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 305] close(3) = 0 [pid 305] mkdir("./file0", 0777) = 0 [pid 305] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 305] chdir("./file0") = 0 [pid 305] ioctl(4, LOOP_CLR_FD) = 0 [pid 305] close(4) = 0 [pid 305] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 305] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 305] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] creat("./bus", 000) = 6 [pid 305] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 305] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] open("./bus", O_RDONLY) = 7 [pid 305] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [ 20.665427][ T305] loop0: detected capacity change from 0 to 512 [ 20.673865][ T305] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 20.687993][ T305] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 20.698555][ T305] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 305] sendfile(6, 7, NULL, 140737974943952 [pid 304] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 304] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 304] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 304] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[307]}, 88) = 307 ./strace-static-x86_64: Process 307 attached [pid 304] rt_sigprocmask(SIG_SETMASK, [], [pid 307] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 304] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... futex resumed>) = 0 [pid 307] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 307] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... futex resumed>) = 0 [pid 307] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 307] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 307] <... futex resumed>) = 1 [pid 307] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] exit_group(0 [pid 307] <... futex resumed>) = ? [pid 304] <... exit_group resumed>) = ? [pid 307] +++ exited with 0 +++ [pid 305] <... sendfile resumed>) = ? [pid 305] +++ exited with 0 +++ [pid 304] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./2/binderfs") = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 308 ./strace-static-x86_64: Process 308 attached [pid 308] set_robust_list(0x555556b826a0, 24) = 0 [pid 308] chdir("./3") = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] setpgid(0, 0) = 0 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 308] write(3, "1000", 4) = 4 [pid 308] close(3) = 0 [pid 308] symlink("/dev/binderfs", "./binderfs") = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 308] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 308] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[309]}, 88) = 309 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 309 attached [pid 309] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] memfd_create("syzkaller", 0) = 3 [pid 309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 309] munmap(0x7f9627d89000, 262144) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 309] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 309] close(3) = 0 [pid 309] mkdir("./file0", 0777) = 0 [pid 309] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 309] chdir("./file0") = 0 [pid 309] ioctl(4, LOOP_CLR_FD) = 0 [pid 309] close(4) = 0 [pid 309] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 309] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 309] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] creat("./bus", 000) = 6 [pid 309] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 309] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] open("./bus", O_RDONLY) = 7 [pid 309] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [ 20.967608][ T309] loop0: detected capacity change from 0 to 512 [ 20.975798][ T309] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 20.991769][ T309] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 21.002059][ T309] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 309] sendfile(6, 7, NULL, 140737974943952 [pid 308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 308] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 308] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 311 attached => {parent_tid=[311]}, 88) = 311 [pid 308] rt_sigprocmask(SIG_SETMASK, [], [pid 311] set_robust_list(0x7f9627dc89a0, 24 [pid 308] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 308] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... set_robust_list resumed>) = 0 [pid 311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 311] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 311] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] sendmsg(-1, 0x20000000, 0 [pid 308] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 311] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 311] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] exit_group(0 [pid 311] <... futex resumed>) = ? [pid 308] <... exit_group resumed>) = ? [pid 311] +++ exited with 0 +++ [pid 309] <... sendfile resumed>) = ? [pid 309] +++ exited with 0 +++ [pid 308] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./3/binderfs") = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 312 ./strace-static-x86_64: Process 312 attached [pid 312] set_robust_list(0x555556b826a0, 24) = 0 [pid 312] chdir("./4") = 0 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 312] setpgid(0, 0) = 0 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 312] write(3, "1000", 4) = 4 [pid 312] close(3) = 0 [pid 312] symlink("/dev/binderfs", "./binderfs") = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 312] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 312] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 313 attached => {parent_tid=[313]}, 88) = 313 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] set_robust_list(0x7f96301a99a0, 24 [pid 312] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 313] <... set_robust_list resumed>) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] memfd_create("syzkaller", 0) = 3 [pid 313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 313] munmap(0x7f9627d89000, 262144) = 0 [pid 313] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 313] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 313] close(3) = 0 [pid 313] mkdir("./file0", 0777) = 0 [pid 313] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 313] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 313] chdir("./file0") = 0 [pid 313] ioctl(4, LOOP_CLR_FD) = 0 [pid 313] close(4) = 0 [pid 313] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 313] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... futex resumed>) = 1 [pid 313] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 313] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... futex resumed>) = 1 [pid 313] creat("./bus", 000) = 6 [pid 313] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... futex resumed>) = 1 [pid 313] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 313] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... futex resumed>) = 1 [pid 313] open("./bus", O_RDONLY) = 7 [pid 313] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... futex resumed>) = 1 [ 21.245126][ T313] loop0: detected capacity change from 0 to 512 [ 21.253099][ T313] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 21.266382][ T313] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 21.276190][ T313] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 313] sendfile(6, 7, NULL, 140737974943952 [pid 312] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 312] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 312] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 315 attached => {parent_tid=[315]}, 88) = 315 [pid 315] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 315] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 312] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 315] <... futex resumed>) = 0 [pid 315] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 312] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... mmap resumed>) = 0x20000000 [pid 315] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 1 [pid 312] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 315] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 1 [pid 315] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] exit_group(0 [pid 315] <... futex resumed>) = ? [pid 312] <... exit_group resumed>) = ? [pid 315] +++ exited with 0 +++ [pid 313] <... sendfile resumed>) = ? [pid 313] +++ exited with 0 +++ [pid 312] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=312, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./4/binderfs") = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 316 ./strace-static-x86_64: Process 316 attached [pid 316] set_robust_list(0x555556b826a0, 24) = 0 [pid 316] chdir("./5") = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 316] setpgid(0, 0) = 0 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 316] write(3, "1000", 4) = 4 [pid 316] close(3) = 0 [pid 316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 316] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 316] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 317 attached => {parent_tid=[317]}, 88) = 317 [pid 317] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 317] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 316] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 317] <... futex resumed>) = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 317] memfd_create("syzkaller", 0) = 3 [pid 317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 317] munmap(0x7f9627d89000, 262144) = 0 [pid 317] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 317] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 317] close(3) = 0 [pid 317] mkdir("./file0", 0777) = 0 [pid 317] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 317] chdir("./file0") = 0 [pid 317] ioctl(4, LOOP_CLR_FD) = 0 [pid 317] close(4) = 0 [pid 317] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [pid 317] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 317] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 316] <... futex resumed>) = 0 [pid 317] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 316] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... open resumed>) = 5 [pid 316] <... futex resumed>) = 0 [pid 317] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 316] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [pid 317] creat("./bus", 000) = 6 [pid 317] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [pid 317] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 317] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [pid 317] open("./bus", O_RDONLY) = 7 [pid 317] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [ 21.545091][ T317] loop0: detected capacity change from 0 to 512 [ 21.553491][ T317] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 21.567819][ T317] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 21.577974][ T317] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 317] sendfile(6, 7, NULL, 140737974943952 [pid 316] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 316] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 316] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[320]}, 88) = 320 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 316] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 320 attached [pid 320] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 320] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 320] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 320] <... futex resumed>) = 1 [pid 320] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 320] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 320] <... futex resumed>) = 1 [pid 320] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 316] exit_group(0) = ? [pid 320] <... futex resumed>) = ? [pid 320] +++ exited with 0 +++ [pid 317] <... sendfile resumed>) = ? [pid 317] +++ exited with 0 +++ [pid 316] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=316, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./5/binderfs") = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 321 ./strace-static-x86_64: Process 321 attached [pid 321] set_robust_list(0x555556b826a0, 24) = 0 [pid 321] chdir("./6") = 0 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 321] setpgid(0, 0) = 0 [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 321] write(3, "1000", 4) = 4 [pid 321] close(3) = 0 [pid 321] symlink("/dev/binderfs", "./binderfs") = 0 [pid 321] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 321] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 321] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 321] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 321] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[322]}, 88) = 322 [pid 321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 321] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 322 attached [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 322] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 322] memfd_create("syzkaller", 0) = 3 [pid 322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 322] munmap(0x7f9627d89000, 262144) = 0 [pid 322] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 322] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 322] close(3) = 0 [pid 322] mkdir("./file0", 0777) = 0 [pid 322] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 322] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 322] chdir("./file0") = 0 [pid 322] ioctl(4, LOOP_CLR_FD) = 0 [pid 322] close(4) = 0 [pid 322] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 321] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... futex resumed>) = 1 [pid 322] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 322] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 321] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... futex resumed>) = 1 [pid 322] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 322] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 321] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... futex resumed>) = 1 [pid 322] creat("./bus", 000) = 6 [pid 322] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 321] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... futex resumed>) = 1 [pid 322] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 322] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 321] <... futex resumed>) = 0 [pid 322] open("./bus", O_RDONLY [pid 321] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... open resumed>) = 7 [pid 322] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 321] <... futex resumed>) = 1 [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 321] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... futex resumed>) = 0 [ 21.840716][ T322] loop0: detected capacity change from 0 to 512 [ 21.849090][ T322] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 21.862362][ T322] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 21.873267][ T322] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 322] sendfile(6, 7, NULL, 140737974943952 [pid 321] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 321] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 321] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 321] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 321] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[324]}, 88) = 324 [pid 321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 321] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 324] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 324] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 321] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... futex resumed>) = 1 [pid 324] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 324] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = 1 [pid 324] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 321] exit_group(0 [pid 324] <... futex resumed>) = ? [pid 321] <... exit_group resumed>) = ? [pid 322] <... sendfile resumed>) = ? [pid 322] +++ exited with 0 +++ [pid 324] +++ exited with 0 +++ [pid 321] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=321, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./6/binderfs") = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./6/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 325 ./strace-static-x86_64: Process 325 attached [pid 325] set_robust_list(0x555556b826a0, 24) = 0 [pid 325] chdir("./7") = 0 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 325] setpgid(0, 0) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 325] write(3, "1000", 4) = 4 [pid 325] close(3) = 0 [pid 325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 325] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 325] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[326]}, 88) = 326 ./strace-static-x86_64: Process 326 attached [pid 325] rt_sigprocmask(SIG_SETMASK, [], [pid 326] set_robust_list(0x7f96301a99a0, 24 [pid 325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 326] <... set_robust_list resumed>) = 0 [pid 325] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] rt_sigprocmask(SIG_SETMASK, [], [pid 325] <... futex resumed>) = 0 [pid 326] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 326] memfd_create("syzkaller", 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 326] <... memfd_create resumed>) = 3 [pid 326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 326] munmap(0x7f9627d89000, 262144) = 0 [pid 326] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 326] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 326] close(3) = 0 [pid 326] mkdir("./file0", 0777) = 0 [pid 326] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 326] chdir("./file0") = 0 [pid 326] ioctl(4, LOOP_CLR_FD) = 0 [pid 326] close(4) = 0 [pid 326] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... futex resumed>) = 1 [pid 326] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 326] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... futex resumed>) = 1 [pid 326] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 326] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... futex resumed>) = 1 [pid 326] creat("./bus", 000) = 6 [pid 326] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... futex resumed>) = 1 [pid 326] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 326] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... futex resumed>) = 1 [pid 326] open("./bus", O_RDONLY) = 7 [pid 326] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... futex resumed>) = 1 [ 22.115010][ T326] loop0: detected capacity change from 0 to 512 [ 22.123344][ T326] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 22.136541][ T326] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 22.146081][ T326] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 326] sendfile(6, 7, NULL, 140737974943952 [pid 325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 325] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 325] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[328]}, 88) = 328 [pid 325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 325] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 328] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 328] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] <... futex resumed>) = 1 [pid 328] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 328] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = 1 [pid 328] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 325] exit_group(0 [pid 328] <... futex resumed>) = ? [pid 325] <... exit_group resumed>) = ? [pid 328] +++ exited with 0 +++ [pid 326] <... sendfile resumed>) = ? [pid 326] +++ exited with 0 +++ [pid 325] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=325, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./7/binderfs") = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./7/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 329 ./strace-static-x86_64: Process 329 attached [pid 329] set_robust_list(0x555556b826a0, 24) = 0 [pid 329] chdir("./8") = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 329] setpgid(0, 0) = 0 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 329] write(3, "1000", 4) = 4 [pid 329] close(3) = 0 [pid 329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 329] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 329] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[330]}, 88) = 330 [pid 329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] memfd_create("syzkaller", 0) = 3 [pid 330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 330] munmap(0x7f9627d89000, 262144) = 0 [pid 330] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 330] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 330] close(3) = 0 [pid 330] mkdir("./file0", 0777) = 0 [pid 330] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 330] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 330] chdir("./file0") = 0 [pid 330] ioctl(4, LOOP_CLR_FD) = 0 [pid 330] close(4) = 0 [pid 330] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] <... futex resumed>) = 1 [pid 330] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 330] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] <... futex resumed>) = 1 [pid 330] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 330] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] <... futex resumed>) = 1 [pid 330] creat("./bus", 000) = 6 [pid 330] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] <... futex resumed>) = 1 [pid 329] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 330] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] <... futex resumed>) = 1 [pid 330] open("./bus", O_RDONLY) = 7 [pid 330] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] <... futex resumed>) = 1 [ 22.428905][ T330] loop0: detected capacity change from 0 to 512 [ 22.437164][ T330] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 22.450084][ T330] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 22.460241][ T330] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 330] sendfile(6, 7, NULL, 140737974943952 [pid 329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 329] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 329] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[332]}, 88) = 332 [pid 329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 332] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 332] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 329] <... futex resumed>) = 0 [pid 332] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] exit_group(0 [pid 332] <... futex resumed>) = ? [pid 329] <... exit_group resumed>) = ? [pid 332] +++ exited with 0 +++ [pid 330] <... sendfile resumed>) = ? [pid 330] +++ exited with 0 +++ [pid 329] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=329, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./8/binderfs") = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./8/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 334 ./strace-static-x86_64: Process 334 attached [pid 334] set_robust_list(0x555556b826a0, 24) = 0 [pid 334] chdir("./9") = 0 [pid 334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 334] setpgid(0, 0) = 0 [pid 334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 334] write(3, "1000", 4) = 4 [pid 334] close(3) = 0 [pid 334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 334] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 334] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 334] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[335]}, 88) = 335 [pid 334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 334] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 335] memfd_create("syzkaller", 0) = 3 [pid 335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 335] munmap(0x7f9627d89000, 262144) = 0 [pid 335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 335] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 335] close(3) = 0 [pid 335] mkdir("./file0", 0777) = 0 [pid 335] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 335] chdir("./file0") = 0 [pid 335] ioctl(4, LOOP_CLR_FD) = 0 [pid 335] close(4) = 0 [pid 335] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 335] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 335] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] creat("./bus", 000) = 6 [pid 335] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 335] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] open("./bus", O_RDONLY) = 7 [pid 335] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [ 22.729827][ T335] loop0: detected capacity change from 0 to 512 [ 22.738437][ T335] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 22.751470][ T335] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 22.761126][ T335] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 335] sendfile(6, 7, NULL, 140737974943952 [pid 334] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 334] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 334] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 334] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[337]}, 88) = 337 [pid 334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 334] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 337] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 337] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 337] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 334] <... futex resumed>) = 0 [pid 337] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 334] exit_group(0 [pid 337] <... futex resumed>) = ? [pid 334] <... exit_group resumed>) = ? [pid 337] +++ exited with 0 +++ [pid 335] <... sendfile resumed>) = ? [pid 335] +++ exited with 0 +++ [pid 334] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=334, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./9/binderfs") = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./9/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 338 ./strace-static-x86_64: Process 338 attached [pid 338] set_robust_list(0x555556b826a0, 24) = 0 [pid 338] chdir("./10") = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 [pid 338] close(3) = 0 [pid 338] symlink("/dev/binderfs", "./binderfs") = 0 [pid 338] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 338] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 338] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 338] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 338] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[339]}, 88) = 339 [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] memfd_create("syzkaller", 0) = 3 [pid 339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 339] munmap(0x7f9627d89000, 262144) = 0 [pid 339] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 339] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 339] close(3) = 0 [pid 339] mkdir("./file0", 0777) = 0 [pid 339] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 339] chdir("./file0") = 0 [pid 339] ioctl(4, LOOP_CLR_FD) = 0 [pid 339] close(4) = 0 [pid 339] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 339] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 0 [pid 339] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 339] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 339] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] creat("./bus", 000) = 6 [pid 339] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 339] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 339] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 0 [pid 339] open("./bus", O_RDONLY) = 7 [pid 339] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 23.034598][ T339] loop0: detected capacity change from 0 to 512 [ 23.043041][ T339] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 23.056081][ T339] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 23.066139][ T339] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 339] sendfile(6, 7, NULL, 140737974943952 [pid 338] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 338] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 338] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 338] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 338] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 341 attached => {parent_tid=[341]}, 88) = 341 [pid 341] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 341] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] <... futex resumed>) = 0 [pid 341] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 341] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 338] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] <... futex resumed>) = 0 [pid 341] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 341] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 338] exit_group(0 [pid 341] <... futex resumed>) = ? [pid 338] <... exit_group resumed>) = ? [pid 341] +++ exited with 0 +++ [pid 339] <... sendfile resumed>) = 230 [pid 339] +++ exited with 0 +++ [pid 338] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=338, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./10/binderfs") = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./10/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 342 ./strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x555556b826a0, 24) = 0 [pid 342] chdir("./11") = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 342] setpgid(0, 0) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 342] write(3, "1000", 4) = 4 [pid 342] close(3) = 0 [pid 342] symlink("/dev/binderfs", "./binderfs") = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 342] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[343]}, 88) = 343 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 343 attached [pid 343] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 343] memfd_create("syzkaller", 0) = 3 [pid 343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 343] munmap(0x7f9627d89000, 262144) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 343] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 343] close(3) = 0 [pid 343] mkdir("./file0", 0777) = 0 [pid 343] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 343] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 343] chdir("./file0") = 0 [pid 343] ioctl(4, LOOP_CLR_FD) = 0 [pid 343] close(4) = 0 [pid 343] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 343] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 343] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] creat("./bus", 000) = 6 [pid 343] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 343] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] open("./bus", O_RDONLY) = 7 [pid 343] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [ 23.368093][ T343] loop0: detected capacity change from 0 to 512 [ 23.376030][ T343] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 23.390648][ T343] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 23.401906][ T343] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 343] sendfile(6, 7, NULL, 140737974943952 [pid 342] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 342] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 345 attached => {parent_tid=[345]}, 88) = 345 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 345] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 345] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 345] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 345] <... futex resumed>) = 1 [pid 345] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] exit_group(0 [pid 345] <... futex resumed>) = ? [pid 342] <... exit_group resumed>) = ? [pid 345] +++ exited with 0 +++ [pid 343] <... sendfile resumed>) = ? [pid 343] +++ exited with 0 +++ [pid 342] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=342, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./11/binderfs") = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./11/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 347 ./strace-static-x86_64: Process 347 attached [pid 347] set_robust_list(0x555556b826a0, 24) = 0 [pid 347] chdir("./12") = 0 [pid 347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 347] setpgid(0, 0) = 0 [pid 347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 347] write(3, "1000", 4) = 4 [pid 347] close(3) = 0 [pid 347] symlink("/dev/binderfs", "./binderfs") = 0 [pid 347] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 347] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 347] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 347] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[348]}, 88) = 348 [pid 347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 347] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 348 attached [pid 348] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 348] memfd_create("syzkaller", 0) = 3 [pid 348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 348] munmap(0x7f9627d89000, 262144) = 0 [pid 348] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 348] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 348] close(3) = 0 [pid 348] mkdir("./file0", 0777) = 0 [pid 348] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 348] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 348] chdir("./file0") = 0 [pid 348] ioctl(4, LOOP_CLR_FD) = 0 [pid 348] close(4) = 0 [pid 348] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 0 [pid 348] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 348] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [pid 348] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 348] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] creat("./bus", 000) = 6 [pid 348] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 347] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 347] <... futex resumed>) = 0 [pid 348] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... writev resumed>) = 1 [pid 348] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [pid 348] open("./bus", O_RDONLY) = 7 [pid 348] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [ 23.643838][ T348] loop0: detected capacity change from 0 to 512 [ 23.652573][ T348] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 23.666012][ T348] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 23.676158][ T348] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 348] sendfile(6, 7, NULL, 140737974943952 [pid 347] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 347] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 347] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 347] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[351]}, 88) = 351 ./strace-static-x86_64: Process 351 attached [pid 347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 347] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 351] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 351] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 351] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 347] <... futex resumed>) = 0 [pid 351] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 347] exit_group(0 [pid 351] <... futex resumed>) = ? [pid 347] <... exit_group resumed>) = ? [pid 348] <... sendfile resumed>) = ? [pid 351] +++ exited with 0 +++ [pid 348] +++ exited with 0 +++ [pid 347] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=347, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./12/binderfs") = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./12/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 352 ./strace-static-x86_64: Process 352 attached [pid 352] set_robust_list(0x555556b826a0, 24) = 0 [pid 352] chdir("./13") = 0 [pid 352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 352] setpgid(0, 0) = 0 [pid 352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 352] write(3, "1000", 4) = 4 [pid 352] close(3) = 0 [pid 352] symlink("/dev/binderfs", "./binderfs") = 0 [pid 352] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 352] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 352] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 352] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[353]}, 88) = 353 [pid 352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 352] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 353 attached [pid 353] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 353] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 353] memfd_create("syzkaller", 0) = 3 [pid 353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 353] munmap(0x7f9627d89000, 262144) = 0 [pid 353] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 353] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 353] close(3) = 0 [pid 353] mkdir("./file0", 0777) = 0 [pid 353] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 353] chdir("./file0") = 0 [pid 353] ioctl(4, LOOP_CLR_FD) = 0 [pid 353] close(4) = 0 [pid 353] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 353] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 353] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] creat("./bus", 000) = 6 [pid 353] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 353] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 352] <... futex resumed>) = 0 [pid 353] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 0 [pid 353] open("./bus", O_RDONLY) = 7 [pid 353] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [ 23.987681][ T353] loop0: detected capacity change from 0 to 512 [ 23.996400][ T353] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 24.011144][ T353] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 24.021266][ T353] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 353] sendfile(6, 7, NULL, 140737974943952 [pid 352] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 352] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 352] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 352] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[355]}, 88) = 355 [pid 352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 352] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 355 attached [pid 355] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 355] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 355] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 355] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 352] <... futex resumed>) = 0 [pid 355] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] exit_group(0) = ? [pid 355] <... futex resumed>) = 231 [pid 355] +++ exited with 0 +++ [pid 353] <... sendfile resumed>) = ? [pid 353] +++ exited with 0 +++ [pid 352] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=352, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./13/binderfs") = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./13/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 356 ./strace-static-x86_64: Process 356 attached [pid 356] set_robust_list(0x555556b826a0, 24) = 0 [pid 356] chdir("./14") = 0 [pid 356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 356] setpgid(0, 0) = 0 [pid 356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 356] write(3, "1000", 4) = 4 [pid 356] close(3) = 0 [pid 356] symlink("/dev/binderfs", "./binderfs") = 0 [pid 356] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 356] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 356] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 356] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 356] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[357]}, 88) = 357 [pid 356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 356] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 357 attached [pid 357] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 357] memfd_create("syzkaller", 0) = 3 [pid 357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 357] munmap(0x7f9627d89000, 262144) = 0 [pid 357] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 357] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 357] close(3) = 0 [pid 357] mkdir("./file0", 0777) = 0 [pid 357] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 357] chdir("./file0") = 0 [pid 357] ioctl(4, LOOP_CLR_FD) = 0 [pid 357] close(4) = 0 [pid 357] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 357] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 356] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 0 [pid 357] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 357] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 357] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] creat("./bus", 000) = 6 [pid 357] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 356] <... futex resumed>) = 0 [pid 357] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 356] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... writev resumed>) = 1 [pid 357] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 356] <... futex resumed>) = 0 [pid 357] open("./bus", O_RDONLY [pid 356] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... open resumed>) = 7 [pid 357] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 356] <... futex resumed>) = 0 [pid 357] sendfile(6, 7, NULL, 140737974943952 [pid 356] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 24.329082][ T357] loop0: detected capacity change from 0 to 512 [ 24.337380][ T357] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 24.350768][ T357] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 24.361005][ T357] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 356] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 356] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 356] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 356] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 356] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 359 attached [pid 359] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 359] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 356] <... clone3 resumed> => {parent_tid=[359]}, 88) = 359 [pid 356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 356] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 356] <... futex resumed>) = 1 [pid 359] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 356] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] <... mmap resumed>) = 0x20000000 [pid 359] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 359] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 359] <... futex resumed>) = 1 [pid 359] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 356] exit_group(0 [pid 359] <... futex resumed>) = ? [pid 356] <... exit_group resumed>) = ? [pid 359] +++ exited with 0 +++ [pid 357] <... sendfile resumed>) = ? [pid 357] +++ exited with 0 +++ [pid 356] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=356, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./14/binderfs") = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./14/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 361 ./strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x555556b826a0, 24) = 0 [pid 361] chdir("./15") = 0 [pid 361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 361] setpgid(0, 0) = 0 [pid 361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 361] write(3, "1000", 4) = 4 [pid 361] close(3) = 0 [pid 361] symlink("/dev/binderfs", "./binderfs") = 0 [pid 361] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 361] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 361] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 361] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 361] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 362 attached => {parent_tid=[362]}, 88) = 362 [pid 362] set_robust_list(0x7f96301a99a0, 24 [pid 361] rt_sigprocmask(SIG_SETMASK, [], [pid 362] <... set_robust_list resumed>) = 0 [pid 361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 362] rt_sigprocmask(SIG_SETMASK, [], [pid 361] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 362] memfd_create("syzkaller", 0) = 3 [pid 362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 362] munmap(0x7f9627d89000, 262144) = 0 [pid 362] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 362] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 362] close(3) = 0 [pid 362] mkdir("./file0", 0777) = 0 [pid 362] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 362] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 362] chdir("./file0") = 0 [pid 362] ioctl(4, LOOP_CLR_FD) = 0 [pid 362] close(4) = 0 [pid 362] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 362] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = 0 [pid 362] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 362] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = 1 [pid 362] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 362] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = 1 [pid 362] creat("./bus", 000) = 6 [pid 362] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 362] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = 0 [pid 362] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 362] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = 1 [pid 362] open("./bus", O_RDONLY) = 7 [pid 362] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = 1 [ 24.671440][ T362] loop0: detected capacity change from 0 to 512 [ 24.679545][ T362] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 24.692999][ T362] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 24.702924][ T362] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 362] sendfile(6, 7, NULL, 140737974943952 [pid 361] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 361] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 361] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 361] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 361] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[364]}, 88) = 364 [pid 361] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 361] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 364] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 364] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] <... futex resumed>) = 1 [pid 364] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 364] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 364] <... futex resumed>) = 1 [pid 364] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] exit_group(0 [pid 364] <... futex resumed>) = ? [pid 361] <... exit_group resumed>) = ? [pid 364] +++ exited with 0 +++ [pid 362] <... sendfile resumed>) = ? [pid 362] +++ exited with 0 +++ [pid 361] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=361, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./15/binderfs") = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./15/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 365 attached [pid 365] set_robust_list(0x555556b826a0, 24) = 0 [pid 365] chdir("./16") = 0 [pid 365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 365] setpgid(0, 0) = 0 [pid 291] <... clone resumed>, child_tidptr=0x555556b82690) = 365 [pid 365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 365] write(3, "1000", 4) = 4 [pid 365] close(3) = 0 [pid 365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 365] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 365] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 365] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 366 attached => {parent_tid=[366]}, 88) = 366 [pid 366] set_robust_list(0x7f96301a99a0, 24 [pid 365] rt_sigprocmask(SIG_SETMASK, [], [pid 366] <... set_robust_list resumed>) = 0 [pid 365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 366] rt_sigprocmask(SIG_SETMASK, [], [pid 365] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 366] memfd_create("syzkaller", 0) = 3 [pid 366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 366] munmap(0x7f9627d89000, 262144) = 0 [pid 366] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 366] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 366] close(3) = 0 [pid 366] mkdir("./file0", 0777) = 0 [pid 366] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 366] chdir("./file0") = 0 [pid 366] ioctl(4, LOOP_CLR_FD) = 0 [pid 366] close(4) = 0 [pid 366] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 0 [pid 366] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 366] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 1 [pid 366] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 366] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 0 [pid 366] creat("./bus", 000) = 6 [pid 366] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 366] <... futex resumed>) = 1 [pid 365] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 366] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 1 [pid 366] open("./bus", O_RDONLY) = 7 [pid 366] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 1 [ 24.989467][ T366] loop0: detected capacity change from 0 to 512 [ 24.998482][ T366] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 25.012153][ T366] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.021870][ T366] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 366] sendfile(6, 7, NULL, 140737974943952 [pid 365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 365] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 365] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[368]}, 88) = 368 [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 368] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 368] <... futex resumed>) = 1 [pid 368] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 368] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 368] <... futex resumed>) = 1 [pid 368] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] exit_group(0 [pid 368] <... futex resumed>) = ? [pid 365] <... exit_group resumed>) = ? [pid 368] +++ exited with 0 +++ [pid 366] <... sendfile resumed>) = ? [pid 366] +++ exited with 0 +++ [pid 365] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=365, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./16/binderfs") = 0 umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./16/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 369 ./strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x555556b826a0, 24) = 0 [pid 369] chdir("./17") = 0 [pid 369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 369] setpgid(0, 0) = 0 [pid 369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 369] write(3, "1000", 4) = 4 [pid 369] close(3) = 0 [pid 369] symlink("/dev/binderfs", "./binderfs") = 0 [pid 369] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 369] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 369] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 369] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[370]}, 88) = 370 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] memfd_create("syzkaller", 0) = 3 [pid 370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 370] munmap(0x7f9627d89000, 262144) = 0 [pid 370] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 370] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 370] close(3) = 0 [pid 370] mkdir("./file0", 0777) = 0 [pid 370] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 370] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 370] chdir("./file0") = 0 [pid 370] ioctl(4, LOOP_CLR_FD) = 0 [pid 370] close(4) = 0 [pid 370] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 1 [pid 370] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 370] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] <... futex resumed>) = 0 [pid 370] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 369] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 0 [pid 370] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 370] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 1 [pid 370] creat("./bus", 000) = 6 [pid 370] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 1 [pid 370] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 370] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] <... futex resumed>) = 0 [pid 370] open("./bus", O_RDONLY [pid 369] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... open resumed>) = 7 [pid 369] <... futex resumed>) = 0 [pid 370] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 0 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] sendfile(6, 7, NULL, 140737974943952 [pid 369] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 25.283341][ T370] loop0: detected capacity change from 0 to 512 [ 25.292209][ T370] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 25.306356][ T370] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.316292][ T370] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 369] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 369] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 369] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 372 attached [pid 372] set_robust_list(0x7f9627dc89a0, 24 [pid 369] <... clone3 resumed> => {parent_tid=[372]}, 88) = 372 [pid 372] <... set_robust_list resumed>) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], [pid 372] rt_sigprocmask(SIG_SETMASK, [], [pid 369] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 369] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 369] <... futex resumed>) = 0 [pid 372] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 369] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... mmap resumed>) = 0x20000000 [pid 372] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] <... futex resumed>) = 0 [pid 372] sendmsg(-1, 0x20000000, 0 [pid 369] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 369] <... futex resumed>) = 0 [pid 372] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = 0 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 369] exit_group(0) = ? [pid 372] <... futex resumed>) = ? [pid 372] +++ exited with 0 +++ [pid 370] <... sendfile resumed>) = ? [pid 370] +++ exited with 0 +++ [pid 369] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=369, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./17/binderfs") = 0 umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./17/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 373 ./strace-static-x86_64: Process 373 attached [pid 373] set_robust_list(0x555556b826a0, 24) = 0 [pid 373] chdir("./18") = 0 [pid 373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 373] setpgid(0, 0) = 0 [pid 373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 373] write(3, "1000", 4) = 4 [pid 373] close(3) = 0 [pid 373] symlink("/dev/binderfs", "./binderfs") = 0 [pid 373] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 373] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 373] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 373] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 373] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 374 attached [pid 374] set_robust_list(0x7f96301a99a0, 24 [pid 373] <... clone3 resumed> => {parent_tid=[374]}, 88) = 374 [pid 374] <... set_robust_list resumed>) = 0 [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 373] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 374] <... futex resumed>) = 0 [pid 374] memfd_create("syzkaller", 0) = 3 [pid 374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 374] munmap(0x7f9627d89000, 262144) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 374] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 374] close(3) = 0 [pid 374] mkdir("./file0", 0777) = 0 [pid 374] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 374] chdir("./file0") = 0 [pid 374] ioctl(4, LOOP_CLR_FD) = 0 [pid 374] close(4) = 0 [pid 374] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 374] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 374] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] creat("./bus", 000) = 6 [pid 374] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 374] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] open("./bus", O_RDONLY) = 7 [pid 374] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [ 25.587649][ T374] loop0: detected capacity change from 0 to 512 [ 25.596347][ T374] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 25.609377][ T374] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.618998][ T374] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 374] sendfile(6, 7, NULL, 140737974943952 [pid 373] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 373] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 373] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 373] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 373] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 377 attached => {parent_tid=[377]}, 88) = 377 [pid 373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 0 [pid 377] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 377] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 377] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 377] <... futex resumed>) = 1 [pid 377] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] exit_group(0 [pid 377] <... futex resumed>) = ? [pid 373] <... exit_group resumed>) = ? [pid 377] +++ exited with 0 +++ [pid 374] <... sendfile resumed>) = ? [pid 374] +++ exited with 0 +++ [pid 373] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=373, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./18/binderfs") = 0 umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./18/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 378 ./strace-static-x86_64: Process 378 attached [pid 378] set_robust_list(0x555556b826a0, 24) = 0 [pid 378] chdir("./19") = 0 [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 378] setpgid(0, 0) = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 [pid 378] symlink("/dev/binderfs", "./binderfs") = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 378] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 378] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 378] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 378] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[379]}, 88) = 379 [pid 378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 379 attached [pid 379] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 379] memfd_create("syzkaller", 0) = 3 [pid 379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 379] munmap(0x7f9627d89000, 262144) = 0 [pid 379] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 379] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 379] close(3) = 0 [pid 379] mkdir("./file0", 0777) = 0 [pid 379] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 379] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 379] chdir("./file0") = 0 [pid 379] ioctl(4, LOOP_CLR_FD) = 0 [pid 379] close(4) = 0 [pid 379] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 379] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 379] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] creat("./bus", 000) = 6 [pid 379] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 379] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] open("./bus", O_RDONLY) = 7 [pid 379] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [ 25.890396][ T379] loop0: detected capacity change from 0 to 512 [ 25.898675][ T379] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 25.912923][ T379] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.922632][ T379] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 379] sendfile(6, 7, NULL, 140737974943952 [pid 378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 378] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 378] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 378] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 378] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 381 attached => {parent_tid=[381]}, 88) = 381 [pid 378] rt_sigprocmask(SIG_SETMASK, [], [pid 381] set_robust_list(0x7f9627dc89a0, 24 [pid 378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 381] <... set_robust_list resumed>) = 0 [pid 378] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] rt_sigprocmask(SIG_SETMASK, [], [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 381] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 381] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 1 [pid 378] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 381] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 1 [pid 381] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] exit_group(0) = ? [pid 381] <... futex resumed>) = ? [pid 379] <... sendfile resumed>) = ? [pid 379] +++ exited with 0 +++ [pid 381] +++ exited with 0 +++ [pid 378] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=378, si_uid=0, si_status=0, si_utime=0, si_stime=20} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./19/binderfs") = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./19/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 382 ./strace-static-x86_64: Process 382 attached [pid 382] set_robust_list(0x555556b826a0, 24) = 0 [pid 382] chdir("./20") = 0 [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 382] setpgid(0, 0) = 0 [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 382] write(3, "1000", 4) = 4 [pid 382] close(3) = 0 [pid 382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 382] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 382] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 382] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[383]}, 88) = 383 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 383 attached [pid 383] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 383] memfd_create("syzkaller", 0) = 3 [pid 383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 383] munmap(0x7f9627d89000, 262144) = 0 [pid 383] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 383] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 383] close(3) = 0 [pid 383] mkdir("./file0", 0777) = 0 [pid 383] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 383] chdir("./file0") = 0 [pid 383] ioctl(4, LOOP_CLR_FD) = 0 [pid 383] close(4) = 0 [pid 383] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 383] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 383] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 0 [pid 383] creat("./bus", 000) = 6 [pid 383] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 383] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] open("./bus", O_RDONLY) = 7 [pid 383] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [ 26.205864][ T383] loop0: detected capacity change from 0 to 512 [ 26.215192][ T383] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 26.228504][ T383] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.238011][ T383] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 383] sendfile(6, 7, NULL, 140737974943952 [pid 382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 382] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 382] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[385]}, 88) = 385 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 385 attached [pid 385] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 385] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 385] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 1 [pid 385] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 385] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] <... futex resumed>) = 0 [pid 385] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] exit_group(0 [pid 385] <... futex resumed>) = ? [pid 382] <... exit_group resumed>) = ? [pid 385] +++ exited with 0 +++ [pid 383] <... sendfile resumed>) = ? [pid 383] +++ exited with 0 +++ [pid 382] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=382, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./20/binderfs") = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./20/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 386 ./strace-static-x86_64: Process 386 attached [pid 386] set_robust_list(0x555556b826a0, 24) = 0 [pid 386] chdir("./21") = 0 [pid 386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 386] setpgid(0, 0) = 0 [pid 386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 386] write(3, "1000", 4) = 4 [pid 386] close(3) = 0 [pid 386] symlink("/dev/binderfs", "./binderfs") = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 386] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 386] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 386] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[387]}, 88) = 387 [pid 386] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 387 attached NULL, 8) = 0 [pid 387] set_robust_list(0x7f96301a99a0, 24 [pid 386] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 387] <... set_robust_list resumed>) = 0 [pid 387] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 387] memfd_create("syzkaller", 0) = 3 [pid 387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 387] munmap(0x7f9627d89000, 262144) = 0 [pid 387] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 387] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 387] close(3) = 0 [pid 387] mkdir("./file0", 0777) = 0 [pid 387] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 387] chdir("./file0") = 0 [pid 387] ioctl(4, LOOP_CLR_FD) = 0 [pid 387] close(4) = 0 [pid 387] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 387] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 387] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] creat("./bus", 000) = 6 [pid 387] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 387] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] open("./bus", O_RDONLY) = 7 [pid 387] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 26.541256][ T387] loop0: detected capacity change from 0 to 512 [ 26.549329][ T387] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 26.564147][ T387] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.574825][ T387] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 387] sendfile(6, 7, NULL, 140737974943952 [pid 386] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 386] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 386] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 386] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 390 attached [pid 390] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 390] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] <... clone3 resumed> => {parent_tid=[390]}, 88) = 390 [pid 386] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 386] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 0 [pid 390] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 390] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 390] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 390] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] exit_group(0 [pid 390] <... futex resumed>) = ? [pid 386] <... exit_group resumed>) = ? [pid 390] +++ exited with 0 +++ [pid 387] <... sendfile resumed>) = ? [pid 387] +++ exited with 0 +++ [pid 386] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=386, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./21/binderfs") = 0 umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./21/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 391 ./strace-static-x86_64: Process 391 attached [pid 391] set_robust_list(0x555556b826a0, 24) = 0 [pid 391] chdir("./22") = 0 [pid 391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 391] setpgid(0, 0) = 0 [pid 391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 391] write(3, "1000", 4) = 4 [pid 391] close(3) = 0 [pid 391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 391] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 391] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 391] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 391] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 392 attached => {parent_tid=[392]}, 88) = 392 [pid 392] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 392] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 392] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 391] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 392] memfd_create("syzkaller", 0 [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 392] <... memfd_create resumed>) = 3 [pid 392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 392] munmap(0x7f9627d89000, 262144) = 0 [pid 392] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 392] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 392] close(3) = 0 [pid 392] mkdir("./file0", 0777) = 0 [pid 392] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 392] chdir("./file0") = 0 [pid 392] ioctl(4, LOOP_CLR_FD) = 0 [pid 392] close(4) = 0 [pid 392] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] <... futex resumed>) = 0 [pid 392] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 392] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] <... futex resumed>) = 1 [pid 392] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 392] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] <... futex resumed>) = 0 [pid 392] creat("./bus", 000) = 6 [pid 392] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] <... futex resumed>) = 1 [pid 392] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 392] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] <... futex resumed>) = 1 [pid 392] open("./bus", O_RDONLY) = 7 [pid 392] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] <... futex resumed>) = 1 [ 26.892981][ T392] loop0: detected capacity change from 0 to 512 [ 26.901163][ T392] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 26.914926][ T392] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.924727][ T392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 392] sendfile(6, 7, NULL, 140737974943952 [pid 391] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 391] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 391] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 391] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[394]}, 88) = 394 [pid 391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 391] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 394 attached [pid 394] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 394] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 394] <... futex resumed>) = 1 [pid 394] sendmsg(-1, 0x20000000, 0 [pid 391] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 394] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 391] exit_group(0 [pid 394] <... futex resumed>) = ? [pid 391] <... exit_group resumed>) = ? [pid 392] <... sendfile resumed>) = ? [pid 394] +++ exited with 0 +++ [pid 392] +++ exited with 0 +++ [pid 391] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=391, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./22/binderfs") = 0 umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./22/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 395 ./strace-static-x86_64: Process 395 attached [pid 395] set_robust_list(0x555556b826a0, 24) = 0 [pid 395] chdir("./23") = 0 [pid 395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 395] setpgid(0, 0) = 0 [pid 395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 395] write(3, "1000", 4) = 4 [pid 395] close(3) = 0 [pid 395] symlink("/dev/binderfs", "./binderfs") = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 395] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 395] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 395] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[396]}, 88) = 396 [pid 395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 395] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 396 attached [pid 396] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 396] memfd_create("syzkaller", 0) = 3 [pid 396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 396] munmap(0x7f9627d89000, 262144) = 0 [pid 396] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 396] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 396] close(3) = 0 [pid 396] mkdir("./file0", 0777) = 0 [pid 396] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 396] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 396] chdir("./file0") = 0 [pid 396] ioctl(4, LOOP_CLR_FD) = 0 [pid 396] close(4) = 0 [pid 396] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 396] <... futex resumed>) = 1 [pid 396] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 396] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 396] <... futex resumed>) = 1 [pid 396] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 396] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 396] <... futex resumed>) = 1 [pid 396] creat("./bus", 000) = 6 [pid 396] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 396] <... futex resumed>) = 1 [pid 396] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 396] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 396] <... futex resumed>) = 1 [pid 396] open("./bus", O_RDONLY) = 7 [pid 396] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 396] <... futex resumed>) = 1 [ 27.208907][ T396] loop0: detected capacity change from 0 to 512 [ 27.218278][ T396] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 27.231534][ T396] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 27.241315][ T396] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 396] sendfile(6, 7, NULL, 140737974943952 [pid 395] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 395] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 395] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 395] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[398]}, 88) = 398 [pid 395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 395] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 398 attached [pid 398] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 398] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 398] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 398] <... futex resumed>) = 1 [pid 398] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 398] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 398] <... futex resumed>) = 1 [pid 398] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 395] exit_group(0) = ? [pid 398] <... futex resumed>) = ? [pid 398] +++ exited with 0 +++ [pid 396] <... sendfile resumed>) = ? [pid 396] +++ exited with 0 +++ [pid 395] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=395, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./23/binderfs") = 0 umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./23/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./23") = 0 mkdir("./24", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 399 ./strace-static-x86_64: Process 399 attached [pid 399] set_robust_list(0x555556b826a0, 24) = 0 [pid 399] chdir("./24") = 0 [pid 399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 399] setpgid(0, 0) = 0 [pid 399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 399] write(3, "1000", 4) = 4 [pid 399] close(3) = 0 [pid 399] symlink("/dev/binderfs", "./binderfs") = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 399] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 399] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 399] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[400]}, 88) = 400 [pid 399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 400 attached [pid 400] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 400] memfd_create("syzkaller", 0) = 3 [pid 400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 400] munmap(0x7f9627d89000, 262144) = 0 [pid 400] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 400] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 400] close(3) = 0 [pid 400] mkdir("./file0", 0777) = 0 [pid 400] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 400] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 400] chdir("./file0") = 0 [pid 400] ioctl(4, LOOP_CLR_FD) = 0 [pid 400] close(4) = 0 [pid 400] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 400] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 400] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] creat("./bus", 000) = 6 [pid 400] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 400] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] open("./bus", O_RDONLY) = 7 [pid 400] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [ 27.514195][ T400] loop0: detected capacity change from 0 to 512 [ 27.522096][ T400] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 27.535106][ T400] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 27.544876][ T400] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 400] sendfile(6, 7, NULL, 140737974943952 [pid 399] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 399] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 399] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 399] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[402]}, 88) = 402 ./strace-static-x86_64: Process 402 attached [pid 402] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... mmap resumed>) = 0x20000000 [pid 402] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... futex resumed>) = 1 [pid 402] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 402] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 402] <... futex resumed>) = 1 [pid 402] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] exit_group(0 [pid 402] <... futex resumed>) = ? [pid 399] <... exit_group resumed>) = ? [pid 402] +++ exited with 0 +++ [pid 400] <... sendfile resumed>) = ? [pid 400] +++ exited with 0 +++ [pid 399] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=399, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./24/binderfs") = 0 umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./24/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./24") = 0 mkdir("./25", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 404 ./strace-static-x86_64: Process 404 attached [pid 404] set_robust_list(0x555556b826a0, 24) = 0 [pid 404] chdir("./25") = 0 [pid 404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 404] setpgid(0, 0) = 0 [pid 404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 404] write(3, "1000", 4) = 4 [pid 404] close(3) = 0 [pid 404] symlink("/dev/binderfs", "./binderfs") = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 404] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 404] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 404] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[405]}, 88) = 405 ./strace-static-x86_64: Process 405 attached [pid 404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 404] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 405] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 405] memfd_create("syzkaller", 0) = 3 [pid 405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 405] munmap(0x7f9627d89000, 262144) = 0 [pid 405] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 405] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 405] close(3) = 0 [pid 405] mkdir("./file0", 0777) = 0 [pid 405] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 405] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 405] chdir("./file0") = 0 [pid 405] ioctl(4, LOOP_CLR_FD) = 0 [pid 405] close(4) = 0 [pid 405] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 405] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 405] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 405] creat("./bus", 000 [pid 404] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... creat resumed>) = 6 [pid 405] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 405] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] open("./bus", O_RDONLY) = 7 [pid 405] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [ 27.812539][ T405] loop0: detected capacity change from 0 to 512 [ 27.821508][ T405] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 27.834544][ T405] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 27.844256][ T405] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 405] sendfile(6, 7, NULL, 140737974943952 [pid 404] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 404] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 404] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 404] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 407 attached [pid 407] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 407] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] <... clone3 resumed> => {parent_tid=[407]}, 88) = 407 [pid 404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 404] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 407] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 404] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] <... mmap resumed>) = 0x20000000 [pid 407] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 404] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 407] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] <... futex resumed>) = 0 [pid 404] exit_group(0 [pid 407] <... futex resumed>) = ? [pid 404] <... exit_group resumed>) = ? [pid 407] +++ exited with 0 +++ [pid 405] <... sendfile resumed>) = ? [pid 405] +++ exited with 0 +++ [pid 404] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=404, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./25/binderfs") = 0 umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./25/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./25") = 0 mkdir("./26", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 408 ./strace-static-x86_64: Process 408 attached [pid 408] set_robust_list(0x555556b826a0, 24) = 0 [pid 408] chdir("./26") = 0 [pid 408] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 408] setpgid(0, 0) = 0 [pid 408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 408] write(3, "1000", 4) = 4 [pid 408] close(3) = 0 [pid 408] symlink("/dev/binderfs", "./binderfs") = 0 [pid 408] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 408] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 408] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 408] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 408] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 409 attached [pid 409] set_robust_list(0x7f96301a99a0, 24 [pid 408] <... clone3 resumed> => {parent_tid=[409]}, 88) = 409 [pid 409] <... set_robust_list resumed>) = 0 [pid 408] rt_sigprocmask(SIG_SETMASK, [], [pid 409] rt_sigprocmask(SIG_SETMASK, [], [pid 408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 408] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 409] memfd_create("syzkaller", 0) = 3 [pid 409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 409] munmap(0x7f9627d89000, 262144) = 0 [pid 409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 409] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 409] close(3) = 0 [pid 409] mkdir("./file0", 0777) = 0 [pid 409] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 409] chdir("./file0") = 0 [pid 409] ioctl(4, LOOP_CLR_FD) = 0 [pid 409] close(4) = 0 [pid 409] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 409] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 409] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] creat("./bus", 000) = 6 [pid 409] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 409] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 409] open("./bus", O_RDONLY [pid 408] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... open resumed>) = 7 [pid 409] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 409] sendfile(6, 7, NULL, 140737974943952 [pid 408] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 28.125068][ T409] loop0: detected capacity change from 0 to 512 [ 28.133116][ T409] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 28.146624][ T409] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 28.157488][ T409] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 408] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 408] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 408] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 408] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 408] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 411 attached => {parent_tid=[411]}, 88) = 411 [pid 411] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 408] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 408] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 408] <... futex resumed>) = 0 [pid 411] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 408] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... mmap resumed>) = 0x20000000 [pid 411] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 411] <... futex resumed>) = 1 [pid 408] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 411] sendmsg(-1, 0x20000000, 0 [pid 408] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 411] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 411] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 408] exit_group(0 [pid 411] <... futex resumed>) = ? [pid 408] <... exit_group resumed>) = ? [pid 411] +++ exited with 0 +++ [pid 409] <... sendfile resumed>) = ? [pid 409] +++ exited with 0 +++ [pid 408] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=408, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./26/binderfs") = 0 umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./26/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./26") = 0 mkdir("./27", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 412 ./strace-static-x86_64: Process 412 attached [pid 412] set_robust_list(0x555556b826a0, 24) = 0 [pid 412] chdir("./27") = 0 [pid 412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 412] setpgid(0, 0) = 0 [pid 412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 412] write(3, "1000", 4) = 4 [pid 412] close(3) = 0 [pid 412] symlink("/dev/binderfs", "./binderfs") = 0 [pid 412] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 412] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 412] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[413]}, 88) = 413 [pid 412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 412] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 413 attached [pid 413] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 413] memfd_create("syzkaller", 0) = 3 [pid 413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 413] munmap(0x7f9627d89000, 262144) = 0 [pid 413] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 413] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 413] close(3) = 0 [pid 413] mkdir("./file0", 0777) = 0 [pid 413] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 413] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 413] chdir("./file0") = 0 [pid 413] ioctl(4, LOOP_CLR_FD) = 0 [pid 413] close(4) = 0 [pid 413] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 413] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 0 [pid 413] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 413] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 413] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] creat("./bus", 000) = 6 [pid 413] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 413] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] open("./bus", O_RDONLY) = 7 [pid 413] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [ 28.412174][ T413] loop0: detected capacity change from 0 to 512 [ 28.420083][ T413] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 28.432959][ T413] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 28.442545][ T413] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 413] sendfile(6, 7, NULL, 140737974943952 [pid 412] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 412] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 412] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 415 attached => {parent_tid=[415]}, 88) = 415 [pid 412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 412] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 415] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 415] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 415] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 415] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 415] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] exit_group(0 [pid 415] <... futex resumed>) = ? [pid 412] <... exit_group resumed>) = ? [pid 415] +++ exited with 0 +++ [pid 413] <... sendfile resumed>) = ? [pid 413] +++ exited with 0 +++ [pid 412] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=412, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./27/binderfs") = 0 umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./27/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./27") = 0 mkdir("./28", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 417 ./strace-static-x86_64: Process 417 attached [pid 417] set_robust_list(0x555556b826a0, 24) = 0 [pid 417] chdir("./28") = 0 [pid 417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 417] setpgid(0, 0) = 0 [pid 417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 417] write(3, "1000", 4) = 4 [pid 417] close(3) = 0 [pid 417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 417] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 417] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 417] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 417] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 418 attached => {parent_tid=[418]}, 88) = 418 [pid 417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 417] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 418] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 418] memfd_create("syzkaller", 0) = 3 [pid 418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 418] munmap(0x7f9627d89000, 262144) = 0 [pid 418] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 418] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 418] close(3) = 0 [pid 418] mkdir("./file0", 0777) = 0 [pid 418] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 418] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 418] chdir("./file0") = 0 [pid 418] ioctl(4, LOOP_CLR_FD) = 0 [pid 418] close(4) = 0 [pid 418] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 0 [pid 418] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 418] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 418] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 418] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 418] creat("./bus", 000 [pid 417] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... creat resumed>) = 6 [pid 418] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 418] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] open("./bus", O_RDONLY) = 7 [pid 418] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 28.721528][ T418] loop0: detected capacity change from 0 to 512 [ 28.729808][ T418] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 28.742741][ T418] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 28.752809][ T418] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 418] sendfile(6, 7, NULL, 140737974943952 [pid 417] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 417] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 417] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 417] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[420]}, 88) = 420 [pid 417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 417] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 420 attached [pid 420] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 420] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 420] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 420] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 420] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 420] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] exit_group(0 [pid 420] <... futex resumed>) = ? [pid 417] <... exit_group resumed>) = ? [pid 420] +++ exited with 0 +++ [pid 418] <... sendfile resumed>) = ? [pid 418] +++ exited with 0 +++ [pid 417] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=417, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./28/binderfs") = 0 umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./28/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./28") = 0 mkdir("./29", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 421 ./strace-static-x86_64: Process 421 attached [pid 421] set_robust_list(0x555556b826a0, 24) = 0 [pid 421] chdir("./29") = 0 [pid 421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 421] setpgid(0, 0) = 0 [pid 421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 421] write(3, "1000", 4) = 4 [pid 421] close(3) = 0 [pid 421] symlink("/dev/binderfs", "./binderfs") = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 421] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 421] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 421] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 421] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[422]}, 88) = 422 [pid 421] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 421] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 422 attached [pid 422] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 422] memfd_create("syzkaller", 0) = 3 [pid 422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 422] munmap(0x7f9627d89000, 262144) = 0 [pid 422] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 422] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 422] close(3) = 0 [pid 422] mkdir("./file0", 0777) = 0 [pid 422] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 422] chdir("./file0") = 0 [pid 422] ioctl(4, LOOP_CLR_FD) = 0 [pid 422] close(4) = 0 [pid 422] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 1 [pid 422] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 422] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 1 [pid 422] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 422] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 1 [pid 422] creat("./bus", 000) = 6 [pid 422] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 1 [pid 422] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 422] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 1 [pid 422] open("./bus", O_RDONLY) = 7 [pid 422] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 1 [ 29.051191][ T422] loop0: detected capacity change from 0 to 512 [ 29.059371][ T422] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 29.073141][ T422] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 29.082908][ T422] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 422] sendfile(6, 7, NULL, 140737974943952 [pid 421] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 421] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 421] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 421] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 421] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[424]}, 88) = 424 [pid 421] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 421] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 424 attached [pid 424] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 424] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 424] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 424] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 424] <... futex resumed>) = 1 [pid 424] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 421] exit_group(0 [pid 424] <... futex resumed>) = ? [pid 421] <... exit_group resumed>) = ? [pid 422] <... sendfile resumed>) = ? [pid 422] +++ exited with 0 +++ [pid 424] +++ exited with 0 +++ [pid 421] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=421, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./29/binderfs") = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./29/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./29") = 0 mkdir("./30", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 425 ./strace-static-x86_64: Process 425 attached [pid 425] set_robust_list(0x555556b826a0, 24) = 0 [pid 425] chdir("./30") = 0 [pid 425] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 425] setpgid(0, 0) = 0 [pid 425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 425] write(3, "1000", 4) = 4 [pid 425] close(3) = 0 [pid 425] symlink("/dev/binderfs", "./binderfs") = 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 425] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 425] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 425] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 426 attached => {parent_tid=[426]}, 88) = 426 [pid 426] set_robust_list(0x7f96301a99a0, 24 [pid 425] rt_sigprocmask(SIG_SETMASK, [], [pid 426] <... set_robust_list resumed>) = 0 [pid 426] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 426] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 425] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 426] memfd_create("syzkaller", 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 426] <... memfd_create resumed>) = 3 [pid 426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 426] munmap(0x7f9627d89000, 262144) = 0 [pid 426] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 426] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 426] close(3) = 0 [pid 426] mkdir("./file0", 0777) = 0 [pid 426] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 426] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 426] chdir("./file0") = 0 [pid 426] ioctl(4, LOOP_CLR_FD) = 0 [pid 426] close(4) = 0 [pid 426] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] <... futex resumed>) = 1 [pid 426] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 426] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] <... futex resumed>) = 1 [pid 426] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 426] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] <... futex resumed>) = 1 [pid 426] creat("./bus", 000) = 6 [pid 426] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] <... futex resumed>) = 1 [pid 426] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 426] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] <... futex resumed>) = 1 [pid 426] open("./bus", O_RDONLY) = 7 [pid 426] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] <... futex resumed>) = 1 [ 29.391820][ T426] loop0: detected capacity change from 0 to 512 [ 29.400074][ T426] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 29.413315][ T426] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 29.423012][ T426] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 426] sendfile(6, 7, NULL, 140737974943952 [pid 425] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 425] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 425] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 425] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 429 attached => {parent_tid=[429]}, 88) = 429 [pid 429] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 429] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 425] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 429] <... futex resumed>) = 0 [pid 429] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 429] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 425] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 429] <... futex resumed>) = 0 [pid 425] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 429] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 429] <... futex resumed>) = 1 [pid 429] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] exit_group(0) = ? [pid 429] <... futex resumed>) = ? [pid 429] +++ exited with 0 +++ [pid 426] <... sendfile resumed>) = ? [pid 426] +++ exited with 0 +++ [pid 425] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=425, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./30/binderfs") = 0 umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./30/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./30") = 0 mkdir("./31", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 431 ./strace-static-x86_64: Process 431 attached [pid 431] set_robust_list(0x555556b826a0, 24) = 0 [pid 431] chdir("./31") = 0 [pid 431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 431] setpgid(0, 0) = 0 [pid 431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 431] write(3, "1000", 4) = 4 [pid 431] close(3) = 0 [pid 431] symlink("/dev/binderfs", "./binderfs") = 0 [pid 431] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 431] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 431] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 431] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 432 attached => {parent_tid=[432]}, 88) = 432 [pid 431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 432] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 432] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 432] memfd_create("syzkaller", 0) = 3 [pid 432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 432] munmap(0x7f9627d89000, 262144) = 0 [pid 432] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 432] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 432] close(3) = 0 [pid 432] mkdir("./file0", 0777) = 0 [pid 432] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 432] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 432] chdir("./file0") = 0 [pid 432] ioctl(4, LOOP_CLR_FD) = 0 [pid 432] close(4) = 0 [pid 432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] creat("./bus", 000) = 6 [pid 432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 431] <... futex resumed>) = 0 [pid 432] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] <... futex resumed>) = 0 [pid 432] open("./bus", O_RDONLY [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... open resumed>) = 7 [pid 432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 0 [ 29.710213][ T432] loop0: detected capacity change from 0 to 512 [ 29.719118][ T432] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 29.732090][ T432] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 29.741879][ T432] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 432] sendfile(6, 7, NULL, 140737974943952 [pid 431] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 431] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 431] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 431] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[434]}, 88) = 434 [pid 431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 431] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 434 attached [pid 434] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 434] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 434] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 1 [pid 434] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 434] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 434] <... futex resumed>) = 1 [pid 434] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 431] exit_group(0 [pid 434] <... futex resumed>) = ? [pid 431] <... exit_group resumed>) = ? [pid 434] +++ exited with 0 +++ [pid 432] <... sendfile resumed>) = ? [pid 432] +++ exited with 0 +++ [pid 431] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=431, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./31/binderfs") = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./31/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./31") = 0 mkdir("./32", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 435 ./strace-static-x86_64: Process 435 attached [pid 435] set_robust_list(0x555556b826a0, 24) = 0 [pid 435] chdir("./32") = 0 [pid 435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 435] setpgid(0, 0) = 0 [pid 435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 435] write(3, "1000", 4) = 4 [pid 435] close(3) = 0 [pid 435] symlink("/dev/binderfs", "./binderfs") = 0 [pid 435] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 435] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 435] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 435] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 435] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 436 attached => {parent_tid=[436]}, 88) = 436 [pid 435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 435] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 436] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 436] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 436] memfd_create("syzkaller", 0) = 3 [pid 436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 436] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 436] munmap(0x7f9627d89000, 262144) = 0 [pid 436] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 436] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 436] close(3) = 0 [pid 436] mkdir("./file0", 0777) = 0 [pid 436] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 436] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 436] chdir("./file0") = 0 [pid 436] ioctl(4, LOOP_CLR_FD) = 0 [pid 436] close(4) = 0 [pid 436] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 0 [pid 436] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 436] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 1 [pid 436] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 436] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 1 [pid 436] creat("./bus", 000) = 6 [pid 436] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 1 [pid 436] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 436] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 1 [pid 436] open("./bus", O_RDONLY) = 7 [pid 436] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 1 [ 30.013112][ T436] loop0: detected capacity change from 0 to 512 [ 30.021424][ T436] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 30.034306][ T436] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 30.043939][ T436] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 436] sendfile(6, 7, NULL, 140737974943952 [pid 435] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 435] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 435] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 435] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 435] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 438 attached [pid 438] set_robust_list(0x7f9627dc89a0, 24 [pid 435] <... clone3 resumed> => {parent_tid=[438]}, 88) = 438 [pid 435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 435] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] <... set_robust_list resumed>) = 0 [pid 435] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 438] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... futex resumed>) = 1 [pid 438] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 438] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 438] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] exit_group(0) = ? [pid 438] <... futex resumed>) = ? [pid 438] +++ exited with 0 +++ [pid 436] <... sendfile resumed>) = ? [pid 436] +++ exited with 0 +++ [pid 435] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=435, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./32/binderfs") = 0 umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./32/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./32") = 0 mkdir("./33", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 439 ./strace-static-x86_64: Process 439 attached [pid 439] set_robust_list(0x555556b826a0, 24) = 0 [pid 439] chdir("./33") = 0 [pid 439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 439] setpgid(0, 0) = 0 [pid 439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 439] write(3, "1000", 4) = 4 [pid 439] close(3) = 0 [pid 439] symlink("/dev/binderfs", "./binderfs") = 0 [pid 439] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 439] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 439] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 439] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[440]}, 88) = 440 [pid 439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 440 attached [pid 440] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 440] memfd_create("syzkaller", 0) = 3 [pid 440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 440] munmap(0x7f9627d89000, 262144) = 0 [pid 440] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 440] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 440] close(3) = 0 [pid 440] mkdir("./file0", 0777) = 0 [ 30.304818][ T440] loop0: detected capacity change from 0 to 512 [ 30.323510][ T440] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 30.336504][ T440] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 440] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 440] chdir("./file0") = 0 [pid 440] ioctl(4, LOOP_CLR_FD) = 0 [pid 440] close(4) = 0 [pid 440] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... futex resumed>) = 1 [pid 440] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 440] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... futex resumed>) = 1 [pid 440] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 440] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... futex resumed>) = 1 [pid 440] creat("./bus", 000) = 6 [pid 440] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 440] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... futex resumed>) = 0 [pid 440] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 440] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] open("./bus", O_RDONLY) = 7 [pid 440] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] sendfile(6, 7, NULL, 140737974943952 [pid 439] <... futex resumed>) = 0 [ 30.346158][ T440] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 439] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 439] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 439] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 439] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[442]}, 88) = 442 [pid 439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 442 attached [pid 442] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 442] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 442] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 442] <... futex resumed>) = 1 [pid 442] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 442] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 442] <... futex resumed>) = 1 [pid 442] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] exit_group(0 [pid 442] <... futex resumed>) = ? [pid 439] <... exit_group resumed>) = ? [pid 440] <... sendfile resumed>) = ? [pid 440] +++ exited with 0 +++ [pid 442] +++ exited with 0 +++ [pid 439] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=439, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./33/binderfs") = 0 umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./33/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./33") = 0 mkdir("./34", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 443 ./strace-static-x86_64: Process 443 attached [pid 443] set_robust_list(0x555556b826a0, 24) = 0 [pid 443] chdir("./34") = 0 [pid 443] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 443] setpgid(0, 0) = 0 [pid 443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 443] write(3, "1000", 4) = 4 [pid 443] close(3) = 0 [pid 443] symlink("/dev/binderfs", "./binderfs") = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 443] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 443] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[444]}, 88) = 444 [pid 443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 443] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 444 attached [pid 444] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 444] memfd_create("syzkaller", 0) = 3 [pid 444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 444] munmap(0x7f9627d89000, 262144) = 0 [pid 444] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 444] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 444] close(3) = 0 [pid 444] mkdir("./file0", 0777) = 0 [pid 444] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 444] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 444] chdir("./file0") = 0 [pid 444] ioctl(4, LOOP_CLR_FD) = 0 [pid 444] close(4) = 0 [pid 444] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... futex resumed>) = 1 [pid 444] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 444] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... futex resumed>) = 1 [pid 444] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 444] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... futex resumed>) = 1 [pid 444] creat("./bus", 000) = 6 [pid 444] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... futex resumed>) = 1 [pid 444] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 444] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... futex resumed>) = 1 [pid 444] open("./bus", O_RDONLY) = 7 [pid 444] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... futex resumed>) = 1 [ 30.582129][ T444] loop0: detected capacity change from 0 to 512 [ 30.591099][ T444] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 30.604298][ T444] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 30.614181][ T444] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 444] sendfile(6, 7, NULL, 140737974943952 [pid 443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 443] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 443] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 447 attached => {parent_tid=[447]}, 88) = 447 [pid 443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 443] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 447] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 447] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 447] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 447] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 443] <... futex resumed>) = 0 [pid 447] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 443] exit_group(0 [pid 447] <... futex resumed>) = ? [pid 443] <... exit_group resumed>) = ? [pid 447] +++ exited with 0 +++ [pid 444] <... sendfile resumed>) = ? [pid 444] +++ exited with 0 +++ [pid 443] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=443, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./34/binderfs") = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./34/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./34") = 0 mkdir("./35", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 448 ./strace-static-x86_64: Process 448 attached [pid 448] set_robust_list(0x555556b826a0, 24) = 0 [pid 448] chdir("./35") = 0 [pid 448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 448] setpgid(0, 0) = 0 [pid 448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 448] write(3, "1000", 4) = 4 [pid 448] close(3) = 0 [pid 448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 448] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 448] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 448] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[449]}, 88) = 449 [pid 448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 448] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 449 attached [pid 449] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 449] memfd_create("syzkaller", 0) = 3 [pid 449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 449] munmap(0x7f9627d89000, 262144) = 0 [pid 449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 449] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 449] close(3) = 0 [pid 449] mkdir("./file0", 0777) = 0 [pid 449] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 449] chdir("./file0") = 0 [pid 449] ioctl(4, LOOP_CLR_FD) = 0 [pid 449] close(4) = 0 [pid 449] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 449] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 449] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] creat("./bus", 000) = 6 [pid 449] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 449] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] open("./bus", O_RDONLY) = 7 [pid 449] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 449] <... futex resumed>) = 1 [pid 448] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] sendfile(6, 7, NULL, 140737974943952 [pid 448] <... futex resumed>) = 0 [ 30.849973][ T449] loop0: detected capacity change from 0 to 512 [ 30.860171][ T449] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 30.873895][ T449] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 30.883818][ T449] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 448] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 448] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 451 attached => {parent_tid=[451]}, 88) = 451 [pid 451] set_robust_list(0x7f9627dc89a0, 24 [pid 448] rt_sigprocmask(SIG_SETMASK, [], [pid 451] <... set_robust_list resumed>) = 0 [pid 451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 451] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 448] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... mmap resumed>) = 0x20000000 [pid 451] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 451] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 451] <... futex resumed>) = 1 [pid 451] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] exit_group(0 [pid 451] <... futex resumed>) = ? [pid 448] <... exit_group resumed>) = ? [pid 449] <... sendfile resumed>) = ? [pid 451] +++ exited with 0 +++ [pid 449] +++ exited with 0 +++ [pid 448] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=448, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./35/binderfs") = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./35/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./35") = 0 mkdir("./36", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 452 ./strace-static-x86_64: Process 452 attached [pid 452] set_robust_list(0x555556b826a0, 24) = 0 [pid 452] chdir("./36") = 0 [pid 452] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 452] setpgid(0, 0) = 0 [pid 452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 452] write(3, "1000", 4) = 4 [pid 452] close(3) = 0 [pid 452] symlink("/dev/binderfs", "./binderfs") = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 452] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 452] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 452] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 452] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[453]}, 88) = 453 [pid 452] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 452] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 453 attached [pid 453] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 453] memfd_create("syzkaller", 0) = 3 [pid 453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 453] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 453] munmap(0x7f9627d89000, 262144) = 0 [pid 453] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 453] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 453] close(3) = 0 [pid 453] mkdir("./file0", 0777) = 0 [pid 453] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 453] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 453] chdir("./file0") = 0 [pid 453] ioctl(4, LOOP_CLR_FD) = 0 [pid 453] close(4) = 0 [pid 453] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 453] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 453] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] creat("./bus", 000) = 6 [pid 453] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 453] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] open("./bus", O_RDONLY) = 7 [pid 453] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [ 31.169219][ T453] loop0: detected capacity change from 0 to 512 [ 31.178661][ T453] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 31.194288][ T453] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 31.204673][ T453] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 453] sendfile(6, 7, NULL, 140737974943952 [pid 452] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 452] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 452] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 452] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 452] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[455]}, 88) = 455 [pid 452] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 455 attached NULL, 8) = 0 [pid 455] set_robust_list(0x7f9627dc89a0, 24 [pid 452] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... set_robust_list resumed>) = 0 [pid 452] <... futex resumed>) = 0 [pid 455] rt_sigprocmask(SIG_SETMASK, [], [pid 452] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 455] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 455] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 455] <... futex resumed>) = 1 [pid 452] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 455] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 455] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 452] <... futex resumed>) = 0 [pid 455] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 452] exit_group(0) = ? [pid 455] <... futex resumed>) = ? [pid 455] +++ exited with 0 +++ [pid 453] <... sendfile resumed>) = ? [pid 453] +++ exited with 0 +++ [pid 452] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=452, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./36/binderfs") = 0 umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./36/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./36") = 0 mkdir("./37", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 456 ./strace-static-x86_64: Process 456 attached [pid 456] set_robust_list(0x555556b826a0, 24) = 0 [pid 456] chdir("./37") = 0 [pid 456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 456] setpgid(0, 0) = 0 [pid 456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 456] write(3, "1000", 4) = 4 [pid 456] close(3) = 0 [pid 456] symlink("/dev/binderfs", "./binderfs") = 0 [pid 456] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 456] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 456] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 456] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[457]}, 88) = 457 [pid 456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 456] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 457 attached [pid 457] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 457] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 457] memfd_create("syzkaller", 0) = 3 [pid 457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 457] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 457] munmap(0x7f9627d89000, 262144) = 0 [pid 457] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 457] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 457] close(3) = 0 [pid 457] mkdir("./file0", 0777) = 0 [pid 457] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 457] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 457] chdir("./file0") = 0 [pid 457] ioctl(4, LOOP_CLR_FD) = 0 [pid 457] close(4) = 0 [pid 457] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 457] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 457] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] creat("./bus", 000) = 6 [pid 457] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 457] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 457] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] open("./bus", O_RDONLY) = 7 [pid 457] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 457] sendfile(6, 7, NULL, 140737974943952 [pid 456] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 31.489189][ T457] loop0: detected capacity change from 0 to 512 [ 31.497702][ T457] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 31.510871][ T457] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 31.521479][ T457] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 456] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 456] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 456] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[460]}, 88) = 460 [pid 456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 460 attached [pid 460] set_robust_list(0x7f9627dc89a0, 24 [pid 456] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... set_robust_list resumed>) = 0 [pid 456] <... futex resumed>) = 0 [pid 460] rt_sigprocmask(SIG_SETMASK, [], [pid 456] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 460] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 460] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 456] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 460] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 460] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] exit_group(0 [pid 460] <... futex resumed>) = ? [pid 456] <... exit_group resumed>) = ? [pid 457] <... sendfile resumed>) = ? [pid 457] +++ exited with 0 +++ [pid 460] +++ exited with 0 +++ [pid 456] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=456, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./37/binderfs") = 0 umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./37/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./37") = 0 mkdir("./38", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 462 ./strace-static-x86_64: Process 462 attached [pid 462] set_robust_list(0x555556b826a0, 24) = 0 [pid 462] chdir("./38") = 0 [pid 462] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 462] setpgid(0, 0) = 0 [pid 462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 462] write(3, "1000", 4) = 4 [pid 462] close(3) = 0 [pid 462] symlink("/dev/binderfs", "./binderfs") = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 462] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 462] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 462] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[463]}, 88) = 463 [pid 462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 462] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 463 attached [pid 463] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 463] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 463] memfd_create("syzkaller", 0) = 3 [pid 463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 463] munmap(0x7f9627d89000, 262144) = 0 [pid 463] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 463] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 463] close(3) = 0 [pid 463] mkdir("./file0", 0777) = 0 [pid 463] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 463] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 463] chdir("./file0") = 0 [pid 463] ioctl(4, LOOP_CLR_FD) = 0 [pid 463] close(4) = 0 [pid 463] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [pid 463] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 463] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [pid 463] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 463] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [pid 463] creat("./bus", 000) = 6 [pid 463] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [pid 463] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 463] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [pid 463] open("./bus", O_RDONLY) = 7 [pid 463] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [ 31.807876][ T463] loop0: detected capacity change from 0 to 512 [ 31.815820][ T463] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 31.828775][ T463] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 31.838546][ T463] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 463] sendfile(6, 7, NULL, 140737974943952 [pid 462] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 462] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 462] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 462] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[465]}, 88) = 465 [pid 462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 462] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 465 attached [pid 465] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 465] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 465] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 1 [pid 465] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 465] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 465] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] exit_group(0 [pid 465] <... futex resumed>) = ? [pid 462] <... exit_group resumed>) = ? [pid 465] +++ exited with 0 +++ [pid 463] <... sendfile resumed>) = ? [pid 463] +++ exited with 0 +++ [pid 462] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=462, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./38/binderfs") = 0 umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./38/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./38") = 0 mkdir("./39", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 466 ./strace-static-x86_64: Process 466 attached [pid 466] set_robust_list(0x555556b826a0, 24) = 0 [pid 466] chdir("./39") = 0 [pid 466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 466] setpgid(0, 0) = 0 [pid 466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 466] write(3, "1000", 4) = 4 [pid 466] close(3) = 0 [pid 466] symlink("/dev/binderfs", "./binderfs") = 0 [pid 466] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 466] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 466] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 466] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 467 attached => {parent_tid=[467]}, 88) = 467 [pid 466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 467] set_robust_list(0x7f96301a99a0, 24 [pid 466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... set_robust_list resumed>) = 0 [pid 466] <... futex resumed>) = 0 [pid 467] rt_sigprocmask(SIG_SETMASK, [], [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 467] memfd_create("syzkaller", 0) = 3 [pid 467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 467] munmap(0x7f9627d89000, 262144) = 0 [pid 467] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 467] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 467] close(3) = 0 [pid 467] mkdir("./file0", 0777) = 0 [pid 467] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 467] chdir("./file0") = 0 [pid 467] ioctl(4, LOOP_CLR_FD) = 0 [pid 467] close(4) = 0 [pid 467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 467] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... open resumed>) = 4 [pid 467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 1 [pid 467] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... open resumed>) = 5 [pid 467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... futex resumed>) = 1 [pid 467] creat("./bus", 000) = 6 [pid 467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... futex resumed>) = 1 [pid 467] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] open("./bus", O_RDONLY) = 7 [pid 467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 32.081128][ T467] loop0: detected capacity change from 0 to 512 [ 32.089426][ T467] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 32.102480][ T467] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 32.112241][ T467] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 467] sendfile(6, 7, NULL, 140737974943952 [pid 466] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 466] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 466] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 466] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 469 attached [pid 469] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 469] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 466] <... clone3 resumed> => {parent_tid=[469]}, 88) = 469 [pid 466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 466] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 469] <... futex resumed>) = 0 [pid 469] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 466] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... mmap resumed>) = 0x20000000 [pid 469] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 469] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 466] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 469] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 469] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 466] exit_group(0 [pid 469] <... futex resumed>) = ? [pid 466] <... exit_group resumed>) = ? [pid 469] +++ exited with 0 +++ [pid 467] <... sendfile resumed>) = ? [pid 467] +++ exited with 0 +++ [pid 466] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=466, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./39/binderfs") = 0 umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./39/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./39") = 0 mkdir("./40", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 470 ./strace-static-x86_64: Process 470 attached [pid 470] set_robust_list(0x555556b826a0, 24) = 0 [pid 470] chdir("./40") = 0 [pid 470] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 470] setpgid(0, 0) = 0 [pid 470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 470] write(3, "1000", 4) = 4 [pid 470] close(3) = 0 [pid 470] symlink("/dev/binderfs", "./binderfs") = 0 [pid 470] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 470] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 470] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 470] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[471]}, 88) = 471 ./strace-static-x86_64: Process 471 attached [pid 471] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 471] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 471] memfd_create("syzkaller", 0) = 3 [pid 471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 471] munmap(0x7f9627d89000, 262144) = 0 [pid 471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 471] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 471] close(3) = 0 [pid 471] mkdir("./file0", 0777) = 0 [pid 471] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 471] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 471] chdir("./file0") = 0 [pid 471] ioctl(4, LOOP_CLR_FD) = 0 [pid 471] close(4) = 0 [pid 471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 0 [pid 471] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] creat("./bus", 000) = 6 [pid 471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] open("./bus", O_RDONLY) = 7 [pid 471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [ 32.413524][ T471] loop0: detected capacity change from 0 to 512 [ 32.421756][ T471] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 32.434785][ T471] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 32.444450][ T471] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 471] sendfile(6, 7, NULL, 140737974943952 [pid 470] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 470] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 470] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 470] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 473 attached => {parent_tid=[473]}, 88) = 473 [pid 470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 470] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 473] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 473] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 473] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 473] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] <... futex resumed>) = 0 [pid 473] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] exit_group(0 [pid 473] <... futex resumed>) = ? [pid 470] <... exit_group resumed>) = ? [pid 473] +++ exited with 0 +++ [pid 471] <... sendfile resumed>) = ? [pid 471] +++ exited with 0 +++ [pid 470] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=470, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./40/binderfs") = 0 umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./40/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./40") = 0 mkdir("./41", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 475 ./strace-static-x86_64: Process 475 attached [pid 475] set_robust_list(0x555556b826a0, 24) = 0 [pid 475] chdir("./41") = 0 [pid 475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 475] setpgid(0, 0) = 0 [pid 475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 475] write(3, "1000", 4) = 4 [pid 475] close(3) = 0 [pid 475] symlink("/dev/binderfs", "./binderfs") = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 475] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 475] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 475] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[476]}, 88) = 476 [pid 475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 475] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 476 attached ) = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 476] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 476] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 476] memfd_create("syzkaller", 0) = 3 [pid 476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 476] munmap(0x7f9627d89000, 262144) = 0 [pid 476] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 476] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 476] close(3) = 0 [pid 476] mkdir("./file0", 0777) = 0 [pid 476] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 476] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 476] chdir("./file0") = 0 [pid 476] ioctl(4, LOOP_CLR_FD) = 0 [pid 476] close(4) = 0 [pid 476] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] <... futex resumed>) = 1 [pid 476] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 476] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] <... futex resumed>) = 1 [pid 476] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 476] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] <... futex resumed>) = 1 [pid 476] creat("./bus", 000) = 6 [pid 476] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] <... futex resumed>) = 1 [pid 476] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 476] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] open("./bus", O_RDONLY) = 7 [pid 476] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 32.734436][ T476] loop0: detected capacity change from 0 to 512 [ 32.742422][ T476] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 32.756008][ T476] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 32.766310][ T476] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 476] sendfile(6, 7, NULL, 140737974943952 [pid 475] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 475] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 475] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 475] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 478 attached => {parent_tid=[478]}, 88) = 478 [pid 475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 475] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 478] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 478] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 478] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 478] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 478] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 475] exit_group(0) = ? [pid 476] <... sendfile resumed>) = ? [pid 476] +++ exited with 0 +++ [pid 478] <... futex resumed>) = ? [pid 478] +++ exited with 0 +++ [pid 475] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=475, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./41/binderfs") = 0 umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./41/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./41") = 0 mkdir("./42", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 479 ./strace-static-x86_64: Process 479 attached [pid 479] set_robust_list(0x555556b826a0, 24) = 0 [pid 479] chdir("./42") = 0 [pid 479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 479] setpgid(0, 0) = 0 [pid 479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 479] write(3, "1000", 4) = 4 [pid 479] close(3) = 0 [pid 479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 479] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 479] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[480]}, 88) = 480 [pid 479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 480 attached [pid 480] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 480] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 480] memfd_create("syzkaller", 0) = 3 [pid 480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 480] munmap(0x7f9627d89000, 262144) = 0 [pid 480] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 480] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 480] close(3) = 0 [pid 480] mkdir("./file0", 0777) = 0 [pid 480] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 480] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 480] chdir("./file0") = 0 [pid 480] ioctl(4, LOOP_CLR_FD) = 0 [pid 480] close(4) = 0 [pid 480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] creat("./bus", 000) = 6 [pid 480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] open("./bus", O_RDONLY) = 7 [pid 480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [ 33.047262][ T480] loop0: detected capacity change from 0 to 512 [ 33.055530][ T480] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 33.068813][ T480] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.079213][ T480] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 480] sendfile(6, 7, NULL, 140737974943952 [pid 479] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 479] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 479] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 482 attached => {parent_tid=[482]}, 88) = 482 [pid 482] set_robust_list(0x7f9627dc89a0, 24 [pid 479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 479] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... set_robust_list resumed>) = 0 [pid 479] <... futex resumed>) = 0 [pid 482] rt_sigprocmask(SIG_SETMASK, [], [pid 479] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 482] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 482] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] sendmsg(-1, 0x20000000, 0 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 482] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 482] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 482] <... futex resumed>) = 1 [pid 482] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 479] exit_group(0) = ? [pid 482] <... futex resumed>) = ? [pid 480] <... sendfile resumed>) = ? [pid 480] +++ exited with 0 +++ [pid 482] +++ exited with 0 +++ [pid 479] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=479, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./42/binderfs") = 0 umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./42/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./42") = 0 mkdir("./43", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 483 ./strace-static-x86_64: Process 483 attached [pid 483] set_robust_list(0x555556b826a0, 24) = 0 [pid 483] chdir("./43") = 0 [pid 483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 483] setpgid(0, 0) = 0 [pid 483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 483] write(3, "1000", 4) = 4 [pid 483] close(3) = 0 [pid 483] symlink("/dev/binderfs", "./binderfs") = 0 [pid 483] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 483] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 483] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[484]}, 88) = 484 [pid 483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 484 attached [pid 484] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 484] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 484] memfd_create("syzkaller", 0) = 3 [pid 484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 484] munmap(0x7f9627d89000, 262144) = 0 [pid 484] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 484] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 484] close(3) = 0 [pid 484] mkdir("./file0", 0777) = 0 [pid 484] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 484] chdir("./file0") = 0 [pid 484] ioctl(4, LOOP_CLR_FD) = 0 [pid 484] close(4) = 0 [pid 484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 484] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 0 [pid 484] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 1 [pid 484] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 1 [pid 484] creat("./bus", 000) = 6 [pid 484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 1 [pid 484] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 1 [pid 484] open("./bus", O_RDONLY) = 7 [pid 484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 1 [ 33.363824][ T484] loop0: detected capacity change from 0 to 512 [ 33.372337][ T484] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 33.385684][ T484] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.395498][ T484] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 484] sendfile(6, 7, NULL, 140737974943952 [pid 483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 483] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 483] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 486 attached => {parent_tid=[486]}, 88) = 486 [pid 483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 483] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 486] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 486] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 486] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 486] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 483] <... futex resumed>) = 0 [pid 486] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 483] exit_group(0 [pid 486] <... futex resumed>) = ? [pid 483] <... exit_group resumed>) = ? [pid 484] <... sendfile resumed>) = ? [pid 484] +++ exited with 0 +++ [pid 486] +++ exited with 0 +++ [pid 483] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=483, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./43/binderfs") = 0 umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./43/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./43") = 0 mkdir("./44", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 488 ./strace-static-x86_64: Process 488 attached [pid 488] set_robust_list(0x555556b826a0, 24) = 0 [pid 488] chdir("./44") = 0 [pid 488] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 488] setpgid(0, 0) = 0 [pid 488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 488] write(3, "1000", 4) = 4 [pid 488] close(3) = 0 [pid 488] symlink("/dev/binderfs", "./binderfs") = 0 [pid 488] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 488] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 488] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 488] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[489]}, 88) = 489 ./strace-static-x86_64: Process 489 attached [pid 488] rt_sigprocmask(SIG_SETMASK, [], [pid 489] set_robust_list(0x7f96301a99a0, 24 [pid 488] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 489] <... set_robust_list resumed>) = 0 [pid 488] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] rt_sigprocmask(SIG_SETMASK, [], [pid 488] <... futex resumed>) = 0 [pid 489] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 489] memfd_create("syzkaller", 0) = 3 [pid 489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 489] munmap(0x7f9627d89000, 262144) = 0 [pid 489] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 489] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 489] close(3) = 0 [pid 489] mkdir("./file0", 0777) = 0 [pid 489] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 489] chdir("./file0") = 0 [pid 489] ioctl(4, LOOP_CLR_FD) = 0 [pid 489] close(4) = 0 [pid 489] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 489] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 0 [pid 489] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 489] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 489] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] creat("./bus", 000) = 6 [pid 489] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 489] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 489] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 488] <... futex resumed>) = 0 [pid 489] open("./bus", O_RDONLY [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... open resumed>) = 7 [pid 489] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 489] sendfile(6, 7, NULL, 140737974943952 [pid 488] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 33.665997][ T489] loop0: detected capacity change from 0 to 512 [ 33.674501][ T489] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 33.687624][ T489] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.697573][ T489] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 488] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 488] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 488] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 491 attached => {parent_tid=[491]}, 88) = 491 [pid 488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 488] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 491] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 491] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 491] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 491] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 491] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] exit_group(0) = ? [pid 491] <... futex resumed>) = ? [pid 489] <... sendfile resumed>) = ? [pid 489] +++ exited with 0 +++ [pid 491] +++ exited with 0 +++ [pid 488] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=488, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./44/binderfs") = 0 umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./44/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./44") = 0 mkdir("./45", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 492 ./strace-static-x86_64: Process 492 attached [pid 492] set_robust_list(0x555556b826a0, 24) = 0 [pid 492] chdir("./45") = 0 [pid 492] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 492] setpgid(0, 0) = 0 [pid 492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 492] write(3, "1000", 4) = 4 [pid 492] close(3) = 0 [pid 492] symlink("/dev/binderfs", "./binderfs") = 0 [pid 492] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 492] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 492] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[493]}, 88) = 493 [pid 492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 493 attached [pid 493] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 493] memfd_create("syzkaller", 0) = 3 [pid 493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 493] munmap(0x7f9627d89000, 262144) = 0 [pid 493] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 493] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 493] close(3) = 0 [pid 493] mkdir("./file0", 0777) = 0 [pid 493] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 493] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 493] chdir("./file0") = 0 [pid 493] ioctl(4, LOOP_CLR_FD) = 0 [pid 493] close(4) = 0 [pid 493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] creat("./bus", 000) = 6 [pid 493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] open("./bus", O_RDONLY) = 7 [pid 493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [pid 493] sendfile(6, 7, NULL, 140737974943952 [pid 492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 33.940102][ T493] loop0: detected capacity change from 0 to 512 [ 33.947963][ T493] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 33.961697][ T493] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.973054][ T493] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 492] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 492] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[496]}, 88) = 496 [pid 492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 492] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 496 attached [pid 496] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 496] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 496] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = 1 [pid 492] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] sendmsg(-1, 0x20000000, 0 [pid 492] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 496] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 496] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = 1 [pid 496] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 492] exit_group(0 [pid 496] <... futex resumed>) = 231 [pid 492] <... exit_group resumed>) = ? [pid 496] +++ exited with 0 +++ [pid 493] <... sendfile resumed>) = ? [pid 493] +++ exited with 0 +++ [pid 492] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=492, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./45/binderfs") = 0 umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./45/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./45") = 0 mkdir("./46", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 497 ./strace-static-x86_64: Process 497 attached [pid 497] set_robust_list(0x555556b826a0, 24) = 0 [pid 497] chdir("./46") = 0 [pid 497] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 497] setpgid(0, 0) = 0 [pid 497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 497] write(3, "1000", 4) = 4 [pid 497] close(3) = 0 [pid 497] symlink("/dev/binderfs", "./binderfs") = 0 [pid 497] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 497] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 497] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 497] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 497] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 498 attached => {parent_tid=[498]}, 88) = 498 [pid 497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 497] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 498] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 498] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 498] memfd_create("syzkaller", 0) = 3 [pid 498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 498] munmap(0x7f9627d89000, 262144) = 0 [pid 498] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 498] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 498] close(3) = 0 [pid 498] mkdir("./file0", 0777) = 0 [pid 498] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 498] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 498] chdir("./file0") = 0 [pid 498] ioctl(4, LOOP_CLR_FD) = 0 [pid 498] close(4) = 0 [pid 498] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... futex resumed>) = 0 [pid 498] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 498] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... futex resumed>) = 1 [pid 498] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 498] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... futex resumed>) = 1 [pid 498] creat("./bus", 000) = 6 [pid 498] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... futex resumed>) = 1 [pid 498] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 498] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... futex resumed>) = 1 [pid 498] open("./bus", O_RDONLY) = 7 [pid 498] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 34.207883][ T498] loop0: detected capacity change from 0 to 512 [ 34.216072][ T498] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 34.229205][ T498] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.238951][ T498] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 498] sendfile(6, 7, NULL, 140737974943952 [pid 497] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 497] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 497] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 497] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 497] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[500]}, 88) = 500 [pid 497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 497] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 500 attached [pid 500] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 500] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 500] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 497] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] sendmsg(-1, 0x20000000, 0 [pid 497] <... futex resumed>) = 0 [pid 500] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 500] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] exit_group(0 [pid 500] <... futex resumed>) = ? [pid 497] <... exit_group resumed>) = ? [pid 500] +++ exited with 0 +++ [pid 498] <... sendfile resumed>) = ? [pid 498] +++ exited with 0 +++ [pid 497] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=497, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./46/binderfs") = 0 umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./46/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./46") = 0 mkdir("./47", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 501 ./strace-static-x86_64: Process 501 attached [pid 501] set_robust_list(0x555556b826a0, 24) = 0 [pid 501] chdir("./47") = 0 [pid 501] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 501] setpgid(0, 0) = 0 [pid 501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 501] write(3, "1000", 4) = 4 [pid 501] close(3) = 0 [pid 501] symlink("/dev/binderfs", "./binderfs") = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 501] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 501] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 501] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 501] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[502]}, 88) = 502 [pid 501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 501] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 502 attached [pid 502] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 502] memfd_create("syzkaller", 0) = 3 [pid 502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 502] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 502] munmap(0x7f9627d89000, 262144) = 0 [pid 502] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 502] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 502] close(3) = 0 [pid 502] mkdir("./file0", 0777) = 0 [pid 502] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 502] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 502] chdir("./file0") = 0 [pid 502] ioctl(4, LOOP_CLR_FD) = 0 [pid 502] close(4) = 0 [pid 502] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 502] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 502] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] creat("./bus", 000) = 6 [pid 502] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 502] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] open("./bus", O_RDONLY) = 7 [pid 502] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [ 34.530513][ T502] loop0: detected capacity change from 0 to 512 [ 34.538518][ T502] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 34.552331][ T502] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.561991][ T502] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 502] sendfile(6, 7, NULL, 140737974943952 [pid 501] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 501] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 501] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 501] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 501] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 504 attached => {parent_tid=[504]}, 88) = 504 [pid 504] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 504] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 501] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = 0 [pid 501] <... futex resumed>) = 1 [pid 504] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 501] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... mmap resumed>) = 0x20000000 [pid 504] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 504] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 501] <... futex resumed>) = 0 [pid 504] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 501] exit_group(0 [pid 504] <... futex resumed>) = ? [pid 501] <... exit_group resumed>) = ? [pid 504] +++ exited with 0 +++ [pid 502] <... sendfile resumed>) = ? [pid 502] +++ exited with 0 +++ [pid 501] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=501, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./47/binderfs") = 0 umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./47/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./47") = 0 mkdir("./48", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 506 ./strace-static-x86_64: Process 506 attached [pid 506] set_robust_list(0x555556b826a0, 24) = 0 [pid 506] chdir("./48") = 0 [pid 506] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 506] setpgid(0, 0) = 0 [pid 506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 506] write(3, "1000", 4) = 4 [pid 506] close(3) = 0 [pid 506] symlink("/dev/binderfs", "./binderfs") = 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 506] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 506] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 506] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 507 attached [pid 507] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 506] <... clone3 resumed> => {parent_tid=[507]}, 88) = 507 [pid 507] rt_sigprocmask(SIG_SETMASK, [], [pid 506] rt_sigprocmask(SIG_SETMASK, [], [pid 507] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 507] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 506] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 507] <... futex resumed>) = 0 [pid 507] memfd_create("syzkaller", 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 507] <... memfd_create resumed>) = 3 [pid 507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 507] munmap(0x7f9627d89000, 262144) = 0 [pid 507] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 507] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 507] close(3) = 0 [pid 507] mkdir("./file0", 0777) = 0 [pid 507] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 507] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 507] chdir("./file0") = 0 [pid 507] ioctl(4, LOOP_CLR_FD) = 0 [pid 507] close(4) = 0 [pid 507] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 507] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 507] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] creat("./bus", 000) = 6 [pid 507] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 507] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] open("./bus", O_RDONLY) = 7 [pid 507] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [ 34.847715][ T507] loop0: detected capacity change from 0 to 512 [ 34.857598][ T507] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 34.871616][ T507] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.881433][ T507] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 507] sendfile(6, 7, NULL, 140737974943952 [pid 506] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 506] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 506] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 506] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[509]}, 88) = 509 [pid 506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 506] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 509 attached [pid 509] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 509] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 509] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 509] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 509] <... futex resumed>) = 1 [pid 506] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 509] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] <... futex resumed>) = 0 [pid 509] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 506] exit_group(0) = ? [pid 509] <... futex resumed>) = ? [pid 509] +++ exited with 0 +++ [pid 507] <... sendfile resumed>) = ? [pid 507] +++ exited with 0 +++ [pid 506] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=506, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./48/binderfs") = 0 umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./48/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./48") = 0 mkdir("./49", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 510 ./strace-static-x86_64: Process 510 attached [pid 510] set_robust_list(0x555556b826a0, 24) = 0 [pid 510] chdir("./49") = 0 [pid 510] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 510] setpgid(0, 0) = 0 [pid 510] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 510] write(3, "1000", 4) = 4 [pid 510] close(3) = 0 [pid 510] symlink("/dev/binderfs", "./binderfs") = 0 [pid 510] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 510] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 510] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 510] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 510] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 510] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[511]}, 88) = 511 [pid 510] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 510] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 511 attached [pid 511] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 511] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 511] memfd_create("syzkaller", 0) = 3 [pid 511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 511] munmap(0x7f9627d89000, 262144) = 0 [pid 511] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 511] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 511] close(3) = 0 [pid 511] mkdir("./file0", 0777) = 0 [pid 511] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 511] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 511] chdir("./file0") = 0 [pid 511] ioctl(4, LOOP_CLR_FD) = 0 [pid 511] close(4) = 0 [pid 511] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 511] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 511] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] creat("./bus", 000) = 6 [pid 511] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 511] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 510] <... futex resumed>) = 0 [pid 511] open("./bus", O_RDONLY [pid 510] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 511] <... open resumed>) = 7 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 511] <... futex resumed>) = 0 [pid 511] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 510] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 510] <... futex resumed>) = 0 [pid 511] sendfile(6, 7, NULL, 140737974943952 [ 35.171060][ T511] loop0: detected capacity change from 0 to 512 [ 35.180124][ T511] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 35.195166][ T511] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 35.205242][ T511] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 510] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 510] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 510] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 510] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 510] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[513]}, 88) = 513 [pid 510] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 510] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 513 attached [pid 513] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 513] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 513] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 513] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 513] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 513] <... futex resumed>) = 1 [pid 513] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 510] exit_group(0 [pid 513] <... futex resumed>) = ? [pid 510] <... exit_group resumed>) = ? [pid 513] +++ exited with 0 +++ [pid 511] <... sendfile resumed>) = ? [pid 511] +++ exited with 0 +++ [pid 510] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=510, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./49/binderfs") = 0 umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./49/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./49") = 0 mkdir("./50", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 514 attached , child_tidptr=0x555556b82690) = 514 [pid 514] set_robust_list(0x555556b826a0, 24) = 0 [pid 514] chdir("./50") = 0 [pid 514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 514] setpgid(0, 0) = 0 [pid 514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 514] write(3, "1000", 4) = 4 [pid 514] close(3) = 0 [pid 514] symlink("/dev/binderfs", "./binderfs") = 0 [pid 514] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 514] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 514] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 514] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 515 attached => {parent_tid=[515]}, 88) = 515 [pid 515] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 515] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 515] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 514] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] <... futex resumed>) = 0 [pid 515] memfd_create("syzkaller", 0 [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 515] <... memfd_create resumed>) = 3 [pid 515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 515] munmap(0x7f9627d89000, 262144) = 0 [pid 515] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 515] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 515] close(3) = 0 [pid 515] mkdir("./file0", 0777) = 0 [pid 515] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 515] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 515] chdir("./file0") = 0 [pid 515] ioctl(4, LOOP_CLR_FD) = 0 [pid 515] close(4) = 0 [pid 515] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 0 [pid 515] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 515] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [pid 515] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 515] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [pid 515] creat("./bus", 000) = 6 [pid 515] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [pid 515] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 515] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [pid 515] open("./bus", O_RDONLY) = 7 [pid 515] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [ 35.471742][ T515] loop0: detected capacity change from 0 to 512 [ 35.479815][ T515] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 35.492757][ T515] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 35.502868][ T515] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 515] sendfile(6, 7, NULL, 140737974943952 [pid 514] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 514] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 514] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 514] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 517 attached => {parent_tid=[517]}, 88) = 517 [pid 517] set_robust_list(0x7f9627dc89a0, 24 [pid 514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 517] <... set_robust_list resumed>) = 0 [pid 517] rt_sigprocmask(SIG_SETMASK, [], [pid 514] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 517] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 514] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 517] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] <... futex resumed>) = 0 [pid 517] sendmsg(-1, 0x20000000, 0 [pid 514] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 517] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 514] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 517] <... futex resumed>) = 0 [pid 517] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 514] exit_group(0 [pid 517] <... futex resumed>) = ? [pid 514] <... exit_group resumed>) = ? [pid 515] <... sendfile resumed>) = ? [pid 517] +++ exited with 0 +++ [pid 515] +++ exited with 0 +++ [pid 514] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=514, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./50/binderfs") = 0 umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./50/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./50") = 0 mkdir("./51", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 519 ./strace-static-x86_64: Process 519 attached [pid 519] set_robust_list(0x555556b826a0, 24) = 0 [pid 519] chdir("./51") = 0 [pid 519] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 519] setpgid(0, 0) = 0 [pid 519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 519] write(3, "1000", 4) = 4 [pid 519] close(3) = 0 [pid 519] symlink("/dev/binderfs", "./binderfs") = 0 [pid 519] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 519] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 519] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 519] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 519] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[520]}, 88) = 520 [pid 519] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 519] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 520 attached [pid 520] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 520] memfd_create("syzkaller", 0) = 3 [pid 520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 520] munmap(0x7f9627d89000, 262144) = 0 [pid 520] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 520] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 520] close(3) = 0 [pid 520] mkdir("./file0", 0777) = 0 [pid 520] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 520] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 520] chdir("./file0") = 0 [pid 520] ioctl(4, LOOP_CLR_FD) = 0 [pid 520] close(4) = 0 [pid 520] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... futex resumed>) = 1 [pid 520] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 520] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... futex resumed>) = 1 [pid 520] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 520] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 520] creat("./bus", 000) = 6 [pid 520] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 519] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 519] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... futex resumed>) = 0 [pid 520] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 520] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... futex resumed>) = 1 [pid 520] open("./bus", O_RDONLY) = 7 [pid 520] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... futex resumed>) = 1 [ 35.807172][ T520] loop0: detected capacity change from 0 to 512 [ 35.815135][ T520] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 35.828364][ T520] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 35.837814][ T520] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 520] sendfile(6, 7, NULL, 140737974943952 [pid 519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 519] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 519] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 519] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 519] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 522 attached => {parent_tid=[522]}, 88) = 522 [pid 522] set_robust_list(0x7f9627dc89a0, 24 [pid 519] rt_sigprocmask(SIG_SETMASK, [], [pid 522] <... set_robust_list resumed>) = 0 [pid 519] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 522] rt_sigprocmask(SIG_SETMASK, [], [pid 519] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 522] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 519] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] <... mmap resumed>) = 0x20000000 [pid 522] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] sendmsg(-1, 0x20000000, 0 [pid 519] <... futex resumed>) = 0 [pid 522] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 519] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 522] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] exit_group(0) = ? [pid 522] <... futex resumed>) = ? [pid 520] <... sendfile resumed>) = ? [pid 520] +++ exited with 0 +++ [pid 522] +++ exited with 0 +++ [pid 519] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=519, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./51/binderfs") = 0 umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./51/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./51") = 0 mkdir("./52", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 523 ./strace-static-x86_64: Process 523 attached [pid 523] set_robust_list(0x555556b826a0, 24) = 0 [pid 523] chdir("./52") = 0 [pid 523] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 523] setpgid(0, 0) = 0 [pid 523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 523] write(3, "1000", 4) = 4 [pid 523] close(3) = 0 [pid 523] symlink("/dev/binderfs", "./binderfs") = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 523] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 523] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 523] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 523] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 524 attached => {parent_tid=[524]}, 88) = 524 [pid 523] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 523] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 524] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 524] memfd_create("syzkaller", 0) = 3 [pid 524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 524] munmap(0x7f9627d89000, 262144) = 0 [pid 524] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 524] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 524] close(3) = 0 [pid 524] mkdir("./file0", 0777) = 0 [pid 524] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 524] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 524] chdir("./file0") = 0 [pid 524] ioctl(4, LOOP_CLR_FD) = 0 [pid 524] close(4) = 0 [pid 524] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... futex resumed>) = 1 [pid 524] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 524] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... futex resumed>) = 1 [pid 524] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 524] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... futex resumed>) = 1 [pid 524] creat("./bus", 000) = 6 [pid 524] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... futex resumed>) = 1 [pid 524] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 524] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... futex resumed>) = 1 [pid 524] open("./bus", O_RDONLY) = 7 [pid 524] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... futex resumed>) = 1 [ 36.102110][ T524] loop0: detected capacity change from 0 to 512 [ 36.110014][ T524] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 36.123114][ T524] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 36.132882][ T524] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 524] sendfile(6, 7, NULL, 140737974943952 [pid 523] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 523] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 523] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 523] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 523] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[526]}, 88) = 526 [pid 523] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 523] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 526 attached [pid 526] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 526] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 526] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] sendmsg(-1, 0x20000000, 0 [pid 523] <... futex resumed>) = 0 [pid 526] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 523] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 523] <... futex resumed>) = 0 [pid 526] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 523] exit_group(0) = ? [pid 526] <... futex resumed>) = ? [pid 526] +++ exited with 0 +++ [pid 524] <... sendfile resumed>) = ? [pid 524] +++ exited with 0 +++ [pid 523] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=523, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./52/binderfs") = 0 umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./52/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./52") = 0 mkdir("./53", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 527 ./strace-static-x86_64: Process 527 attached [pid 527] set_robust_list(0x555556b826a0, 24) = 0 [pid 527] chdir("./53") = 0 [pid 527] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 527] setpgid(0, 0) = 0 [pid 527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 527] write(3, "1000", 4) = 4 [pid 527] close(3) = 0 [pid 527] symlink("/dev/binderfs", "./binderfs") = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 527] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 527] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 527] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[528]}, 88) = 528 [pid 527] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 527] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 528 attached [pid 528] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 528] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 528] memfd_create("syzkaller", 0) = 3 [pid 528] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 528] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 528] munmap(0x7f9627d89000, 262144) = 0 [pid 528] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 528] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 528] close(3) = 0 [pid 528] mkdir("./file0", 0777) = 0 [pid 528] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 528] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 528] chdir("./file0") = 0 [pid 528] ioctl(4, LOOP_CLR_FD) = 0 [pid 528] close(4) = 0 [pid 528] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] <... futex resumed>) = 1 [pid 528] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 528] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] <... futex resumed>) = 1 [pid 528] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 528] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] <... futex resumed>) = 1 [pid 528] creat("./bus", 000) = 6 [pid 528] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] <... futex resumed>) = 1 [pid 528] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 528] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] <... futex resumed>) = 1 [pid 528] open("./bus", O_RDONLY) = 7 [pid 528] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] <... futex resumed>) = 1 [ 36.395088][ T528] loop0: detected capacity change from 0 to 512 [ 36.403193][ T528] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 36.416216][ T528] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 36.425963][ T528] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 528] sendfile(6, 7, NULL, 140737974943952 [pid 527] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 527] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 527] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 527] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 530 attached [pid 530] set_robust_list(0x7f9627dc89a0, 24 [pid 527] <... clone3 resumed> => {parent_tid=[530]}, 88) = 530 [pid 530] <... set_robust_list resumed>) = 0 [pid 527] rt_sigprocmask(SIG_SETMASK, [], [pid 530] rt_sigprocmask(SIG_SETMASK, [], [pid 527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 527] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 530] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 530] <... mmap resumed>) = 0x20000000 [pid 530] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 530] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 530] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 530] <... futex resumed>) = 1 [pid 530] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] exit_group(0) = ? [pid 530] <... futex resumed>) = ? [pid 528] <... sendfile resumed>) = 231 [pid 530] +++ exited with 0 +++ [pid 528] +++ exited with 0 +++ [pid 527] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=527, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./53/binderfs") = 0 umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./53/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./53") = 0 mkdir("./54", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 532 ./strace-static-x86_64: Process 532 attached [pid 532] set_robust_list(0x555556b826a0, 24) = 0 [pid 532] chdir("./54") = 0 [pid 532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 532] setpgid(0, 0) = 0 [pid 532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 532] write(3, "1000", 4) = 4 [pid 532] close(3) = 0 [pid 532] symlink("/dev/binderfs", "./binderfs") = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 532] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 532] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 532] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[533]}, 88) = 533 [pid 532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 532] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 533 attached [pid 533] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 533] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 533] memfd_create("syzkaller", 0) = 3 [pid 533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 533] munmap(0x7f9627d89000, 262144) = 0 [pid 533] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 533] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 533] close(3) = 0 [pid 533] mkdir("./file0", 0777) = 0 [pid 533] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 533] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 533] chdir("./file0") = 0 [pid 533] ioctl(4, LOOP_CLR_FD) = 0 [pid 533] close(4) = 0 [pid 533] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 533] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 533] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] creat("./bus", 000) = 6 [pid 533] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 533] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] open("./bus", O_RDONLY) = 7 [pid 533] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [ 36.682293][ T533] loop0: detected capacity change from 0 to 512 [ 36.692189][ T533] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 36.705170][ T533] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 36.715083][ T533] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 533] sendfile(6, 7, NULL, 140737974943952 [pid 532] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 532] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 532] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 532] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 535 attached [pid 535] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 535] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 535] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] <... clone3 resumed> => {parent_tid=[535]}, 88) = 535 [pid 532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 532] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = 1 [pid 535] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 532] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] <... mmap resumed>) = 0x20000000 [pid 535] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] <... futex resumed>) = 1 [pid 535] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 535] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 535] <... futex resumed>) = 1 [pid 535] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] exit_group(0 [pid 535] <... futex resumed>) = ? [pid 532] <... exit_group resumed>) = ? [pid 535] +++ exited with 0 +++ [pid 533] <... sendfile resumed>) = ? [pid 533] +++ exited with 0 +++ [pid 532] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=532, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./54/binderfs") = 0 umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./54/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./54") = 0 mkdir("./55", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 536 ./strace-static-x86_64: Process 536 attached [pid 536] set_robust_list(0x555556b826a0, 24) = 0 [pid 536] chdir("./55") = 0 [pid 536] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 536] setpgid(0, 0) = 0 [pid 536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 536] write(3, "1000", 4) = 4 [pid 536] close(3) = 0 [pid 536] symlink("/dev/binderfs", "./binderfs") = 0 [pid 536] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 536] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 536] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 536] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 537 attached [pid 537] set_robust_list(0x7f96301a99a0, 24 [pid 536] <... clone3 resumed> => {parent_tid=[537]}, 88) = 537 [pid 537] <... set_robust_list resumed>) = 0 [pid 537] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 537] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 536] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 537] <... futex resumed>) = 0 [pid 537] memfd_create("syzkaller", 0) = 3 [pid 537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 537] munmap(0x7f9627d89000, 262144) = 0 [pid 537] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 537] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 537] close(3) = 0 [pid 537] mkdir("./file0", 0777) = 0 [pid 537] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 537] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 537] chdir("./file0") = 0 [pid 537] ioctl(4, LOOP_CLR_FD) = 0 [pid 537] close(4) = 0 [pid 537] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 537] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 537] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] creat("./bus", 000) = 6 [pid 537] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 537] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = 0 [pid 537] <... futex resumed>) = 1 [pid 536] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] open("./bus", O_RDONLY) = 7 [pid 537] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] <... futex resumed>) = 1 [pid 536] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 536] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 0 [ 36.953300][ T537] loop0: detected capacity change from 0 to 512 [ 36.961504][ T537] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 36.976874][ T537] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 36.989438][ T537] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 537] sendfile(6, 7, NULL, 140737974943952 [pid 536] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 536] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 536] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 536] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[539]}, 88) = 539 [pid 536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 536] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 539 attached [pid 539] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 539] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 539] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 539] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 539] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] exit_group(0 [pid 539] <... futex resumed>) = ? [pid 536] <... exit_group resumed>) = ? [pid 539] +++ exited with 0 +++ [pid 537] <... sendfile resumed>) = ? [pid 537] +++ exited with 0 +++ [pid 536] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=536, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./55/binderfs") = 0 umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./55/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./55") = 0 mkdir("./56", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 540 ./strace-static-x86_64: Process 540 attached [pid 540] set_robust_list(0x555556b826a0, 24) = 0 [pid 540] chdir("./56") = 0 [pid 540] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 540] setpgid(0, 0) = 0 [pid 540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 540] write(3, "1000", 4) = 4 [pid 540] close(3) = 0 [pid 540] symlink("/dev/binderfs", "./binderfs") = 0 [pid 540] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 540] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 540] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[541]}, 88) = 541 ./strace-static-x86_64: Process 541 attached [pid 540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 540] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] set_robust_list(0x7f96301a99a0, 24 [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 541] <... set_robust_list resumed>) = 0 [pid 541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 541] memfd_create("syzkaller", 0) = 3 [pid 541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 541] munmap(0x7f9627d89000, 262144) = 0 [pid 541] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 541] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 541] close(3) = 0 [pid 541] mkdir("./file0", 0777) = 0 [pid 541] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 541] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 541] chdir("./file0") = 0 [pid 541] ioctl(4, LOOP_CLR_FD) = 0 [pid 541] close(4) = 0 [pid 541] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 541] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 541] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] creat("./bus", 000) = 6 [pid 541] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 541] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 541] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 541] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 541] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 0 [pid 541] open("./bus", O_RDONLY) = 7 [pid 541] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [ 37.259659][ T541] loop0: detected capacity change from 0 to 512 [ 37.267466][ T541] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 37.280587][ T541] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 37.291248][ T541] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 541] sendfile(6, 7, NULL, 140737974943952 [pid 540] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 540] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 540] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 543 attached => {parent_tid=[543]}, 88) = 543 [pid 543] set_robust_list(0x7f9627dc89a0, 24 [pid 540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 540] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... set_robust_list resumed>) = 0 [pid 543] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 543] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 543] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 543] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 543] <... futex resumed>) = 1 [pid 543] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] exit_group(0) = ? [pid 543] <... futex resumed>) = ? [pid 543] +++ exited with 0 +++ [pid 541] <... sendfile resumed>) = ? [pid 541] +++ exited with 0 +++ [pid 540] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=540, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./56/binderfs") = 0 umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./56/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./56") = 0 mkdir("./57", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 544 ./strace-static-x86_64: Process 544 attached [pid 544] set_robust_list(0x555556b826a0, 24) = 0 [pid 544] chdir("./57") = 0 [pid 544] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 544] setpgid(0, 0) = 0 [pid 544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 544] write(3, "1000", 4) = 4 [pid 544] close(3) = 0 [pid 544] symlink("/dev/binderfs", "./binderfs") = 0 [pid 544] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 544] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 544] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 544] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[545]}, 88) = 545 [pid 544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 544] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 545 attached [pid 545] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 545] memfd_create("syzkaller", 0) = 3 [pid 545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 545] munmap(0x7f9627d89000, 262144) = 0 [pid 545] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 545] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 545] close(3) = 0 [pid 545] mkdir("./file0", 0777) = 0 [pid 545] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 545] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 545] chdir("./file0") = 0 [pid 545] ioctl(4, LOOP_CLR_FD) = 0 [pid 545] close(4) = 0 [pid 545] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 1 [pid 545] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 545] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = 1 [pid 544] <... futex resumed>) = 0 [pid 545] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 544] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 0 [pid 545] creat("./bus", 000) = 6 [pid 545] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 1 [pid 545] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 545] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 544] <... futex resumed>) = 0 [pid 545] open("./bus", O_RDONLY [pid 544] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... open resumed>) = 7 [pid 544] <... futex resumed>) = 0 [pid 545] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 0 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 545] sendfile(6, 7, NULL, 140737974943952 [pid 544] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 37.571920][ T545] loop0: detected capacity change from 0 to 512 [ 37.580269][ T545] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 37.593561][ T545] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 37.603486][ T545] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 544] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 544] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 544] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[548]}, 88) = 548 [pid 544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 544] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 548 attached [pid 548] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 548] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 548] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 548] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 548] <... futex resumed>) = 1 [pid 548] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 548] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 548] <... futex resumed>) = 1 [pid 548] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 544] exit_group(0) = ? [pid 548] <... futex resumed>) = ? [pid 548] +++ exited with 0 +++ [pid 545] <... sendfile resumed>) = ? [pid 545] +++ exited with 0 +++ [pid 544] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=544, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./57/binderfs") = 0 umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./57/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./57") = 0 mkdir("./58", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 549 ./strace-static-x86_64: Process 549 attached [pid 549] set_robust_list(0x555556b826a0, 24) = 0 [pid 549] chdir("./58") = 0 [pid 549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 549] setpgid(0, 0) = 0 [pid 549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 549] write(3, "1000", 4) = 4 [pid 549] close(3) = 0 [pid 549] symlink("/dev/binderfs", "./binderfs") = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 549] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 549] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 549] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 549] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[550]}, 88) = 550 [pid 549] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 549] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 550 attached [pid 550] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 550] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 550] memfd_create("syzkaller", 0) = 3 [pid 550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 550] munmap(0x7f9627d89000, 262144) = 0 [pid 550] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 550] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 550] close(3) = 0 [pid 550] mkdir("./file0", 0777) = 0 [pid 550] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 550] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 550] chdir("./file0") = 0 [pid 550] ioctl(4, LOOP_CLR_FD) = 0 [pid 550] close(4) = 0 [pid 550] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [pid 550] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 550] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [pid 550] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 550] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [pid 550] creat("./bus", 000) = 6 [pid 550] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [pid 550] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 550] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [pid 550] open("./bus", O_RDONLY) = 7 [pid 550] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [ 37.887152][ T550] loop0: detected capacity change from 0 to 512 [ 37.895469][ T550] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 37.908890][ T550] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 37.918665][ T550] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 550] sendfile(6, 7, NULL, 140737974943952 [pid 549] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 549] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 549] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 549] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 549] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[552]}, 88) = 552 [pid 549] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 549] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 552 attached [pid 552] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 552] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 552] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 552] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 552] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 552] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 549] <... futex resumed>) = 0 [pid 552] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 549] exit_group(0) = ? [pid 552] <... futex resumed>) = ? [pid 552] +++ exited with 0 +++ [pid 550] <... sendfile resumed>) = ? [pid 550] +++ exited with 0 +++ [pid 549] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=549, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./58/binderfs") = 0 umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./58/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./58") = 0 mkdir("./59", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 553 ./strace-static-x86_64: Process 553 attached [pid 553] set_robust_list(0x555556b826a0, 24) = 0 [pid 553] chdir("./59") = 0 [pid 553] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 553] setpgid(0, 0) = 0 [pid 553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 553] write(3, "1000", 4) = 4 [pid 553] close(3) = 0 [pid 553] symlink("/dev/binderfs", "./binderfs") = 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 553] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 553] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 553] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 553] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 554 attached => {parent_tid=[554]}, 88) = 554 [pid 554] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 554] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 554] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 553] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 553] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] <... futex resumed>) = 0 [pid 554] memfd_create("syzkaller", 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 554] <... memfd_create resumed>) = 3 [pid 554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 554] munmap(0x7f9627d89000, 262144) = 0 [pid 554] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 554] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 554] close(3) = 0 [pid 554] mkdir("./file0", 0777) = 0 [pid 554] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 554] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 554] chdir("./file0") = 0 [pid 554] ioctl(4, LOOP_CLR_FD) = 0 [pid 554] close(4) = 0 [pid 554] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] <... futex resumed>) = 1 [pid 554] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 554] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] <... futex resumed>) = 1 [pid 554] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 554] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] <... futex resumed>) = 1 [pid 554] creat("./bus", 000) = 6 [pid 554] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] <... futex resumed>) = 1 [pid 554] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 554] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] <... futex resumed>) = 1 [pid 554] open("./bus", O_RDONLY) = 7 [pid 554] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] <... futex resumed>) = 1 [ 38.193977][ T554] loop0: detected capacity change from 0 to 512 [ 38.202095][ T554] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 38.215509][ T554] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 38.229599][ T554] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 554] sendfile(6, 7, NULL, 140737974943952 [pid 553] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 553] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 553] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 553] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 553] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 556 attached => {parent_tid=[556]}, 88) = 556 [pid 556] set_robust_list(0x7f9627dc89a0, 24 [pid 553] rt_sigprocmask(SIG_SETMASK, [], [pid 556] <... set_robust_list resumed>) = 0 [pid 553] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 556] rt_sigprocmask(SIG_SETMASK, [], [pid 553] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 553] <... futex resumed>) = 0 [pid 556] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 553] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] <... mmap resumed>) = 0x20000000 [pid 556] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] sendmsg(-1, 0x20000000, 0 [pid 553] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 556] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 553] <... futex resumed>) = 0 [pid 556] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 553] exit_group(0 [pid 556] <... futex resumed>) = ? [pid 553] <... exit_group resumed>) = ? [pid 556] +++ exited with 0 +++ [pid 554] <... sendfile resumed>) = ? [pid 554] +++ exited with 0 +++ [pid 553] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=553, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./59/binderfs") = 0 umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./59/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./59") = 0 mkdir("./60", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 557 ./strace-static-x86_64: Process 557 attached [pid 557] set_robust_list(0x555556b826a0, 24) = 0 [pid 557] chdir("./60") = 0 [pid 557] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 557] setpgid(0, 0) = 0 [pid 557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 557] write(3, "1000", 4) = 4 [pid 557] close(3) = 0 [pid 557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 557] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 557] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 557] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[558]}, 88) = 558 [pid 557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 557] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 558 attached [pid 558] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 558] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 558] memfd_create("syzkaller", 0) = 3 [pid 558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 558] munmap(0x7f9627d89000, 262144) = 0 [pid 558] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 558] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 558] close(3) = 0 [pid 558] mkdir("./file0", 0777) = 0 [pid 558] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 558] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 558] chdir("./file0") = 0 [pid 558] ioctl(4, LOOP_CLR_FD) = 0 [pid 558] close(4) = 0 [pid 558] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [pid 558] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 558] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [pid 558] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 558] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [pid 558] creat("./bus", 000) = 6 [pid 558] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [pid 558] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 558] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [pid 558] open("./bus", O_RDONLY) = 7 [pid 558] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [ 38.542308][ T558] loop0: detected capacity change from 0 to 512 [ 38.550245][ T558] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 38.563771][ T558] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 38.574004][ T558] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 558] sendfile(6, 7, NULL, 140737974943952 [pid 557] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 557] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 557] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 557] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[560]}, 88) = 560 [pid 557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 557] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 560 attached [pid 560] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 560] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 560] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 560] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 557] <... futex resumed>) = 0 [pid 560] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 557] exit_group(0 [pid 560] <... futex resumed>) = ? [pid 557] <... exit_group resumed>) = ? [pid 560] +++ exited with 0 +++ [pid 558] <... sendfile resumed>) = ? [pid 558] +++ exited with 0 +++ [pid 557] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=557, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./60/binderfs") = 0 umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./60/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./60") = 0 mkdir("./61", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 562 ./strace-static-x86_64: Process 562 attached [pid 562] set_robust_list(0x555556b826a0, 24) = 0 [pid 562] chdir("./61") = 0 [pid 562] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 562] setpgid(0, 0) = 0 [pid 562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 562] write(3, "1000", 4) = 4 [pid 562] close(3) = 0 [pid 562] symlink("/dev/binderfs", "./binderfs") = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 562] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 562] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 562] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 562] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[563]}, 88) = 563 [pid 562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 562] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 563 attached [pid 563] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 563] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 563] memfd_create("syzkaller", 0) = 3 [pid 563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 563] munmap(0x7f9627d89000, 262144) = 0 [pid 563] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 563] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 563] close(3) = 0 [pid 563] mkdir("./file0", 0777) = 0 [pid 563] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 563] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 563] chdir("./file0") = 0 [pid 563] ioctl(4, LOOP_CLR_FD) = 0 [pid 563] close(4) = 0 [pid 563] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... futex resumed>) = 1 [pid 563] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 563] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... futex resumed>) = 1 [pid 563] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 563] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] creat("./bus", 000) = 6 [pid 563] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... futex resumed>) = 1 [pid 563] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 563] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... futex resumed>) = 1 [pid 563] open("./bus", O_RDONLY) = 7 [pid 563] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... futex resumed>) = 1 [ 38.831775][ T563] loop0: detected capacity change from 0 to 512 [ 38.839862][ T563] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 38.854012][ T563] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 38.864037][ T563] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 563] sendfile(6, 7, NULL, 140737974943952 [pid 562] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 562] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 562] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 562] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 562] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 565 attached => {parent_tid=[565]}, 88) = 565 [pid 562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 562] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 565] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 565] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 565] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 565] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 562] exit_group(0) = ? [pid 565] <... futex resumed>) = ? [pid 565] +++ exited with 0 +++ [pid 563] <... sendfile resumed>) = ? [pid 563] +++ exited with 0 +++ [pid 562] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=562, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./61/binderfs") = 0 umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./61/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./61") = 0 mkdir("./62", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 566 ./strace-static-x86_64: Process 566 attached [pid 566] set_robust_list(0x555556b826a0, 24) = 0 [pid 566] chdir("./62") = 0 [pid 566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 566] setpgid(0, 0) = 0 [pid 566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 566] write(3, "1000", 4) = 4 [pid 566] close(3) = 0 [pid 566] symlink("/dev/binderfs", "./binderfs") = 0 [pid 566] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 566] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 566] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[567]}, 88) = 567 [pid 566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 567 attached [pid 567] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 567] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 567] memfd_create("syzkaller", 0) = 3 [pid 567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 567] munmap(0x7f9627d89000, 262144) = 0 [pid 567] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 567] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 567] close(3) = 0 [pid 567] mkdir("./file0", 0777) = 0 [pid 567] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 567] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 567] chdir("./file0") = 0 [pid 567] ioctl(4, LOOP_CLR_FD) = 0 [pid 567] close(4) = 0 [pid 567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 39.160693][ T567] loop0: detected capacity change from 0 to 512 [ 39.177707][ T567] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 39.190801][ T567] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 39.200434][ T567] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 567] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 0 [pid 567] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] creat("./bus", 000) = 6 [pid 567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] open("./bus", O_RDONLY) = 7 [pid 567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 567] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 0 [pid 567] sendfile(6, 7, NULL, 140737974943952 [pid 566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 566] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 566] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[569]}, 88) = 569 [pid 566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 566] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 569 attached [pid 569] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 569] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 569] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 569] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... futex resumed>) = 1 [pid 569] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 569] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 569] <... futex resumed>) = 1 [pid 569] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 566] exit_group(0 [pid 569] <... futex resumed>) = ? [pid 566] <... exit_group resumed>) = ? [pid 567] <... sendfile resumed>) = ? [pid 567] +++ exited with 0 +++ [pid 569] +++ exited with 0 +++ [pid 566] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=566, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./62/binderfs") = 0 umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./62/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./62") = 0 mkdir("./63", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 570 ./strace-static-x86_64: Process 570 attached [pid 570] set_robust_list(0x555556b826a0, 24) = 0 [pid 570] chdir("./63") = 0 [pid 570] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 570] setpgid(0, 0) = 0 [pid 570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 570] write(3, "1000", 4) = 4 [pid 570] close(3) = 0 [pid 570] symlink("/dev/binderfs", "./binderfs") = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 570] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 570] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 570] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[571]}, 88) = 571 [pid 570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 571 attached [pid 571] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 571] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 571] memfd_create("syzkaller", 0) = 3 [pid 571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 571] munmap(0x7f9627d89000, 262144) = 0 [pid 571] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 571] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 571] close(3) = 0 [pid 571] mkdir("./file0", 0777) = 0 [pid 571] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 571] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 571] chdir("./file0") = 0 [pid 571] ioctl(4, LOOP_CLR_FD) = 0 [pid 571] close(4) = 0 [pid 571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] creat("./bus", 000) = 6 [pid 571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] open("./bus", O_RDONLY) = 7 [pid 571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [ 39.485543][ T571] loop0: detected capacity change from 0 to 512 [ 39.494082][ T571] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 39.507273][ T571] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 39.517011][ T571] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 571] sendfile(6, 7, NULL, 140737974943952 [pid 570] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 570] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 570] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 570] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 573 attached => {parent_tid=[573]}, 88) = 573 [pid 573] set_robust_list(0x7f9627dc89a0, 24 [pid 570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 570] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... set_robust_list resumed>) = 0 [pid 573] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 573] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 573] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 573] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 573] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 570] exit_group(0 [pid 573] <... futex resumed>) = ? [pid 570] <... exit_group resumed>) = ? [pid 573] +++ exited with 0 +++ [pid 571] <... sendfile resumed>) = ? [pid 571] +++ exited with 0 +++ [pid 570] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=570, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./63/binderfs") = 0 umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./63/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./63") = 0 mkdir("./64", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 575 ./strace-static-x86_64: Process 575 attached [pid 575] set_robust_list(0x555556b826a0, 24) = 0 [pid 575] chdir("./64") = 0 [pid 575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 575] setpgid(0, 0) = 0 [pid 575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 575] write(3, "1000", 4) = 4 [pid 575] close(3) = 0 [pid 575] symlink("/dev/binderfs", "./binderfs") = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 575] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 575] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 575] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 575] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[576]}, 88) = 576 [pid 575] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 575] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 576 attached [pid 576] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 576] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 576] memfd_create("syzkaller", 0) = 3 [pid 576] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 576] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 576] munmap(0x7f9627d89000, 262144) = 0 [pid 576] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 576] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 576] close(3) = 0 [pid 576] mkdir("./file0", 0777) = 0 [ 39.810369][ T576] loop0: detected capacity change from 0 to 512 [ 39.828141][ T576] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 39.841352][ T576] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 576] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 576] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 576] chdir("./file0") = 0 [pid 576] ioctl(4, LOOP_CLR_FD) = 0 [pid 576] close(4) = 0 [pid 576] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 1 [pid 576] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 576] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 1 [pid 576] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 576] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 1 [pid 576] creat("./bus", 000) = 6 [pid 576] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 1 [pid 576] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 576] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 1 [pid 576] open("./bus", O_RDONLY) = 7 [pid 576] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 1 [ 39.851561][ T576] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 576] sendfile(6, 7, NULL, 140737974943952 [pid 575] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 575] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 575] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 575] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 575] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[578]}, 88) = 578 [pid 575] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 575] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 578 attached [pid 578] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 578] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 578] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 578] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... futex resumed>) = 1 [pid 578] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 578] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 578] <... futex resumed>) = 1 [pid 578] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 575] exit_group(0 [pid 578] <... futex resumed>) = ? [pid 575] <... exit_group resumed>) = ? [pid 578] +++ exited with 0 +++ [pid 576] <... sendfile resumed>) = ? [pid 576] +++ exited with 0 +++ [pid 575] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=575, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./64/binderfs") = 0 umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./64/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./64") = 0 mkdir("./65", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 579 ./strace-static-x86_64: Process 579 attached [pid 579] set_robust_list(0x555556b826a0, 24) = 0 [pid 579] chdir("./65") = 0 [pid 579] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 579] setpgid(0, 0) = 0 [pid 579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 579] write(3, "1000", 4) = 4 [pid 579] close(3) = 0 [pid 579] symlink("/dev/binderfs", "./binderfs") = 0 [pid 579] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 579] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 579] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 579] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 579] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 580 attached => {parent_tid=[580]}, 88) = 580 [pid 579] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 580] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 580] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 580] memfd_create("syzkaller", 0) = 3 [pid 580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 580] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 580] munmap(0x7f9627d89000, 262144) = 0 [pid 580] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 580] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 580] close(3) = 0 [pid 580] mkdir("./file0", 0777) = 0 [pid 580] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 580] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 580] chdir("./file0") = 0 [pid 580] ioctl(4, LOOP_CLR_FD) = 0 [pid 580] close(4) = 0 [pid 580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 1 [pid 580] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 1 [pid 580] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 1 [pid 580] creat("./bus", 000) = 6 [pid 580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 1 [pid 580] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... futex resumed>) = 1 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] open("./bus", O_RDONLY) = 7 [pid 580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 579] <... futex resumed>) = 0 [pid 580] sendfile(6, 7, NULL, 140737974943952 [pid 579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 40.147570][ T580] loop0: detected capacity change from 0 to 512 [ 40.156519][ T580] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 40.170624][ T580] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 40.181194][ T580] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 579] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 579] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 579] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 579] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[582]}, 88) = 582 [pid 579] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 579] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 582 attached [pid 582] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 582] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 582] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 582] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] <... futex resumed>) = 1 [pid 582] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 582] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 582] <... futex resumed>) = 1 [pid 582] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 579] exit_group(0 [pid 582] <... futex resumed>) = 231 [pid 579] <... exit_group resumed>) = ? [pid 580] <... sendfile resumed>) = ? [pid 582] +++ exited with 0 +++ [pid 580] +++ exited with 0 +++ [pid 579] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=579, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./65/binderfs") = 0 umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./65/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./65") = 0 mkdir("./66", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 583 ./strace-static-x86_64: Process 583 attached [pid 583] set_robust_list(0x555556b826a0, 24) = 0 [pid 583] chdir("./66") = 0 [pid 583] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 583] setpgid(0, 0) = 0 [pid 583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 583] write(3, "1000", 4) = 4 [pid 583] close(3) = 0 [pid 583] symlink("/dev/binderfs", "./binderfs") = 0 [pid 583] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 583] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 583] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 583] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 583] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[584]}, 88) = 584 [pid 583] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 584 attached [pid 584] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 584] memfd_create("syzkaller", 0) = 3 [pid 584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 584] munmap(0x7f9627d89000, 262144) = 0 [pid 584] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 584] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 584] close(3) = 0 [pid 584] mkdir("./file0", 0777) = 0 [pid 584] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 584] chdir("./file0") = 0 [pid 584] ioctl(4, LOOP_CLR_FD) = 0 [pid 584] close(4) = 0 [pid 584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 584] <... futex resumed>) = 1 [pid 584] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 584] <... futex resumed>) = 1 [pid 584] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 584] <... futex resumed>) = 1 [pid 584] creat("./bus", 000) = 6 [pid 584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 584] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 584] <... futex resumed>) = 0 [pid 584] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 584] open("./bus", O_RDONLY) = 7 [pid 584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 40.452071][ T584] loop0: detected capacity change from 0 to 512 [ 40.460876][ T584] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 40.474504][ T584] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 40.484529][ T584] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 584] sendfile(6, 7, NULL, 140737974943952 [pid 583] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 583] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 583] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 583] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 583] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[586]}, 88) = 586 [pid 583] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 583] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 586 attached [pid 586] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 586] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 586] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 586] <... futex resumed>) = 1 [pid 586] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 586] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = 0 [pid 586] <... futex resumed>) = 1 [pid 586] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 583] exit_group(0 [pid 586] <... futex resumed>) = ? [pid 583] <... exit_group resumed>) = ? [pid 584] <... sendfile resumed>) = ? [pid 586] +++ exited with 0 +++ [pid 584] +++ exited with 0 +++ [pid 583] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=583, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./66/binderfs") = 0 umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./66/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./66") = 0 mkdir("./67", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 588 ./strace-static-x86_64: Process 588 attached [pid 588] set_robust_list(0x555556b826a0, 24) = 0 [pid 588] chdir("./67") = 0 [pid 588] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 588] setpgid(0, 0) = 0 [pid 588] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 588] write(3, "1000", 4) = 4 [pid 588] close(3) = 0 [pid 588] symlink("/dev/binderfs", "./binderfs") = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 588] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 588] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 588] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 588] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 588] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[589]}, 88) = 589 [pid 588] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 588] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 589 attached [pid 589] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 589] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 589] memfd_create("syzkaller", 0) = 3 [pid 589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 589] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 589] munmap(0x7f9627d89000, 262144) = 0 [pid 589] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 589] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 589] close(3) = 0 [pid 589] mkdir("./file0", 0777) = 0 [pid 589] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 589] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 589] chdir("./file0") = 0 [pid 589] ioctl(4, LOOP_CLR_FD) = 0 [pid 589] close(4) = 0 [pid 589] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 589] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 589] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] creat("./bus", 000) = 6 [pid 589] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 589] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] open("./bus", O_RDONLY) = 7 [pid 589] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [ 40.767858][ T589] loop0: detected capacity change from 0 to 512 [ 40.777177][ T589] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 40.791335][ T589] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 40.801016][ T589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 589] sendfile(6, 7, NULL, 140737974943952 [pid 588] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 588] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 588] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 588] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 588] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[591]}, 88) = 591 ./strace-static-x86_64: Process 591 attached [pid 591] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 591] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 591] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 588] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 588] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 591] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 591] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 591] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 588] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 588] <... futex resumed>) = 0 [pid 591] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 588] exit_group(0 [pid 591] <... futex resumed>) = ? [pid 588] <... exit_group resumed>) = ? [pid 591] +++ exited with 0 +++ [pid 589] <... sendfile resumed>) = ? [pid 589] +++ exited with 0 +++ [pid 588] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=588, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./67/binderfs") = 0 umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./67/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./67") = 0 mkdir("./68", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 592 ./strace-static-x86_64: Process 592 attached [pid 592] set_robust_list(0x555556b826a0, 24) = 0 [pid 592] chdir("./68") = 0 [pid 592] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 592] setpgid(0, 0) = 0 [pid 592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 592] write(3, "1000", 4) = 4 [pid 592] close(3) = 0 [pid 592] symlink("/dev/binderfs", "./binderfs") = 0 [pid 592] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 592] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 592] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 592] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 592] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[593]}, 88) = 593 [pid 592] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 593 attached [pid 593] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 593] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 593] memfd_create("syzkaller", 0) = 3 [pid 593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 593] munmap(0x7f9627d89000, 262144) = 0 [pid 593] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 593] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 593] close(3) = 0 [pid 593] mkdir("./file0", 0777) = 0 [pid 593] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 593] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 593] chdir("./file0") = 0 [pid 593] ioctl(4, LOOP_CLR_FD) = 0 [pid 593] close(4) = 0 [pid 593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = 1 [pid 593] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = 1 [pid 593] creat("./bus", 000) = 6 [pid 593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = 1 [pid 593] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 593] open("./bus", O_RDONLY [pid 592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] <... open resumed>) = 7 [pid 592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 593] <... futex resumed>) = 0 [pid 592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] sendfile(6, 7, NULL, 140737974943952 [pid 592] <... futex resumed>) = 0 [ 41.085042][ T593] loop0: detected capacity change from 0 to 512 [ 41.096121][ T593] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 41.109434][ T593] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 41.119230][ T593] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 592] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 592] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 592] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 592] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 596 attached => {parent_tid=[596]}, 88) = 596 [pid 596] set_robust_list(0x7f9627dc89a0, 24 [pid 592] rt_sigprocmask(SIG_SETMASK, [], [pid 596] <... set_robust_list resumed>) = 0 [pid 592] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 596] rt_sigprocmask(SIG_SETMASK, [], [pid 592] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 592] <... futex resumed>) = 0 [pid 596] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 592] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... mmap resumed>) = 0x20000000 [pid 596] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 596] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 596] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] exit_group(0) = ? [pid 596] <... futex resumed>) = ? [pid 593] <... sendfile resumed>) = ? [pid 596] +++ exited with 0 +++ [pid 593] +++ exited with 0 +++ [pid 592] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=592, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./68/binderfs") = 0 umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./68/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./68") = 0 mkdir("./69", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 597 ./strace-static-x86_64: Process 597 attached [pid 597] set_robust_list(0x555556b826a0, 24) = 0 [pid 597] chdir("./69") = 0 [pid 597] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 597] setpgid(0, 0) = 0 [pid 597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 597] write(3, "1000", 4) = 4 [pid 597] close(3) = 0 [pid 597] symlink("/dev/binderfs", "./binderfs") = 0 [pid 597] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 597] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 597] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[598]}, 88) = 598 [pid 597] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 598 attached NULL, 8) = 0 [pid 598] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 598] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 598] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 597] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 598] memfd_create("syzkaller", 0 [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 598] <... memfd_create resumed>) = 3 [pid 598] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 598] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 598] munmap(0x7f9627d89000, 262144) = 0 [pid 598] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 598] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 598] close(3) = 0 [pid 598] mkdir("./file0", 0777) = 0 [pid 598] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 598] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 598] chdir("./file0") = 0 [pid 598] ioctl(4, LOOP_CLR_FD) = 0 [pid 598] close(4) = 0 [pid 598] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... futex resumed>) = 1 [pid 598] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 598] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... futex resumed>) = 1 [pid 598] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 598] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... futex resumed>) = 1 [pid 598] creat("./bus", 000) = 6 [pid 598] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... futex resumed>) = 0 [pid 598] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 598] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 597] <... futex resumed>) = 0 [pid 598] open("./bus", O_RDONLY [pid 597] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... open resumed>) = 7 [pid 598] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... futex resumed>) = 1 [ 41.377942][ T598] loop0: detected capacity change from 0 to 512 [ 41.387052][ T598] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 41.400624][ T598] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 41.410592][ T598] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 598] sendfile(6, 7, NULL, 140737974943952 [pid 597] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 597] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 597] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[600]}, 88) = 600 [pid 597] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 597] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 600 attached [pid 600] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 600] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 600] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 600] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 597] <... futex resumed>) = 0 [pid 600] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 597] exit_group(0 [pid 600] <... futex resumed>) = ? [pid 597] <... exit_group resumed>) = ? [pid 598] <... sendfile resumed>) = ? [pid 598] +++ exited with 0 +++ [pid 600] +++ exited with 0 +++ [pid 597] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=597, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./69/binderfs") = 0 umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./69/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./69") = 0 mkdir("./70", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 602 ./strace-static-x86_64: Process 602 attached [pid 602] set_robust_list(0x555556b826a0, 24) = 0 [pid 602] chdir("./70") = 0 [pid 602] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 602] setpgid(0, 0) = 0 [pid 602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 602] write(3, "1000", 4) = 4 [pid 602] close(3) = 0 [pid 602] symlink("/dev/binderfs", "./binderfs") = 0 [pid 602] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 602] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 602] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 602] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 602] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[603]}, 88) = 603 [pid 602] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 602] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 603 attached [pid 603] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 603] memfd_create("syzkaller", 0) = 3 [pid 603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 603] munmap(0x7f9627d89000, 262144) = 0 [pid 603] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 603] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 603] close(3) = 0 [pid 603] mkdir("./file0", 0777) = 0 [pid 603] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 603] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 603] chdir("./file0") = 0 [pid 603] ioctl(4, LOOP_CLR_FD) = 0 [pid 603] close(4) = 0 [pid 603] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 1 [pid 603] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 603] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 1 [pid 603] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 603] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 1 [pid 603] creat("./bus", 000) = 6 [pid 603] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 603] <... futex resumed>) = 1 [pid 602] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 603] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 603] open("./bus", O_RDONLY [pid 602] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... open resumed>) = 7 [pid 603] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 603] sendfile(6, 7, NULL, 140737974943952 [pid 602] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 41.704223][ T603] loop0: detected capacity change from 0 to 512 [ 41.711949][ T603] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 41.725014][ T603] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 41.734763][ T603] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 602] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 602] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 602] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 602] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 602] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[605]}, 88) = 605 ./strace-static-x86_64: Process 605 attached [pid 602] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 602] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 605] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 605] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 605] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 605] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 602] exit_group(0 [pid 605] <... futex resumed>) = ? [pid 602] <... exit_group resumed>) = ? [pid 605] +++ exited with 0 +++ [pid 603] <... sendfile resumed>) = ? [pid 603] +++ exited with 0 +++ [pid 602] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=602, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./70/binderfs") = 0 umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./70/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./70") = 0 mkdir("./71", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 606 ./strace-static-x86_64: Process 606 attached [pid 606] set_robust_list(0x555556b826a0, 24) = 0 [pid 606] chdir("./71") = 0 [pid 606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 606] setpgid(0, 0) = 0 [pid 606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 606] write(3, "1000", 4) = 4 [pid 606] close(3) = 0 [pid 606] symlink("/dev/binderfs", "./binderfs") = 0 [pid 606] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 606] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 606] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[607]}, 88) = 607 [pid 606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 606] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 607 attached [pid 607] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 607] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 607] memfd_create("syzkaller", 0) = 3 [pid 607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 607] munmap(0x7f9627d89000, 262144) = 0 [pid 607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 607] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 607] close(3) = 0 [pid 607] mkdir("./file0", 0777) = 0 [pid 607] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 607] chdir("./file0") = 0 [pid 607] ioctl(4, LOOP_CLR_FD) = 0 [pid 607] close(4) = 0 [pid 607] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 607] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 0 [pid 607] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 607] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 1 [pid 607] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 607] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 1 [pid 607] creat("./bus", 000) = 6 [pid 607] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 1 [pid 607] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 607] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 1 [pid 607] open("./bus", O_RDONLY) = 7 [pid 607] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 1 [ 42.001849][ T607] loop0: detected capacity change from 0 to 512 [ 42.010250][ T607] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 42.023241][ T607] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 42.033044][ T607] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 607] sendfile(6, 7, NULL, 140737974943952 [pid 606] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 606] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 606] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 609 attached [pid 609] set_robust_list(0x7f9627dc89a0, 24 [pid 606] <... clone3 resumed> => {parent_tid=[609]}, 88) = 609 [pid 606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 606] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... set_robust_list resumed>) = 0 [pid 609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 609] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 609] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 609] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] <... futex resumed>) = 0 [pid 609] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] exit_group(0 [pid 609] <... futex resumed>) = ? [pid 606] <... exit_group resumed>) = ? [pid 609] +++ exited with 0 +++ [pid 607] <... sendfile resumed>) = ? [pid 607] +++ exited with 0 +++ [pid 606] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=606, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./71/binderfs") = 0 umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./71/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./71") = 0 mkdir("./72", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 610 ./strace-static-x86_64: Process 610 attached [pid 610] set_robust_list(0x555556b826a0, 24) = 0 [pid 610] chdir("./72") = 0 [pid 610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 610] setpgid(0, 0) = 0 [pid 610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 610] write(3, "1000", 4) = 4 [pid 610] close(3) = 0 [pid 610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 610] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 610] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 611 attached => {parent_tid=[611]}, 88) = 611 [pid 611] set_robust_list(0x7f96301a99a0, 24 [pid 610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 610] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... set_robust_list resumed>) = 0 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 611] memfd_create("syzkaller", 0) = 3 [pid 611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 611] munmap(0x7f9627d89000, 262144) = 0 [pid 611] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 611] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 611] close(3) = 0 [pid 611] mkdir("./file0", 0777) = 0 [pid 611] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 611] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 611] chdir("./file0") = 0 [pid 611] ioctl(4, LOOP_CLR_FD) = 0 [pid 611] close(4) = 0 [pid 611] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 611] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 611] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] creat("./bus", 000) = 6 [pid 611] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 611] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] open("./bus", O_RDONLY) = 7 [pid 611] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [ 42.293422][ T611] loop0: detected capacity change from 0 to 512 [ 42.301732][ T611] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 42.314921][ T611] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 42.324476][ T611] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 611] sendfile(6, 7, NULL, 140737974943952 [pid 610] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 610] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 610] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[613]}, 88) = 613 [pid 610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 610] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 613 attached [pid 613] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 613] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 613] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... futex resumed>) = 1 [pid 613] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 613] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 610] <... futex resumed>) = 0 [pid 613] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 610] exit_group(0) = ? [pid 613] <... futex resumed>) = ? [pid 613] +++ exited with 0 +++ [pid 611] <... sendfile resumed>) = ? [pid 611] +++ exited with 0 +++ [pid 610] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=610, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./72/binderfs") = 0 umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./72/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./72") = 0 mkdir("./73", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 614 ./strace-static-x86_64: Process 614 attached [pid 614] set_robust_list(0x555556b826a0, 24) = 0 [pid 614] chdir("./73") = 0 [pid 614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 614] setpgid(0, 0) = 0 [pid 614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 614] write(3, "1000", 4) = 4 [pid 614] close(3) = 0 [pid 614] symlink("/dev/binderfs", "./binderfs") = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 614] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 614] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 614] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[615]}, 88) = 615 [pid 614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 614] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 615 attached [pid 615] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 615] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 615] memfd_create("syzkaller", 0) = 3 [pid 615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 615] munmap(0x7f9627d89000, 262144) = 0 [pid 615] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 615] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 615] close(3) = 0 [pid 615] mkdir("./file0", 0777) = 0 [pid 615] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 615] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 615] chdir("./file0") = 0 [pid 615] ioctl(4, LOOP_CLR_FD) = 0 [pid 615] close(4) = 0 [pid 615] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 615] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 615] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] creat("./bus", 000) = 6 [pid 615] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 615] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] open("./bus", O_RDONLY) = 7 [pid 615] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [ 42.608390][ T615] loop0: detected capacity change from 0 to 512 [ 42.616660][ T615] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 42.630041][ T615] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 42.639657][ T615] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 615] sendfile(6, 7, NULL, 140737974943952 [pid 614] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 614] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 614] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 614] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 618 attached => {parent_tid=[618]}, 88) = 618 [pid 614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 614] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 618] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 618] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 618] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 614] <... futex resumed>) = 0 [pid 618] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 614] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 618] <... futex resumed>) = 0 [pid 618] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 618] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 618] <... futex resumed>) = 1 [pid 618] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] exit_group(0 [pid 618] <... futex resumed>) = ? [pid 614] <... exit_group resumed>) = ? [pid 618] +++ exited with 0 +++ [pid 615] <... sendfile resumed>) = ? [pid 615] +++ exited with 0 +++ [pid 614] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=614, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./73/binderfs") = 0 umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./73/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./73") = 0 mkdir("./74", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 619 ./strace-static-x86_64: Process 619 attached [pid 619] set_robust_list(0x555556b826a0, 24) = 0 [pid 619] chdir("./74") = 0 [pid 619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 619] setpgid(0, 0) = 0 [pid 619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 619] write(3, "1000", 4) = 4 [pid 619] close(3) = 0 [pid 619] symlink("/dev/binderfs", "./binderfs") = 0 [pid 619] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 619] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 619] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 619] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[620]}, 88) = 620 [pid 619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 619] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 620 attached [pid 620] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 620] memfd_create("syzkaller", 0) = 3 [pid 620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 620] munmap(0x7f9627d89000, 262144) = 0 [pid 620] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 620] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 620] close(3) = 0 [pid 620] mkdir("./file0", 0777) = 0 [pid 620] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 620] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 620] chdir("./file0") = 0 [pid 620] ioctl(4, LOOP_CLR_FD) = 0 [pid 620] close(4) = 0 [pid 620] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] <... futex resumed>) = 1 [pid 620] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 620] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 620] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 619] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 619] <... futex resumed>) = 0 [pid 620] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 619] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] <... open resumed>) = 5 [pid 620] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 620] creat("./bus", 000 [pid 619] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 620] <... creat resumed>) = 6 [pid 619] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 620] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] open("./bus", O_RDONLY) = 7 [pid 620] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 42.882219][ T620] loop0: detected capacity change from 0 to 512 [ 42.890236][ T620] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 42.903663][ T620] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 42.913382][ T620] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 620] sendfile(6, 7, NULL, 140737974943952 [pid 619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 619] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 619] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 619] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[622]}, 88) = 622 ./strace-static-x86_64: Process 622 attached [pid 622] set_robust_list(0x7f9627dc89a0, 24 [pid 619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 622] <... set_robust_list resumed>) = 0 [pid 619] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 619] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 622] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 622] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] sendmsg(-1, 0x20000000, 0 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 622] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 622] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 622] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 619] exit_group(0) = ? [pid 622] <... futex resumed>) = ? [pid 622] +++ exited with 0 +++ [pid 620] <... sendfile resumed>) = ? [pid 620] +++ exited with 0 +++ [pid 619] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=619, si_uid=0, si_status=0, si_utime=0, si_stime=19} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./74/binderfs") = 0 umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./74/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./74") = 0 mkdir("./75", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 623 ./strace-static-x86_64: Process 623 attached [pid 623] set_robust_list(0x555556b826a0, 24) = 0 [pid 623] chdir("./75") = 0 [pid 623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 623] setpgid(0, 0) = 0 [pid 623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 623] write(3, "1000", 4) = 4 [pid 623] close(3) = 0 [pid 623] symlink("/dev/binderfs", "./binderfs") = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 623] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 623] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 623] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 623] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[624]}, 88) = 624 [pid 623] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 624 attached [pid 624] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 624] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 624] memfd_create("syzkaller", 0) = 3 [pid 624] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 624] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 624] munmap(0x7f9627d89000, 262144) = 0 [pid 624] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 624] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 624] close(3) = 0 [pid 624] mkdir("./file0", 0777) = 0 [pid 624] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 624] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 624] chdir("./file0") = 0 [pid 624] ioctl(4, LOOP_CLR_FD) = 0 [pid 624] close(4) = 0 [pid 624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 624] <... futex resumed>) = 1 [pid 624] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 624] <... futex resumed>) = 1 [pid 624] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 624] <... futex resumed>) = 1 [pid 624] creat("./bus", 000) = 6 [pid 624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 624] <... futex resumed>) = 1 [pid 624] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 624] <... futex resumed>) = 1 [pid 624] open("./bus", O_RDONLY) = 7 [pid 624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 624] <... futex resumed>) = 1 [ 43.214696][ T624] loop0: detected capacity change from 0 to 512 [ 43.222779][ T624] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 43.236140][ T624] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 43.245760][ T624] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 624] sendfile(6, 7, NULL, 140737974943952 [pid 623] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 623] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 623] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 623] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 623] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[626]}, 88) = 626 ./strace-static-x86_64: Process 626 attached [pid 626] set_robust_list(0x7f9627dc89a0, 24 [pid 623] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 626] <... set_robust_list resumed>) = 0 [pid 623] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] rt_sigprocmask(SIG_SETMASK, [], [pid 623] <... futex resumed>) = 0 [pid 623] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 626] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 626] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 626] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = 1 [pid 623] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 626] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 626] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 623] <... futex resumed>) = 0 [pid 626] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 623] exit_group(0 [pid 626] <... futex resumed>) = ? [pid 623] <... exit_group resumed>) = ? [pid 626] +++ exited with 0 +++ [pid 624] <... sendfile resumed>) = ? [pid 624] +++ exited with 0 +++ [pid 623] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=623, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./75/binderfs") = 0 umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./75/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./75") = 0 mkdir("./76", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 627 ./strace-static-x86_64: Process 627 attached [pid 627] set_robust_list(0x555556b826a0, 24) = 0 [pid 627] chdir("./76") = 0 [pid 627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 627] setpgid(0, 0) = 0 [pid 627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 627] write(3, "1000", 4) = 4 [pid 627] close(3) = 0 [pid 627] symlink("/dev/binderfs", "./binderfs") = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 627] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 627] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 627] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[628]}, 88) = 628 [pid 627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 628 attached [pid 628] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 628] memfd_create("syzkaller", 0) = 3 [pid 628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 628] munmap(0x7f9627d89000, 262144) = 0 [pid 628] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 628] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 628] close(3) = 0 [pid 628] mkdir("./file0", 0777) = 0 [pid 628] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 628] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 628] chdir("./file0") = 0 [pid 628] ioctl(4, LOOP_CLR_FD) = 0 [pid 628] close(4) = 0 [pid 628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [pid 627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 1 [pid 628] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [pid 627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 1 [pid 628] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [pid 627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 1 [pid 628] creat("./bus", 000) = 6 [pid 628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [pid 627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 1 [pid 628] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [pid 627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 1 [pid 628] open("./bus", O_RDONLY) = 7 [pid 628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [pid 627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 1 [ 43.531263][ T628] loop0: detected capacity change from 0 to 512 [ 43.539310][ T628] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 43.552605][ T628] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 43.570309][ T628] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 628] sendfile(6, 7, NULL, 140737974943952 [pid 627] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 627] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 627] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 627] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[630]}, 88) = 630 ./strace-static-x86_64: Process 630 attached [pid 630] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 630] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 627] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] <... futex resumed>) = 0 [pid 627] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 630] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 630] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 627] <... futex resumed>) = 0 [pid 630] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 627] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 627] <... futex resumed>) = 0 [pid 630] sendmsg(-1, 0x20000000, 0 [pid 627] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 630] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 630] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 627] <... futex resumed>) = 0 [pid 630] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 627] exit_group(0) = ? [pid 630] <... futex resumed>) = 230 [pid 630] +++ exited with 0 +++ [pid 628] <... sendfile resumed>) = ? [pid 628] +++ exited with 0 +++ [pid 627] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=627, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./76/binderfs") = 0 umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./76/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./76") = 0 mkdir("./77", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 632 ./strace-static-x86_64: Process 632 attached [pid 632] set_robust_list(0x555556b826a0, 24) = 0 [pid 632] chdir("./77") = 0 [pid 632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 632] setpgid(0, 0) = 0 [pid 632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 632] write(3, "1000", 4) = 4 [pid 632] close(3) = 0 [pid 632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 632] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 632] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 632] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 632] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[633]}, 88) = 633 [pid 632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 632] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 633 attached [pid 633] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 633] memfd_create("syzkaller", 0) = 3 [pid 633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 633] munmap(0x7f9627d89000, 262144) = 0 [pid 633] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 633] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 633] close(3) = 0 [pid 633] mkdir("./file0", 0777) = 0 [pid 633] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 633] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 633] chdir("./file0") = 0 [pid 633] ioctl(4, LOOP_CLR_FD) = 0 [pid 633] close(4) = 0 [pid 633] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 633] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 633] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] creat("./bus", 000) = 6 [pid 633] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 633] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] open("./bus", O_RDONLY) = 7 [pid 633] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [ 43.840066][ T633] loop0: detected capacity change from 0 to 512 [ 43.848682][ T633] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 43.862338][ T633] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 43.871978][ T633] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 633] sendfile(6, 7, NULL, 140737974943952 [pid 632] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 632] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 632] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 632] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 632] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[635]}, 88) = 635 ./strace-static-x86_64: Process 635 attached [pid 635] set_robust_list(0x7f9627dc89a0, 24 [pid 632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 635] <... set_robust_list resumed>) = 0 [pid 632] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 635] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 635] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = 1 [pid 635] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] exit_group(0) = ? [pid 635] <... futex resumed>) = ? [pid 633] <... sendfile resumed>) = ? [pid 633] +++ exited with 0 +++ [pid 635] +++ exited with 0 +++ [pid 632] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=632, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./77/binderfs") = 0 umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./77/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./77") = 0 mkdir("./78", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 636 ./strace-static-x86_64: Process 636 attached [pid 636] set_robust_list(0x555556b826a0, 24) = 0 [pid 636] chdir("./78") = 0 [pid 636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 636] setpgid(0, 0) = 0 [pid 636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 636] write(3, "1000", 4) = 4 [pid 636] close(3) = 0 [pid 636] symlink("/dev/binderfs", "./binderfs") = 0 [pid 636] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 636] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 636] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[637]}, 88) = 637 [pid 636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 636] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 637 attached [pid 637] set_robust_list(0x7f96301a99a0, 24 [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 637] <... set_robust_list resumed>) = 0 [pid 637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 637] memfd_create("syzkaller", 0) = 3 [pid 637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 637] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 637] munmap(0x7f9627d89000, 262144) = 0 [pid 637] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 637] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 637] close(3) = 0 [pid 637] mkdir("./file0", 0777) = 0 [pid 637] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 637] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 637] chdir("./file0") = 0 [pid 637] ioctl(4, LOOP_CLR_FD) = 0 [pid 637] close(4) = 0 [pid 637] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... futex resumed>) = 1 [pid 637] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 637] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 637] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] creat("./bus", 000) = 6 [pid 637] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 637] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] open("./bus", O_RDONLY) = 7 [pid 637] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 44.172045][ T637] loop0: detected capacity change from 0 to 512 [ 44.180812][ T637] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 44.194048][ T637] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 44.203955][ T637] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 637] sendfile(6, 7, NULL, 140737974943952 [pid 636] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 636] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 636] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 639 attached [pid 639] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 639] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 636] <... clone3 resumed> => {parent_tid=[639]}, 88) = 639 [pid 636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 636] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 639] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 639] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... futex resumed>) = 1 [pid 639] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 639] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 639] <... futex resumed>) = 1 [pid 639] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 636] exit_group(0) = ? [pid 639] <... futex resumed>) = ? [pid 639] +++ exited with 0 +++ [pid 637] <... sendfile resumed>) = ? [pid 637] +++ exited with 0 +++ [pid 636] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=636, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./78/binderfs") = 0 umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./78/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./78") = 0 mkdir("./79", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 640 ./strace-static-x86_64: Process 640 attached [pid 640] set_robust_list(0x555556b826a0, 24) = 0 [pid 640] chdir("./79") = 0 [pid 640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 640] setpgid(0, 0) = 0 [pid 640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 640] write(3, "1000", 4) = 4 [pid 640] close(3) = 0 [pid 640] symlink("/dev/binderfs", "./binderfs") = 0 [pid 640] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 640] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 640] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 640] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 641 attached => {parent_tid=[641]}, 88) = 641 [pid 640] rt_sigprocmask(SIG_SETMASK, [], [pid 641] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 640] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 641] rt_sigprocmask(SIG_SETMASK, [], [pid 640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 641] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 641] memfd_create("syzkaller", 0) = 3 [pid 641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 641] munmap(0x7f9627d89000, 262144) = 0 [pid 641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 641] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 641] close(3) = 0 [pid 641] mkdir("./file0", 0777) = 0 [pid 641] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 641] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 641] chdir("./file0") = 0 [pid 641] ioctl(4, LOOP_CLR_FD) = 0 [pid 641] close(4) = 0 [pid 641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 641] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 0 [pid 641] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 641] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 0 [pid 641] creat("./bus", 000) = 6 [pid 641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] open("./bus", O_RDONLY) = 7 [pid 641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [ 44.494209][ T641] loop0: detected capacity change from 0 to 512 [ 44.502233][ T641] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 44.515477][ T641] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 44.525566][ T641] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 641] sendfile(6, 7, NULL, 140737974943952 [pid 640] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 640] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 640] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 640] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 643 attached [pid 643] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 643] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 640] <... clone3 resumed> => {parent_tid=[643]}, 88) = 643 [pid 640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 640] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] <... futex resumed>) = 0 [pid 640] <... futex resumed>) = 1 [pid 643] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 640] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] <... mmap resumed>) = 0x20000000 [pid 643] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 643] <... futex resumed>) = 1 [pid 640] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 643] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 640] <... futex resumed>) = 0 [pid 643] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 640] exit_group(0 [pid 643] <... futex resumed>) = ? [pid 640] <... exit_group resumed>) = ? [pid 643] +++ exited with 0 +++ [pid 641] <... sendfile resumed>) = ? [pid 641] +++ exited with 0 +++ [pid 640] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=640, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./79/binderfs") = 0 umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./79/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./79") = 0 mkdir("./80", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 645 ./strace-static-x86_64: Process 645 attached [pid 645] set_robust_list(0x555556b826a0, 24) = 0 [pid 645] chdir("./80") = 0 [pid 645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 645] setpgid(0, 0) = 0 [pid 645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 645] write(3, "1000", 4) = 4 [pid 645] close(3) = 0 [pid 645] symlink("/dev/binderfs", "./binderfs") = 0 [pid 645] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 645] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 645] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 645] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[646]}, 88) = 646 [pid 645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 645] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 646 attached [pid 646] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 646] memfd_create("syzkaller", 0) = 3 [pid 646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 646] munmap(0x7f9627d89000, 262144) = 0 [pid 646] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 646] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 646] close(3) = 0 [pid 646] mkdir("./file0", 0777) = 0 [pid 646] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 646] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 646] chdir("./file0") = 0 [pid 646] ioctl(4, LOOP_CLR_FD) = 0 [pid 646] close(4) = 0 [pid 646] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 646] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 645] <... futex resumed>) = 0 [pid 645] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] <... futex resumed>) = 0 [pid 646] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 646] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 645] <... futex resumed>) = 0 [pid 646] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 645] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] <... open resumed>) = 5 [pid 645] <... futex resumed>) = 0 [pid 646] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] <... futex resumed>) = 0 [pid 646] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 645] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] creat("./bus", 000 [pid 645] <... futex resumed>) = 0 [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] <... creat resumed>) = 6 [pid 646] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 645] <... futex resumed>) = 0 [pid 646] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 645] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] <... writev resumed>) = 1 [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 646] <... futex resumed>) = 0 [pid 645] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] open("./bus", O_RDONLY [pid 645] <... futex resumed>) = 0 [pid 646] <... open resumed>) = 7 [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 646] <... futex resumed>) = 0 [pid 645] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] sendfile(6, 7, NULL, 140737974943952 [pid 645] <... futex resumed>) = 0 [ 44.813658][ T646] loop0: detected capacity change from 0 to 512 [ 44.821830][ T646] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 44.834958][ T646] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 44.844414][ T646] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 645] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 645] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 648 attached [pid 648] set_robust_list(0x7f9627dc89a0, 24 [pid 645] <... clone3 resumed> => {parent_tid=[648]}, 88) = 648 [pid 648] <... set_robust_list resumed>) = 0 [pid 645] rt_sigprocmask(SIG_SETMASK, [], [pid 648] rt_sigprocmask(SIG_SETMASK, [], [pid 645] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 648] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 645] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 645] <... futex resumed>) = 0 [pid 645] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 648] <... mmap resumed>) = 0x20000000 [pid 648] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 645] <... futex resumed>) = 0 [pid 645] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] sendmsg(-1, 0x20000000, 0 [pid 645] <... futex resumed>) = 0 [pid 648] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 645] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 648] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 648] <... futex resumed>) = 0 [pid 648] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 645] exit_group(0 [pid 648] <... futex resumed>) = ? [pid 645] <... exit_group resumed>) = ? [pid 648] +++ exited with 0 +++ [pid 646] <... sendfile resumed>) = ? [pid 646] +++ exited with 0 +++ [pid 645] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=645, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./80/binderfs") = 0 umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./80/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./80") = 0 mkdir("./81", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 649 ./strace-static-x86_64: Process 649 attached [pid 649] set_robust_list(0x555556b826a0, 24) = 0 [pid 649] chdir("./81") = 0 [pid 649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 649] setpgid(0, 0) = 0 [pid 649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 649] write(3, "1000", 4) = 4 [pid 649] close(3) = 0 [pid 649] symlink("/dev/binderfs", "./binderfs") = 0 [pid 649] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 649] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 649] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 649] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[650]}, 88) = 650 [pid 649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 649] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 650 attached [pid 650] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 650] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 650] memfd_create("syzkaller", 0) = 3 [pid 650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 650] munmap(0x7f9627d89000, 262144) = 0 [pid 650] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 650] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 650] close(3) = 0 [pid 650] mkdir("./file0", 0777) = 0 [pid 650] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 650] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 650] chdir("./file0") = 0 [pid 650] ioctl(4, LOOP_CLR_FD) = 0 [pid 650] close(4) = 0 [pid 650] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 650] <... futex resumed>) = 1 [pid 650] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 650] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 650] <... futex resumed>) = 1 [pid 650] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 650] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 650] <... futex resumed>) = 1 [pid 650] creat("./bus", 000) = 6 [pid 650] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 650] <... futex resumed>) = 1 [pid 650] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 650] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 649] <... futex resumed>) = 0 [pid 650] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 649] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 649] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 650] <... futex resumed>) = 0 [pid 650] open("./bus", O_RDONLY) = 7 [pid 650] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 45.109147][ T650] loop0: detected capacity change from 0 to 512 [ 45.117220][ T650] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 45.130153][ T650] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 45.139881][ T650] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 650] sendfile(6, 7, NULL, 140737974943952 [pid 649] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 649] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 649] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 649] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[652]}, 88) = 652 [pid 649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 649] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 652 attached [pid 652] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 652] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 652] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 652] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 652] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 649] <... futex resumed>) = 0 [pid 652] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 649] exit_group(0 [pid 652] <... futex resumed>) = ? [pid 649] <... exit_group resumed>) = ? [pid 652] +++ exited with 0 +++ [pid 650] <... sendfile resumed>) = ? [pid 650] +++ exited with 0 +++ [pid 649] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=649, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./81/binderfs") = 0 umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./81/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./81") = 0 mkdir("./82", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 653 ./strace-static-x86_64: Process 653 attached [pid 653] set_robust_list(0x555556b826a0, 24) = 0 [pid 653] chdir("./82") = 0 [pid 653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 653] setpgid(0, 0) = 0 [pid 653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 653] write(3, "1000", 4) = 4 [pid 653] close(3) = 0 [pid 653] symlink("/dev/binderfs", "./binderfs") = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 653] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 653] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 653] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[654]}, 88) = 654 [pid 653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 654 attached [pid 654] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 654] memfd_create("syzkaller", 0) = 3 [pid 654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 654] munmap(0x7f9627d89000, 262144) = 0 [pid 654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 654] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 654] close(3) = 0 [pid 654] mkdir("./file0", 0777) = 0 [pid 654] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 654] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 654] chdir("./file0") = 0 [pid 654] ioctl(4, LOOP_CLR_FD) = 0 [pid 654] close(4) = 0 [pid 654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... futex resumed>) = 1 [pid 654] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... futex resumed>) = 1 [pid 654] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... futex resumed>) = 1 [pid 654] creat("./bus", 000) = 6 [pid 654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... futex resumed>) = 1 [pid 654] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... futex resumed>) = 1 [pid 654] open("./bus", O_RDONLY) = 7 [pid 654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... futex resumed>) = 1 [ 45.452884][ T654] loop0: detected capacity change from 0 to 512 [ 45.461207][ T654] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 45.474581][ T654] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 45.485046][ T654] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 654] sendfile(6, 7, NULL, 140737974943952 [pid 653] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 653] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 653] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 653] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[656]}, 88) = 656 [pid 653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 653] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 656 attached [pid 656] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 656] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 656] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 656] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 656] <... futex resumed>) = 1 [pid 653] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 656] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 656] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 656] <... futex resumed>) = 1 [pid 656] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] exit_group(0 [pid 656] <... futex resumed>) = ? [pid 653] <... exit_group resumed>) = ? [pid 656] +++ exited with 0 +++ [pid 654] <... sendfile resumed>) = ? [pid 654] +++ exited with 0 +++ [pid 653] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=653, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./82/binderfs") = 0 umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./82/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./82") = 0 mkdir("./83", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 658 ./strace-static-x86_64: Process 658 attached [pid 658] set_robust_list(0x555556b826a0, 24) = 0 [pid 658] chdir("./83") = 0 [pid 658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 658] setpgid(0, 0) = 0 [pid 658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 658] write(3, "1000", 4) = 4 [pid 658] close(3) = 0 [pid 658] symlink("/dev/binderfs", "./binderfs") = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 658] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 658] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 658] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 658] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[659]}, 88) = 659 [pid 658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 658] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 659 attached [pid 659] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 659] memfd_create("syzkaller", 0) = 3 [pid 659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 659] munmap(0x7f9627d89000, 262144) = 0 [pid 659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 659] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 659] close(3) = 0 [pid 659] mkdir("./file0", 0777) = 0 [pid 659] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 659] chdir("./file0") = 0 [pid 659] ioctl(4, LOOP_CLR_FD) = 0 [pid 659] close(4) = 0 [pid 659] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 659] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 659] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] creat("./bus", 000) = 6 [pid 659] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 659] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] open("./bus", O_RDONLY) = 7 [pid 659] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [ 45.740410][ T659] loop0: detected capacity change from 0 to 512 [ 45.748588][ T659] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 45.762258][ T659] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 45.772593][ T659] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 659] sendfile(6, 7, NULL, 140737974943952 [pid 658] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 658] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 658] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 658] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 658] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 662 attached => {parent_tid=[662]}, 88) = 662 [pid 658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 658] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 662] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 662] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 662] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 662] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 662] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 662] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] <... futex resumed>) = 0 [pid 662] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 658] exit_group(0 [pid 662] <... futex resumed>) = ? [pid 658] <... exit_group resumed>) = ? [pid 662] +++ exited with 0 +++ [pid 659] <... sendfile resumed>) = 230 [pid 659] +++ exited with 0 +++ [pid 658] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=658, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./83/binderfs") = 0 umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./83/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./83") = 0 mkdir("./84", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 663 ./strace-static-x86_64: Process 663 attached [pid 663] set_robust_list(0x555556b826a0, 24) = 0 [pid 663] chdir("./84") = 0 [pid 663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 663] setpgid(0, 0) = 0 [pid 663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 663] write(3, "1000", 4) = 4 [pid 663] close(3) = 0 [pid 663] symlink("/dev/binderfs", "./binderfs") = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 663] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 663] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 663] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 663] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[664]}, 88) = 664 [pid 663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 663] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 664 attached [pid 664] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 664] memfd_create("syzkaller", 0) = 3 [pid 664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 664] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 664] munmap(0x7f9627d89000, 262144) = 0 [pid 664] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 664] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 664] close(3) = 0 [pid 664] mkdir("./file0", 0777) = 0 [pid 664] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 664] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 664] chdir("./file0") = 0 [pid 664] ioctl(4, LOOP_CLR_FD) = 0 [pid 664] close(4) = 0 [pid 664] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 1 [pid 664] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 664] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 1 [pid 664] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 664] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 1 [pid 664] creat("./bus", 000) = 6 [pid 664] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 1 [pid 664] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 664] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 1 [pid 664] open("./bus", O_RDONLY) = 7 [pid 664] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 1 [ 46.012284][ T664] loop0: detected capacity change from 0 to 512 [ 46.020064][ T664] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 46.040329][ T664] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 46.050060][ T664] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 664] sendfile(6, 7, NULL, 140737974943952 [pid 663] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 663] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 663] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 663] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 663] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 666 attached => {parent_tid=[666]}, 88) = 666 [pid 663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 663] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 666] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 666] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 666] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 663] <... futex resumed>) = 0 [pid 666] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] exit_group(0 [pid 666] <... futex resumed>) = ? [pid 663] <... exit_group resumed>) = ? [pid 666] +++ exited with 0 +++ [pid 664] <... sendfile resumed>) = ? [pid 664] +++ exited with 0 +++ [pid 663] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=663, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./84/binderfs") = 0 umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./84/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./84") = 0 mkdir("./85", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 667 ./strace-static-x86_64: Process 667 attached [pid 667] set_robust_list(0x555556b826a0, 24) = 0 [pid 667] chdir("./85") = 0 [pid 667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 667] setpgid(0, 0) = 0 [pid 667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 667] write(3, "1000", 4) = 4 [pid 667] close(3) = 0 [pid 667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 667] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 667] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 667] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 667] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[668]}, 88) = 668 [pid 667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 667] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 668 attached [pid 668] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 668] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 668] memfd_create("syzkaller", 0) = 3 [pid 668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 668] munmap(0x7f9627d89000, 262144) = 0 [pid 668] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 668] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 668] close(3) = 0 [pid 668] mkdir("./file0", 0777) = 0 [pid 668] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 668] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 668] chdir("./file0") = 0 [pid 668] ioctl(4, LOOP_CLR_FD) = 0 [pid 668] close(4) = 0 [pid 668] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 668] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 668] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] creat("./bus", 000) = 6 [pid 668] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 668] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] open("./bus", O_RDONLY) = 7 [pid 668] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [ 46.289945][ T668] loop0: detected capacity change from 0 to 512 [ 46.297907][ T668] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 46.311007][ T668] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 46.320502][ T668] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 668] sendfile(6, 7, NULL, 140737974943952 [pid 667] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 667] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 667] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 667] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 667] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[670]}, 88) = 670 [pid 667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 667] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 670 attached [pid 670] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 670] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 670] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... futex resumed>) = 1 [pid 670] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 670] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 670] <... futex resumed>) = 1 [pid 670] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 667] exit_group(0 [pid 670] <... futex resumed>) = ? [pid 667] <... exit_group resumed>) = ? [pid 670] +++ exited with 0 +++ [pid 668] <... sendfile resumed>) = ? [pid 668] +++ exited with 0 +++ [pid 667] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=667, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./85/binderfs") = 0 umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./85/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./85") = 0 mkdir("./86", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 671 ./strace-static-x86_64: Process 671 attached [pid 671] set_robust_list(0x555556b826a0, 24) = 0 [pid 671] chdir("./86") = 0 [pid 671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 671] setpgid(0, 0) = 0 [pid 671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 671] write(3, "1000", 4) = 4 [pid 671] close(3) = 0 [pid 671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 671] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 671] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 671] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 672 attached => {parent_tid=[672]}, 88) = 672 [pid 672] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 672] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 672] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 671] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 672] <... futex resumed>) = 0 [pid 672] memfd_create("syzkaller", 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 672] <... memfd_create resumed>) = 3 [pid 672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 672] munmap(0x7f9627d89000, 262144) = 0 [pid 672] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 672] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 672] close(3) = 0 [pid 672] mkdir("./file0", 0777) = 0 [pid 672] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 672] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 672] chdir("./file0") = 0 [pid 672] ioctl(4, LOOP_CLR_FD) = 0 [pid 672] close(4) = 0 [pid 672] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... futex resumed>) = 1 [pid 672] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 672] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... futex resumed>) = 1 [pid 672] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 672] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... futex resumed>) = 1 [pid 672] creat("./bus", 000) = 6 [pid 672] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... futex resumed>) = 1 [pid 672] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 672] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... futex resumed>) = 1 [pid 672] open("./bus", O_RDONLY) = 7 [pid 672] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 46.571134][ T672] loop0: detected capacity change from 0 to 512 [ 46.580688][ T672] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 46.594276][ T672] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 46.603828][ T672] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 672] sendfile(6, 7, NULL, 140737974943952 [pid 671] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 671] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 671] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 671] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[675]}, 88) = 675 ./strace-static-x86_64: Process 675 attached [pid 671] rt_sigprocmask(SIG_SETMASK, [], [pid 675] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 671] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 675] rt_sigprocmask(SIG_SETMASK, [], [pid 671] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 675] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 675] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 675] sendmsg(-1, 0x20000000, 0 [pid 671] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 675] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 675] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] exit_group(0 [pid 675] <... futex resumed>) = ? [pid 671] <... exit_group resumed>) = ? [pid 675] +++ exited with 0 +++ [pid 672] <... sendfile resumed>) = ? [pid 672] +++ exited with 0 +++ [pid 671] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=671, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./86/binderfs") = 0 umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./86/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./86") = 0 mkdir("./87", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 676 ./strace-static-x86_64: Process 676 attached [pid 676] set_robust_list(0x555556b826a0, 24) = 0 [pid 676] chdir("./87") = 0 [pid 676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 676] setpgid(0, 0) = 0 [pid 676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 676] write(3, "1000", 4) = 4 [pid 676] close(3) = 0 [pid 676] symlink("/dev/binderfs", "./binderfs") = 0 [pid 676] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 676] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 676] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 676] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 676] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[677]}, 88) = 677 [pid 676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 676] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 677 attached [pid 677] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 677] memfd_create("syzkaller", 0) = 3 [pid 677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 677] munmap(0x7f9627d89000, 262144) = 0 [pid 677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 677] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 677] close(3) = 0 [pid 677] mkdir("./file0", 0777) = 0 [pid 677] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 677] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 677] chdir("./file0") = 0 [pid 677] ioctl(4, LOOP_CLR_FD) = 0 [pid 677] close(4) = 0 [pid 677] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 677] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 0 [pid 677] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 677] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [pid 677] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 677] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [pid 677] creat("./bus", 000) = 6 [pid 677] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [pid 677] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 677] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [pid 677] open("./bus", O_RDONLY) = 7 [pid 677] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [ 46.853874][ T677] loop0: detected capacity change from 0 to 512 [ 46.862832][ T677] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 46.880681][ T677] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 46.892652][ T677] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 677] sendfile(6, 7, NULL, 140737974943952 [pid 676] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 676] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 676] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 676] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 676] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 679 attached => {parent_tid=[679]}, 88) = 679 [pid 676] rt_sigprocmask(SIG_SETMASK, [], [pid 679] set_robust_list(0x7f9627dc89a0, 24 [pid 676] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 676] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 679] <... set_robust_list resumed>) = 0 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 679] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 679] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 679] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 679] <... futex resumed>) = 1 [pid 679] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 679] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 679] <... futex resumed>) = 1 [pid 679] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 676] exit_group(0) = ? [pid 679] <... futex resumed>) = ? [pid 679] +++ exited with 0 +++ [pid 677] <... sendfile resumed>) = ? [pid 677] +++ exited with 0 +++ [pid 676] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=676, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./87/binderfs") = 0 umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./87/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./87") = 0 mkdir("./88", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 680 ./strace-static-x86_64: Process 680 attached [pid 680] set_robust_list(0x555556b826a0, 24) = 0 [pid 680] chdir("./88") = 0 [pid 680] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 680] setpgid(0, 0) = 0 [pid 680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 680] write(3, "1000", 4) = 4 [pid 680] close(3) = 0 [pid 680] symlink("/dev/binderfs", "./binderfs") = 0 [pid 680] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 680] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 680] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 680] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 680] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 680] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 681 attached => {parent_tid=[681]}, 88) = 681 [pid 681] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 680] rt_sigprocmask(SIG_SETMASK, [], [pid 681] rt_sigprocmask(SIG_SETMASK, [], [pid 680] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 681] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 680] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 681] memfd_create("syzkaller", 0 [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 681] <... memfd_create resumed>) = 3 [pid 681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 681] munmap(0x7f9627d89000, 262144) = 0 [pid 681] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 681] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 681] close(3) = 0 [pid 681] mkdir("./file0", 0777) = 0 [ 47.148279][ T681] loop0: detected capacity change from 0 to 512 [ 47.162334][ T681] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 47.179390][ T681] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 681] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 681] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 681] chdir("./file0") = 0 [pid 681] ioctl(4, LOOP_CLR_FD) = 0 [pid 681] close(4) = 0 [pid 681] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... futex resumed>) = 0 [pid 680] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] <... futex resumed>) = 1 [pid 681] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 681] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] <... futex resumed>) = 0 [pid 681] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 680] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] <... futex resumed>) = 0 [pid 681] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 681] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... futex resumed>) = 0 [pid 680] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] <... futex resumed>) = 1 [pid 681] creat("./bus", 000) = 6 [pid 681] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... futex resumed>) = 0 [pid 681] <... futex resumed>) = 1 [pid 680] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 681] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] <... futex resumed>) = 0 [pid 681] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 680] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 680] <... futex resumed>) = 0 [pid 681] open("./bus", O_RDONLY [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] <... open resumed>) = 7 [pid 681] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] <... futex resumed>) = 0 [pid 681] sendfile(6, 7, NULL, 140737974943952 [pid 680] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 47.190445][ T681] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 680] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 680] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 680] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 680] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[683]}, 88) = 683 ./strace-static-x86_64: Process 683 attached [pid 683] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 683] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 683] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 680] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 680] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = 0 [pid 680] <... futex resumed>) = 1 [pid 683] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 680] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 683] <... mmap resumed>) = 0x20000000 [pid 683] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] <... futex resumed>) = 0 [pid 680] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 683] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 683] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... futex resumed>) = 0 [pid 683] <... futex resumed>) = 1 [pid 683] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 680] exit_group(0 [pid 683] <... futex resumed>) = ? [pid 680] <... exit_group resumed>) = ? [pid 683] +++ exited with 0 +++ [pid 681] <... sendfile resumed>) = ? [pid 681] +++ exited with 0 +++ [pid 680] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=680, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./88/binderfs") = 0 umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./88/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./88") = 0 mkdir("./89", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 684 ./strace-static-x86_64: Process 684 attached [pid 684] set_robust_list(0x555556b826a0, 24) = 0 [pid 684] chdir("./89") = 0 [pid 684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 684] setpgid(0, 0) = 0 [pid 684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 684] write(3, "1000", 4) = 4 [pid 684] close(3) = 0 [pid 684] symlink("/dev/binderfs", "./binderfs") = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 684] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 684] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 684] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 684] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[685]}, 88) = 685 [pid 684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 684] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 685 attached [pid 685] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 685] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 685] memfd_create("syzkaller", 0) = 3 [pid 685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 685] munmap(0x7f9627d89000, 262144) = 0 [pid 685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 685] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 685] close(3) = 0 [pid 685] mkdir("./file0", 0777) = 0 [pid 685] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 685] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 685] chdir("./file0") = 0 [pid 685] ioctl(4, LOOP_CLR_FD) = 0 [pid 685] close(4) = 0 [pid 685] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 1 [pid 685] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 685] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 1 [pid 685] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 685] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 1 [pid 685] creat("./bus", 000) = 6 [pid 685] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 1 [pid 685] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 685] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 1 [pid 685] open("./bus", O_RDONLY) = 7 [pid 685] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 1 [ 47.488330][ T685] loop0: detected capacity change from 0 to 512 [ 47.497561][ T685] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 47.510725][ T685] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 47.520466][ T685] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 685] sendfile(6, 7, NULL, 140737974943952 [pid 684] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 684] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 684] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 684] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 684] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[687]}, 88) = 687 [pid 684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 684] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 687 attached [pid 687] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 687] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 687] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 687] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] <... futex resumed>) = 1 [pid 687] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 687] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 684] <... futex resumed>) = 0 [pid 687] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 684] exit_group(0 [pid 687] <... futex resumed>) = ? [pid 684] <... exit_group resumed>) = ? [pid 687] +++ exited with 0 +++ [pid 685] <... sendfile resumed>) = ? [pid 685] +++ exited with 0 +++ [pid 684] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=684, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./89/binderfs") = 0 umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./89/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./89") = 0 mkdir("./90", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 689 ./strace-static-x86_64: Process 689 attached [pid 689] set_robust_list(0x555556b826a0, 24) = 0 [pid 689] chdir("./90") = 0 [pid 689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 689] setpgid(0, 0) = 0 [pid 689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 689] write(3, "1000", 4) = 4 [pid 689] close(3) = 0 [pid 689] symlink("/dev/binderfs", "./binderfs") = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 689] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 689] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 689] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[690]}, 88) = 690 [pid 689] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 689] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 690 attached [pid 690] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 690] memfd_create("syzkaller", 0) = 3 [pid 690] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 690] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 690] munmap(0x7f9627d89000, 262144) = 0 [pid 690] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 690] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 690] close(3) = 0 [pid 690] mkdir("./file0", 0777) = 0 [pid 690] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 690] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 690] chdir("./file0") = 0 [pid 690] ioctl(4, LOOP_CLR_FD) = 0 [pid 690] close(4) = 0 [pid 690] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = 1 [pid 690] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 690] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = 1 [pid 690] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 690] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = 1 [pid 690] creat("./bus", 000) = 6 [pid 690] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = 1 [pid 690] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 690] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = 1 [pid 690] open("./bus", O_RDONLY) = 7 [pid 690] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = 1 [ 47.776630][ T690] loop0: detected capacity change from 0 to 512 [ 47.784990][ T690] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 47.798318][ T690] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 47.807880][ T690] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 690] sendfile(6, 7, NULL, 140737974943952 [pid 689] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 689] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 689] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 689] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[692]}, 88) = 692 [pid 689] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 689] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 692 attached [pid 692] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 692] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 692] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 692] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... futex resumed>) = 1 [pid 692] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 692] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 692] <... futex resumed>) = 1 [pid 692] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 689] exit_group(0 [pid 692] <... futex resumed>) = ? [pid 689] <... exit_group resumed>) = ? [pid 692] +++ exited with 0 +++ [pid 690] <... sendfile resumed>) = ? [pid 690] +++ exited with 0 +++ [pid 689] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=689, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./90/binderfs") = 0 umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./90/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./90") = 0 mkdir("./91", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 693 ./strace-static-x86_64: Process 693 attached [pid 693] set_robust_list(0x555556b826a0, 24) = 0 [pid 693] chdir("./91") = 0 [pid 693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 693] setpgid(0, 0) = 0 [pid 693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 693] write(3, "1000", 4) = 4 [pid 693] close(3) = 0 [pid 693] symlink("/dev/binderfs", "./binderfs") = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 693] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 693] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 693] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[694]}, 88) = 694 [pid 693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 693] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 694 attached [pid 694] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 694] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 694] memfd_create("syzkaller", 0) = 3 [pid 694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 694] munmap(0x7f9627d89000, 262144) = 0 [pid 694] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 694] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 694] close(3) = 0 [pid 694] mkdir("./file0", 0777) = 0 [pid 694] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 694] chdir("./file0") = 0 [pid 694] ioctl(4, LOOP_CLR_FD) = 0 [pid 694] close(4) = 0 [pid 694] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 693] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... futex resumed>) = 1 [pid 694] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 694] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 693] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... futex resumed>) = 1 [pid 694] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 694] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 693] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... futex resumed>) = 1 [pid 694] creat("./bus", 000) = 6 [pid 694] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 693] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... futex resumed>) = 1 [pid 694] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 694] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 693] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... futex resumed>) = 1 [pid 694] open("./bus", O_RDONLY) = 7 [pid 694] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 693] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... futex resumed>) = 1 [ 48.042804][ T694] loop0: detected capacity change from 0 to 512 [ 48.052730][ T694] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 48.067158][ T694] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 48.077106][ T694] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 694] sendfile(6, 7, NULL, 140737974943952 [pid 693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 693] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 693] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 693] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 696 attached => {parent_tid=[696]}, 88) = 696 [pid 696] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 693] rt_sigprocmask(SIG_SETMASK, [], [pid 696] rt_sigprocmask(SIG_SETMASK, [], [pid 693] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 693] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 693] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 696] <... mmap resumed>) = 0x20000000 [pid 696] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 696] <... futex resumed>) = 1 [pid 693] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 696] sendmsg(-1, 0x20000000, 0 [pid 693] <... futex resumed>) = 0 [pid 696] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 693] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 696] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 693] <... futex resumed>) = 0 [pid 696] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 693] exit_group(0 [pid 694] <... sendfile resumed>) = ? [pid 693] <... exit_group resumed>) = ? [pid 696] <... futex resumed>) = ? [pid 694] +++ exited with 0 +++ [pid 696] +++ exited with 0 +++ [pid 693] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=693, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./91/binderfs") = 0 umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./91/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./91") = 0 mkdir("./92", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 697 ./strace-static-x86_64: Process 697 attached [pid 697] set_robust_list(0x555556b826a0, 24) = 0 [pid 697] chdir("./92") = 0 [pid 697] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 697] setpgid(0, 0) = 0 [pid 697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 697] write(3, "1000", 4) = 4 [pid 697] close(3) = 0 [pid 697] symlink("/dev/binderfs", "./binderfs") = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 697] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 697] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 697] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[698]}, 88) = 698 [pid 697] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 697] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 698 attached [pid 698] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 698] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 698] memfd_create("syzkaller", 0) = 3 [pid 698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 698] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 698] munmap(0x7f9627d89000, 262144) = 0 [pid 698] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 698] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 698] close(3) = 0 [pid 698] mkdir("./file0", 0777) = 0 [pid 698] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 698] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 698] chdir("./file0") = 0 [pid 698] ioctl(4, LOOP_CLR_FD) = 0 [pid 698] close(4) = 0 [pid 698] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... futex resumed>) = 1 [pid 698] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 698] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... futex resumed>) = 1 [pid 698] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 698] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... futex resumed>) = 1 [pid 698] creat("./bus", 000) = 6 [pid 698] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 697] <... futex resumed>) = 0 [pid 698] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 697] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... writev resumed>) = 1 [pid 698] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... futex resumed>) = 1 [pid 698] open("./bus", O_RDONLY) = 7 [pid 698] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = 1 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 48.350659][ T698] loop0: detected capacity change from 0 to 512 [ 48.358661][ T698] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 48.371947][ T698] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 48.383147][ T698] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 698] sendfile(6, 7, NULL, 140737974943952 [pid 697] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 697] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 697] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 697] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[700]}, 88) = 700 [pid 697] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 697] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 700 attached [pid 700] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 700] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 700] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 700] <... futex resumed>) = 1 [pid 700] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 700] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = 1 [pid 700] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 697] exit_group(0 [pid 700] <... futex resumed>) = ? [pid 697] <... exit_group resumed>) = ? [pid 700] +++ exited with 0 +++ [pid 698] <... sendfile resumed>) = ? [pid 698] +++ exited with 0 +++ [pid 697] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=697, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./92/binderfs") = 0 umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./92/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./92/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./92") = 0 mkdir("./93", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 702 ./strace-static-x86_64: Process 702 attached [pid 702] set_robust_list(0x555556b826a0, 24) = 0 [pid 702] chdir("./93") = 0 [pid 702] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 702] setpgid(0, 0) = 0 [pid 702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 702] write(3, "1000", 4) = 4 [pid 702] close(3) = 0 [pid 702] symlink("/dev/binderfs", "./binderfs") = 0 [pid 702] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 702] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 702] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 702] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 702] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 703 attached => {parent_tid=[703]}, 88) = 703 [pid 703] set_robust_list(0x7f96301a99a0, 24 [pid 702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 702] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 703] <... set_robust_list resumed>) = 0 [pid 703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 703] memfd_create("syzkaller", 0) = 3 [pid 703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 703] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 703] munmap(0x7f9627d89000, 262144) = 0 [pid 703] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 703] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 703] close(3) = 0 [pid 703] mkdir("./file0", 0777) = 0 [pid 703] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 703] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 703] chdir("./file0") = 0 [pid 703] ioctl(4, LOOP_CLR_FD) = 0 [pid 703] close(4) = 0 [pid 703] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 703] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 0 [pid 703] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 703] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 1 [pid 703] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 703] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 1 [pid 703] creat("./bus", 000) = 6 [pid 703] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 1 [pid 703] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 703] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 1 [pid 703] open("./bus", O_RDONLY) = 7 [pid 703] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 1 [ 48.688578][ T703] loop0: detected capacity change from 0 to 512 [ 48.697995][ T703] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 48.711369][ T703] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 48.721187][ T703] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 703] sendfile(6, 7, NULL, 140737974943952 [pid 702] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 702] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 702] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 702] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 702] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 705 attached => {parent_tid=[705]}, 88) = 705 [pid 702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 702] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 705] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 705] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 705] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 705] <... futex resumed>) = 1 [pid 705] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] exit_group(0 [pid 705] <... futex resumed>) = ? [pid 702] <... exit_group resumed>) = ? [pid 705] +++ exited with 0 +++ [pid 703] <... sendfile resumed>) = ? [pid 703] +++ exited with 0 +++ [pid 702] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=702, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./93/binderfs") = 0 umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./93/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./93") = 0 mkdir("./94", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 706 ./strace-static-x86_64: Process 706 attached [pid 706] set_robust_list(0x555556b826a0, 24) = 0 [pid 706] chdir("./94") = 0 [pid 706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 706] setpgid(0, 0) = 0 [pid 706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 706] write(3, "1000", 4) = 4 [pid 706] close(3) = 0 [pid 706] symlink("/dev/binderfs", "./binderfs") = 0 [pid 706] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 706] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 706] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 706] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[707]}, 88) = 707 [pid 706] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 706] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 707 attached [pid 707] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 707] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 707] memfd_create("syzkaller", 0) = 3 [pid 707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 707] munmap(0x7f9627d89000, 262144) = 0 [pid 707] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 707] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 707] close(3) = 0 [pid 707] mkdir("./file0", 0777) = 0 [pid 707] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 707] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 707] chdir("./file0") = 0 [pid 707] ioctl(4, LOOP_CLR_FD) = 0 [pid 707] close(4) = 0 [pid 707] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] <... futex resumed>) = 1 [pid 707] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 707] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] <... futex resumed>) = 1 [pid 707] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 707] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 707] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] <... futex resumed>) = 0 [pid 707] creat("./bus", 000) = 6 [pid 707] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 707] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] <... futex resumed>) = 0 [pid 707] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 707] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] <... futex resumed>) = 1 [pid 707] open("./bus", O_RDONLY) = 7 [pid 707] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] <... futex resumed>) = 1 [ 49.008646][ T707] loop0: detected capacity change from 0 to 512 [ 49.016701][ T707] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 49.029876][ T707] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 49.039564][ T707] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 707] sendfile(6, 7, NULL, 140737974943952 [pid 706] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 706] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 706] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 706] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[709]}, 88) = 709 [pid 706] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 706] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 709 attached [pid 709] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 709] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 709] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 709] <... futex resumed>) = 1 [pid 709] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 709] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = 0 [pid 709] <... futex resumed>) = 1 [pid 709] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 706] exit_group(0 [pid 709] <... futex resumed>) = ? [pid 706] <... exit_group resumed>) = ? [pid 709] +++ exited with 0 +++ [pid 707] <... sendfile resumed>) = ? [pid 707] +++ exited with 0 +++ [pid 706] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=706, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./94/binderfs") = 0 umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./94/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./94/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./94") = 0 mkdir("./95", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 710 ./strace-static-x86_64: Process 710 attached [pid 710] set_robust_list(0x555556b826a0, 24) = 0 [pid 710] chdir("./95") = 0 [pid 710] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 710] setpgid(0, 0) = 0 [pid 710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 710] write(3, "1000", 4) = 4 [pid 710] close(3) = 0 [pid 710] symlink("/dev/binderfs", "./binderfs") = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 710] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 710] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 710] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 710] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 710] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[711]}, 88) = 711 [pid 710] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 710] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 711 attached [pid 711] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 711] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 711] memfd_create("syzkaller", 0) = 3 [pid 711] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 711] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 711] munmap(0x7f9627d89000, 262144) = 0 [pid 711] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 711] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 711] close(3) = 0 [pid 711] mkdir("./file0", 0777) = 0 [pid 711] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 711] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 711] chdir("./file0") = 0 [pid 711] ioctl(4, LOOP_CLR_FD) = 0 [pid 711] close(4) = 0 [pid 711] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 710] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 711] <... futex resumed>) = 1 [pid 711] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 711] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 710] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 711] <... futex resumed>) = 1 [pid 711] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 711] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 710] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 711] <... futex resumed>) = 1 [pid 711] creat("./bus", 000) = 6 [pid 711] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 710] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 711] <... futex resumed>) = 1 [pid 711] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 711] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 710] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 711] <... futex resumed>) = 1 [pid 711] open("./bus", O_RDONLY) = 7 [pid 711] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 710] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 711] <... futex resumed>) = 1 [ 49.303131][ T711] loop0: detected capacity change from 0 to 512 [ 49.311395][ T711] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 49.324393][ T711] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 49.334170][ T711] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 711] sendfile(6, 7, NULL, 140737974943952 [pid 710] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 710] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 710] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 710] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 710] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 713 attached => {parent_tid=[713]}, 88) = 713 [pid 710] rt_sigprocmask(SIG_SETMASK, [], [pid 713] set_robust_list(0x7f9627dc89a0, 24 [pid 710] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 713] <... set_robust_list resumed>) = 0 [pid 710] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 713] rt_sigprocmask(SIG_SETMASK, [], [pid 710] <... futex resumed>) = 0 [pid 713] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 710] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 713] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 713] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 713] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 710] <... futex resumed>) = 0 [pid 713] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 710] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 713] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 713] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 713] <... futex resumed>) = 1 [pid 713] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 710] exit_group(0) = ? [pid 713] <... futex resumed>) = ? [pid 713] +++ exited with 0 +++ [pid 711] <... sendfile resumed>) = ? [pid 711] +++ exited with 0 +++ [pid 710] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=710, si_uid=0, si_status=0, si_utime=0, si_stime=19} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./95/binderfs") = 0 umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./95/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./95/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./95") = 0 mkdir("./96", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 714 ./strace-static-x86_64: Process 714 attached [pid 714] set_robust_list(0x555556b826a0, 24) = 0 [pid 714] chdir("./96") = 0 [pid 714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 714] setpgid(0, 0) = 0 [pid 714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 714] write(3, "1000", 4) = 4 [pid 714] close(3) = 0 [pid 714] symlink("/dev/binderfs", "./binderfs") = 0 [pid 714] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 714] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 714] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 714] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 714] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[715]}, 88) = 715 [pid 714] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 714] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 715 attached [pid 715] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 715] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 715] memfd_create("syzkaller", 0) = 3 [pid 715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 715] munmap(0x7f9627d89000, 262144) = 0 [pid 715] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 715] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 715] close(3) = 0 [pid 715] mkdir("./file0", 0777) = 0 [pid 715] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 715] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 715] chdir("./file0") = 0 [pid 715] ioctl(4, LOOP_CLR_FD) = 0 [pid 715] close(4) = 0 [pid 715] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 715] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... futex resumed>) = 0 [pid 715] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 715] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... futex resumed>) = 1 [pid 715] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 715] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... futex resumed>) = 1 [pid 715] creat("./bus", 000) = 6 [pid 715] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... futex resumed>) = 1 [pid 715] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 715] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... futex resumed>) = 1 [pid 715] open("./bus", O_RDONLY) = 7 [pid 715] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... futex resumed>) = 1 [ 49.594856][ T715] loop0: detected capacity change from 0 to 512 [ 49.602826][ T715] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 49.615897][ T715] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 49.625765][ T715] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 715] sendfile(6, 7, NULL, 140737974943952 [pid 714] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 714] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 714] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 714] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 714] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 718 attached => {parent_tid=[718]}, 88) = 718 [pid 718] set_robust_list(0x7f9627dc89a0, 24 [pid 714] rt_sigprocmask(SIG_SETMASK, [], [pid 718] <... set_robust_list resumed>) = 0 [pid 714] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 718] rt_sigprocmask(SIG_SETMASK, [], [pid 714] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 718] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 714] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 718] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 718] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 718] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 718] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... futex resumed>) = 0 [pid 718] <... futex resumed>) = 1 [pid 718] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] exit_group(0) = ? [pid 718] <... futex resumed>) = ? [pid 718] +++ exited with 0 +++ [pid 715] <... sendfile resumed>) = ? [pid 715] +++ exited with 0 +++ [pid 714] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=714, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./96/binderfs") = 0 umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./96/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./96/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./96") = 0 mkdir("./97", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 719 ./strace-static-x86_64: Process 719 attached [pid 719] set_robust_list(0x555556b826a0, 24) = 0 [pid 719] chdir("./97") = 0 [pid 719] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 719] setpgid(0, 0) = 0 [pid 719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 719] write(3, "1000", 4) = 4 [pid 719] close(3) = 0 [pid 719] symlink("/dev/binderfs", "./binderfs") = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 719] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 719] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 719] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 719] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[720]}, 88) = 720 ./strace-static-x86_64: Process 720 attached [pid 719] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 719] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 720] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 720] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 720] memfd_create("syzkaller", 0) = 3 [pid 720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 720] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 720] munmap(0x7f9627d89000, 262144) = 0 [pid 720] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 720] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 720] close(3) = 0 [pid 720] mkdir("./file0", 0777) = 0 [pid 720] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 720] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 720] chdir("./file0") = 0 [pid 720] ioctl(4, LOOP_CLR_FD) = 0 [pid 720] close(4) = 0 [pid 720] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [pid 720] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 720] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [pid 720] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 720] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [pid 720] creat("./bus", 000) = 6 [pid 720] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [pid 720] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 720] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [pid 720] open("./bus", O_RDONLY) = 7 [pid 720] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [ 49.925300][ T720] loop0: detected capacity change from 0 to 512 [ 49.933267][ T720] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 49.946540][ T720] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 49.958634][ T720] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 720] sendfile(6, 7, NULL, 140737974943952 [pid 719] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 719] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 719] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 719] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 719] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 722 attached => {parent_tid=[722]}, 88) = 722 [pid 719] rt_sigprocmask(SIG_SETMASK, [], [pid 722] set_robust_list(0x7f9627dc89a0, 24 [pid 719] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 719] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 722] <... set_robust_list resumed>) = 0 [pid 722] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 722] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 722] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 722] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 722] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 719] <... futex resumed>) = 0 [pid 722] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 719] exit_group(0) = ? [pid 722] <... futex resumed>) = ? [pid 720] <... sendfile resumed>) = ? [pid 720] +++ exited with 0 +++ [pid 722] +++ exited with 0 +++ [pid 719] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=719, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./97/binderfs") = 0 umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./97/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./97/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./97") = 0 mkdir("./98", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 723 ./strace-static-x86_64: Process 723 attached [pid 723] set_robust_list(0x555556b826a0, 24) = 0 [pid 723] chdir("./98") = 0 [pid 723] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 723] setpgid(0, 0) = 0 [pid 723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 723] write(3, "1000", 4) = 4 [pid 723] close(3) = 0 [pid 723] symlink("/dev/binderfs", "./binderfs") = 0 [pid 723] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 723] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 723] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 723] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 723] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[724]}, 88) = 724 [pid 723] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 723] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 724 attached [pid 724] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 724] memfd_create("syzkaller", 0) = 3 [pid 724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 724] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 724] munmap(0x7f9627d89000, 262144) = 0 [pid 724] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 724] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 724] close(3) = 0 [pid 724] mkdir("./file0", 0777) = 0 [ 50.248549][ T724] loop0: detected capacity change from 0 to 512 [ 50.259141][ T724] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 50.277012][ T724] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 724] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 724] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 724] chdir("./file0") = 0 [pid 724] ioctl(4, LOOP_CLR_FD) = 0 [pid 724] close(4) = 0 [pid 724] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = 1 [pid 724] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 724] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = 1 [pid 724] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 724] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 723] <... futex resumed>) = 0 [pid 724] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 723] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = 0 [pid 724] creat("./bus", 000) = 6 [pid 724] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = 1 [pid 724] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 724] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = 1 [pid 724] open("./bus", O_RDONLY) = 7 [pid 724] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = 1 [ 50.291837][ T724] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 724] sendfile(6, 7, NULL, 140737974943952 [pid 723] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 723] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 723] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 723] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 723] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[726]}, 88) = 726 [pid 723] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 726 attached [pid 723] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 726] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 726] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 726] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 726] <... futex resumed>) = 1 [pid 723] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 726] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 723] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 726] <... futex resumed>) = 1 [pid 726] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 723] exit_group(0) = ? [pid 726] <... futex resumed>) = ? [pid 726] +++ exited with 0 +++ [pid 724] <... sendfile resumed>) = ? [pid 724] +++ exited with 0 +++ [pid 723] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=723, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./98/binderfs") = 0 umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./98/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./98") = 0 mkdir("./99", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 727 ./strace-static-x86_64: Process 727 attached [pid 727] set_robust_list(0x555556b826a0, 24) = 0 [pid 727] chdir("./99") = 0 [pid 727] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 727] setpgid(0, 0) = 0 [pid 727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 727] write(3, "1000", 4) = 4 [pid 727] close(3) = 0 [pid 727] symlink("/dev/binderfs", "./binderfs") = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 727] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 727] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 727] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[728]}, 88) = 728 [pid 727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 728 attached [pid 728] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 728] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 728] memfd_create("syzkaller", 0) = 3 [pid 728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 728] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 728] munmap(0x7f9627d89000, 262144) = 0 [pid 728] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 728] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 728] close(3) = 0 [pid 728] mkdir("./file0", 0777) = 0 [pid 728] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 728] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 728] chdir("./file0") = 0 [pid 728] ioctl(4, LOOP_CLR_FD) = 0 [pid 728] close(4) = 0 [pid 728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] creat("./bus", 000) = 6 [pid 728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] open("./bus", O_RDONLY) = 7 [pid 728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [ 50.562031][ T728] loop0: detected capacity change from 0 to 512 [ 50.571683][ T728] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 50.585626][ T728] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 50.595416][ T728] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 728] sendfile(6, 7, NULL, 140737974943952 [pid 727] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 727] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 727] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 727] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[730]}, 88) = 730 [pid 727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 727] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 730 attached [pid 730] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 730] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 730] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 730] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] <... futex resumed>) = 1 [pid 730] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 730] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 730] <... futex resumed>) = 1 [pid 730] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 727] exit_group(0 [pid 730] <... futex resumed>) = ? [pid 727] <... exit_group resumed>) = ? [pid 730] +++ exited with 0 +++ [pid 728] <... sendfile resumed>) = ? [pid 728] +++ exited with 0 +++ [pid 727] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=727, si_uid=0, si_status=0, si_utime=0, si_stime=19} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./99/binderfs") = 0 umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./99/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./99/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./99") = 0 mkdir("./100", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 732 ./strace-static-x86_64: Process 732 attached [pid 732] set_robust_list(0x555556b826a0, 24) = 0 [pid 732] chdir("./100") = 0 [pid 732] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 732] setpgid(0, 0) = 0 [pid 732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 732] write(3, "1000", 4) = 4 [pid 732] close(3) = 0 [pid 732] symlink("/dev/binderfs", "./binderfs") = 0 [pid 732] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 732] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 732] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 732] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 733 attached [pid 733] set_robust_list(0x7f96301a99a0, 24 [pid 732] <... clone3 resumed> => {parent_tid=[733]}, 88) = 733 [pid 733] <... set_robust_list resumed>) = 0 [pid 733] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 733] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 732] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 733] <... futex resumed>) = 0 [pid 733] memfd_create("syzkaller", 0) = 3 [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 733] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 733] munmap(0x7f9627d89000, 262144) = 0 [pid 733] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 733] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 733] close(3) = 0 [pid 733] mkdir("./file0", 0777) = 0 [pid 733] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 733] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 733] chdir("./file0") = 0 [pid 733] ioctl(4, LOOP_CLR_FD) = 0 [pid 733] close(4) = 0 [pid 733] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 733] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 733] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] creat("./bus", 000) = 6 [pid 733] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 733] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] open("./bus", O_RDONLY) = 7 [pid 733] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [ 50.856348][ T733] loop0: detected capacity change from 0 to 512 [ 50.867122][ T733] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 50.880845][ T733] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 50.892518][ T733] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 733] sendfile(6, 7, NULL, 140737974943952 [pid 732] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 732] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 732] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 732] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[736]}, 88) = 736 [pid 732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 732] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 736 attached [pid 736] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 736] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 736] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 736] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 736] <... futex resumed>) = 1 [pid 736] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 736] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 736] <... futex resumed>) = 1 [pid 736] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 732] exit_group(0 [pid 736] <... futex resumed>) = ? [pid 732] <... exit_group resumed>) = ? [pid 736] +++ exited with 0 +++ [pid 733] <... sendfile resumed>) = ? [pid 733] +++ exited with 0 +++ [pid 732] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=732, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./100/binderfs") = 0 umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./100/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./100/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./100") = 0 mkdir("./101", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 737 ./strace-static-x86_64: Process 737 attached [pid 737] set_robust_list(0x555556b826a0, 24) = 0 [pid 737] chdir("./101") = 0 [pid 737] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 737] setpgid(0, 0) = 0 [pid 737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 737] write(3, "1000", 4) = 4 [pid 737] close(3) = 0 [pid 737] symlink("/dev/binderfs", "./binderfs") = 0 [pid 737] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 737] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 737] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 737] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 737] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 738 attached [pid 738] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 738] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 738] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] <... clone3 resumed> => {parent_tid=[738]}, 88) = 738 [pid 737] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 737] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 738] <... futex resumed>) = 0 [pid 738] memfd_create("syzkaller", 0) = 3 [pid 738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 738] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 738] munmap(0x7f9627d89000, 262144) = 0 [pid 738] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 738] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 738] close(3) = 0 [pid 738] mkdir("./file0", 0777) = 0 [pid 738] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 738] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 738] chdir("./file0") = 0 [pid 738] ioctl(4, LOOP_CLR_FD) = 0 [pid 738] close(4) = 0 [pid 738] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 1 [pid 738] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 738] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 1 [pid 738] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 738] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 1 [pid 738] creat("./bus", 000) = 6 [pid 738] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 1 [pid 738] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 738] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 737] <... futex resumed>) = 0 [pid 738] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 738] open("./bus", O_RDONLY) = 7 [pid 738] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 738] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 737] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 0 [ 51.141338][ T738] loop0: detected capacity change from 0 to 512 [ 51.149382][ T738] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 51.163572][ T738] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 51.173511][ T738] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 738] sendfile(6, 7, NULL, 140737974943952 [pid 737] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 737] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 737] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 737] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 737] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[740]}, 88) = 740 [pid 737] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 737] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 740 attached [pid 740] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 740] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 740] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 740] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 740] <... futex resumed>) = 1 [pid 737] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] sendmsg(-1, 0x20000000, 0 [pid 737] <... futex resumed>) = 0 [pid 740] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 737] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 740] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 740] <... futex resumed>) = 1 [pid 740] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] exit_group(0) = ? [pid 738] <... sendfile resumed>) = ? [pid 738] +++ exited with 0 +++ [pid 740] <... futex resumed>) = ? [pid 740] +++ exited with 0 +++ [pid 737] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=737, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./101/binderfs") = 0 umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./101/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./101/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./101") = 0 mkdir("./102", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 741 ./strace-static-x86_64: Process 741 attached [pid 741] set_robust_list(0x555556b826a0, 24) = 0 [pid 741] chdir("./102") = 0 [pid 741] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 741] setpgid(0, 0) = 0 [pid 741] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 741] write(3, "1000", 4) = 4 [pid 741] close(3) = 0 [pid 741] symlink("/dev/binderfs", "./binderfs") = 0 [pid 741] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 741] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 741] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 741] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 741] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 741] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[742]}, 88) = 742 [pid 741] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 741] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 742 attached [pid 742] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 742] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 742] memfd_create("syzkaller", 0) = 3 [pid 742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 742] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 742] munmap(0x7f9627d89000, 262144) = 0 [pid 742] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 742] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 742] close(3) = 0 [pid 742] mkdir("./file0", 0777) = 0 [pid 742] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 742] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 742] chdir("./file0") = 0 [pid 742] ioctl(4, LOOP_CLR_FD) = 0 [pid 742] close(4) = 0 [pid 742] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 1 [pid 742] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 742] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 1 [pid 742] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 742] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 1 [pid 742] creat("./bus", 000) = 6 [pid 742] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 1 [pid 742] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 742] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 742] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 741] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 0 [pid 742] open("./bus", O_RDONLY) = 7 [pid 742] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 1 [ 51.417425][ T742] loop0: detected capacity change from 0 to 512 [ 51.425489][ T742] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 51.438568][ T742] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 51.448763][ T742] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 742] sendfile(6, 7, NULL, 140737974943952 [pid 741] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 741] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 741] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 741] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 741] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 744 attached => {parent_tid=[744]}, 88) = 744 [pid 741] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 741] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 744] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 744] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 744] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 744] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 744] <... futex resumed>) = 1 [pid 744] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 744] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 741] <... futex resumed>) = 0 [pid 744] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 741] exit_group(0 [pid 744] <... futex resumed>) = 230 [pid 741] <... exit_group resumed>) = ? [pid 744] +++ exited with 0 +++ [pid 742] <... sendfile resumed>) = ? [pid 742] +++ exited with 0 +++ [pid 741] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=741, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./102/binderfs") = 0 umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./102/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./102/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./102") = 0 mkdir("./103", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 746 ./strace-static-x86_64: Process 746 attached [pid 746] set_robust_list(0x555556b826a0, 24) = 0 [pid 746] chdir("./103") = 0 [pid 746] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 746] setpgid(0, 0) = 0 [pid 746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 746] write(3, "1000", 4) = 4 [pid 746] close(3) = 0 [pid 746] symlink("/dev/binderfs", "./binderfs") = 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 746] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 746] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 746] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 747 attached => {parent_tid=[747]}, 88) = 747 [pid 747] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 747] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 747] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 746] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 747] <... futex resumed>) = 0 [pid 747] memfd_create("syzkaller", 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 747] <... memfd_create resumed>) = 3 [pid 747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 747] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 747] munmap(0x7f9627d89000, 262144) = 0 [pid 747] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 747] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 747] close(3) = 0 [pid 747] mkdir("./file0", 0777) = 0 [pid 747] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 747] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 747] chdir("./file0") = 0 [pid 747] ioctl(4, LOOP_CLR_FD) = 0 [pid 747] close(4) = 0 [pid 747] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 747] <... futex resumed>) = 1 [pid 747] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 747] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 747] <... futex resumed>) = 1 [pid 747] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 747] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 747] <... futex resumed>) = 1 [pid 747] creat("./bus", 000) = 6 [pid 747] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 747] <... futex resumed>) = 1 [pid 747] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 747] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 747] <... futex resumed>) = 1 [pid 747] open("./bus", O_RDONLY) = 7 [pid 747] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 747] <... futex resumed>) = 1 [ 51.731000][ T747] loop0: detected capacity change from 0 to 512 [ 51.739309][ T747] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 51.753857][ T747] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 51.764321][ T747] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 747] sendfile(6, 7, NULL, 140737974943952 [pid 746] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 746] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 746] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 746] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 749 attached [pid 749] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 749] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 749] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 746] <... clone3 resumed> => {parent_tid=[749]}, 88) = 749 [pid 746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 746] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 749] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 749] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 749] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 749] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 749] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 746] <... futex resumed>) = 0 [pid 749] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 746] exit_group(0 [pid 749] <... futex resumed>) = ? [pid 746] <... exit_group resumed>) = ? [pid 749] +++ exited with 0 +++ [pid 747] <... sendfile resumed>) = ? [pid 747] +++ exited with 0 +++ [pid 746] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=746, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./103/binderfs") = 0 umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./103/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./103/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./103") = 0 mkdir("./104", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 750 ./strace-static-x86_64: Process 750 attached [pid 750] set_robust_list(0x555556b826a0, 24) = 0 [pid 750] chdir("./104") = 0 [pid 750] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 750] setpgid(0, 0) = 0 [pid 750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 750] write(3, "1000", 4) = 4 [pid 750] close(3) = 0 [pid 750] symlink("/dev/binderfs", "./binderfs") = 0 [pid 750] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 750] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 750] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 750] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[751]}, 88) = 751 [pid 750] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 750] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 751 attached [pid 751] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 751] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 751] memfd_create("syzkaller", 0) = 3 [pid 751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 751] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 751] munmap(0x7f9627d89000, 262144) = 0 [pid 751] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 751] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 751] close(3) = 0 [pid 751] mkdir("./file0", 0777) = 0 [pid 751] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 751] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 52.054914][ T751] loop0: detected capacity change from 0 to 512 [ 52.065522][ T751] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 52.084741][ T751] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 751] chdir("./file0") = 0 [pid 751] ioctl(4, LOOP_CLR_FD) = 0 [pid 751] close(4) = 0 [pid 751] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 751] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] <... futex resumed>) = 0 [pid 751] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 751] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] <... futex resumed>) = 1 [pid 751] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 751] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] <... futex resumed>) = 1 [pid 751] creat("./bus", 000) = 6 [pid 751] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] <... futex resumed>) = 1 [pid 751] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 751] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 751] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] <... futex resumed>) = 0 [pid 751] open("./bus", O_RDONLY) = 7 [pid 751] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] <... futex resumed>) = 1 [ 52.095230][ T751] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 751] sendfile(6, 7, NULL, 140737974943952 [pid 750] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 750] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 750] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 750] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[753]}, 88) = 753 ./strace-static-x86_64: Process 753 attached [pid 750] rt_sigprocmask(SIG_SETMASK, [], [pid 753] set_robust_list(0x7f9627dc89a0, 24 [pid 750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 753] <... set_robust_list resumed>) = 0 [pid 750] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 753] rt_sigprocmask(SIG_SETMASK, [], [pid 750] <... futex resumed>) = 0 [pid 753] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 750] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 753] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 753] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] <... futex resumed>) = 0 [pid 753] <... futex resumed>) = 1 [pid 750] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 753] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 753] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 750] <... futex resumed>) = 0 [pid 753] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 750] exit_group(0 [pid 753] <... futex resumed>) = ? [pid 750] <... exit_group resumed>) = ? [pid 751] <... sendfile resumed>) = ? [pid 753] +++ exited with 0 +++ [pid 751] +++ exited with 0 +++ [pid 750] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=750, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./104/binderfs") = 0 umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./104/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./104/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./104") = 0 mkdir("./105", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 754 ./strace-static-x86_64: Process 754 attached [pid 754] set_robust_list(0x555556b826a0, 24) = 0 [pid 754] chdir("./105") = 0 [pid 754] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 754] setpgid(0, 0) = 0 [pid 754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 754] write(3, "1000", 4) = 4 [pid 754] close(3) = 0 [pid 754] symlink("/dev/binderfs", "./binderfs") = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 754] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 754] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 754] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[755]}, 88) = 755 [pid 754] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 754] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 755 attached [pid 755] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 755] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 755] memfd_create("syzkaller", 0) = 3 [pid 755] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 755] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 755] munmap(0x7f9627d89000, 262144) = 0 [pid 755] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 755] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 755] close(3) = 0 [pid 755] mkdir("./file0", 0777) = 0 [pid 755] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 755] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 755] chdir("./file0") = 0 [pid 755] ioctl(4, LOOP_CLR_FD) = 0 [pid 755] close(4) = 0 [pid 755] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] <... futex resumed>) = 1 [pid 755] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 755] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] <... futex resumed>) = 1 [pid 755] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 755] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] <... futex resumed>) = 1 [pid 755] creat("./bus", 000) = 6 [pid 755] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] <... futex resumed>) = 1 [pid 755] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 755] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] <... futex resumed>) = 1 [pid 755] open("./bus", O_RDONLY) = 7 [pid 755] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] <... futex resumed>) = 1 [ 52.340638][ T755] loop0: detected capacity change from 0 to 512 [ 52.350944][ T755] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 52.366042][ T755] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 755] sendfile(6, 7, NULL, 140737974943952 [pid 754] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 754] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 754] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 754] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[757]}, 88) = 757 ./strace-static-x86_64: Process 757 attached [pid 754] rt_sigprocmask(SIG_SETMASK, [], [pid 757] set_robust_list(0x7f9627dc89a0, 24 [pid 754] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 757] <... set_robust_list resumed>) = 0 [pid 754] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] rt_sigprocmask(SIG_SETMASK, [], [pid 754] <... futex resumed>) = 0 [pid 757] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 754] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 757] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] <... futex resumed>) = 1 [pid 757] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 757] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 757] <... futex resumed>) = 1 [pid 757] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 754] exit_group(0 [pid 757] <... futex resumed>) = ? [pid 754] <... exit_group resumed>) = ? [pid 757] +++ exited with 0 +++ [pid 755] <... sendfile resumed>) = ? [pid 755] +++ exited with 0 +++ [pid 754] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=754, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./105/binderfs") = 0 umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./105/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./105/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./105") = 0 mkdir("./106", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 758 ./strace-static-x86_64: Process 758 attached [pid 758] set_robust_list(0x555556b826a0, 24) = 0 [pid 758] chdir("./106") = 0 [pid 758] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 758] setpgid(0, 0) = 0 [pid 758] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 758] write(3, "1000", 4) = 4 [pid 758] close(3) = 0 [pid 758] symlink("/dev/binderfs", "./binderfs") = 0 [pid 758] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 758] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 758] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 758] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 758] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 758] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[759]}, 88) = 759 [pid 758] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 758] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 759 attached [pid 759] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 759] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 759] memfd_create("syzkaller", 0) = 3 [pid 759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 759] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 759] munmap(0x7f9627d89000, 262144) = 0 [pid 759] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 759] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 759] close(3) = 0 [pid 759] mkdir("./file0", 0777) = 0 [pid 759] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 759] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 759] chdir("./file0") = 0 [pid 759] ioctl(4, LOOP_CLR_FD) = 0 [pid 759] close(4) = 0 [pid 759] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 759] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 758] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 0 [pid 759] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 759] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 1 [pid 759] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 759] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 1 [pid 759] creat("./bus", 000) = 6 [pid 759] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 1 [pid 759] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 759] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 1 [pid 759] open("./bus", O_RDONLY) = 7 [pid 759] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 52.653216][ T759] loop0: detected capacity change from 0 to 512 [ 52.664785][ T759] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 52.679196][ T759] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 759] sendfile(6, 7, NULL, 140737974943952 [pid 758] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 758] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 758] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 758] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 758] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 758] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 758] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 762 attached => {parent_tid=[762]}, 88) = 762 [pid 762] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 762] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 762] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 758] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 758] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 762] <... futex resumed>) = 0 [pid 758] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 762] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 762] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 758] <... futex resumed>) = 0 [pid 758] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 762] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 762] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 758] <... futex resumed>) = 0 [pid 762] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 758] exit_group(0 [pid 762] <... futex resumed>) = ? [pid 758] <... exit_group resumed>) = ? [pid 762] +++ exited with 0 +++ [pid 759] <... sendfile resumed>) = ? [pid 759] +++ exited with 0 +++ [pid 758] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=758, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./106/binderfs") = 0 umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./106/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./106") = 0 mkdir("./107", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 763 ./strace-static-x86_64: Process 763 attached [pid 763] set_robust_list(0x555556b826a0, 24) = 0 [pid 763] chdir("./107") = 0 [pid 763] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 763] setpgid(0, 0) = 0 [pid 763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 763] write(3, "1000", 4) = 4 [pid 763] close(3) = 0 [pid 763] symlink("/dev/binderfs", "./binderfs") = 0 [pid 763] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 763] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 763] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 763] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 763] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 763] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[764]}, 88) = 764 ./strace-static-x86_64: Process 764 attached [pid 763] rt_sigprocmask(SIG_SETMASK, [], [pid 764] set_robust_list(0x7f96301a99a0, 24 [pid 763] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 764] <... set_robust_list resumed>) = 0 [pid 764] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 764] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 763] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 764] <... futex resumed>) = 0 [pid 763] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 764] memfd_create("syzkaller", 0) = 3 [pid 764] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 764] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 764] munmap(0x7f9627d89000, 262144) = 0 [pid 764] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 764] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 764] close(3) = 0 [pid 764] mkdir("./file0", 0777) = 0 [pid 764] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 764] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 764] chdir("./file0") = 0 [pid 764] ioctl(4, LOOP_CLR_FD) = 0 [pid 764] close(4) = 0 [pid 764] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 0 [pid 763] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 763] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... futex resumed>) = 1 [pid 764] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 764] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 0 [pid 763] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 763] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... futex resumed>) = 1 [pid 764] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 764] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 0 [pid 763] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 763] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... futex resumed>) = 1 [pid 764] creat("./bus", 000) = 6 [pid 764] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 0 [pid 764] <... futex resumed>) = 1 [pid 763] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 763] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 764] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 0 [pid 763] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 763] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... futex resumed>) = 1 [pid 764] open("./bus", O_RDONLY) = 7 [pid 764] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 763] <... futex resumed>) = 0 [pid 764] sendfile(6, 7, NULL, 140737974943952 [pid 763] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 52.979629][ T764] loop0: detected capacity change from 0 to 512 [ 52.990577][ T764] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 53.004334][ T764] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 763] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 763] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 763] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 763] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 763] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 763] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 766 attached [pid 766] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 766] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 766] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 763] <... clone3 resumed> => {parent_tid=[766]}, 88) = 766 [pid 763] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 763] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 766] <... futex resumed>) = 0 [pid 766] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 763] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] <... mmap resumed>) = 0x20000000 [pid 766] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 0 [pid 763] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 763] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] <... futex resumed>) = 1 [pid 766] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 766] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 0 [pid 766] <... futex resumed>) = 1 [pid 766] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 763] exit_group(0) = ? [pid 766] <... futex resumed>) = ? [pid 766] +++ exited with 0 +++ [pid 764] <... sendfile resumed>) = ? [pid 764] +++ exited with 0 +++ [pid 763] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=763, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./107/binderfs") = 0 umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./107/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./107") = 0 mkdir("./108", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 767 ./strace-static-x86_64: Process 767 attached [pid 767] set_robust_list(0x555556b826a0, 24) = 0 [pid 767] chdir("./108") = 0 [pid 767] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 767] setpgid(0, 0) = 0 [pid 767] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 767] write(3, "1000", 4) = 4 [pid 767] close(3) = 0 [pid 767] symlink("/dev/binderfs", "./binderfs") = 0 [pid 767] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 767] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 767] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 767] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 767] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 767] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[768]}, 88) = 768 [pid 767] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 767] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 768 attached [pid 768] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 768] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 768] memfd_create("syzkaller", 0) = 3 [pid 768] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 768] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 768] munmap(0x7f9627d89000, 262144) = 0 [pid 768] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 768] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 768] close(3) = 0 [pid 768] mkdir("./file0", 0777) = 0 [pid 768] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 768] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 768] chdir("./file0") = 0 [pid 768] ioctl(4, LOOP_CLR_FD) = 0 [pid 768] close(4) = 0 [pid 768] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 767] <... futex resumed>) = 0 [pid 767] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 768] <... futex resumed>) = 1 [pid 768] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 768] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 767] <... futex resumed>) = 0 [pid 767] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 768] <... futex resumed>) = 1 [pid 768] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 768] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 767] <... futex resumed>) = 0 [pid 767] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 768] <... futex resumed>) = 1 [pid 768] creat("./bus", 000) = 6 [pid 768] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 767] <... futex resumed>) = 0 [pid 767] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 768] <... futex resumed>) = 1 [pid 768] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 768] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 767] <... futex resumed>) = 0 [pid 767] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 768] <... futex resumed>) = 1 [pid 768] open("./bus", O_RDONLY) = 7 [pid 768] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 767] <... futex resumed>) = 0 [pid 767] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 768] <... futex resumed>) = 1 [ 53.253995][ T768] loop0: detected capacity change from 0 to 512 [ 53.263569][ T768] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 53.277716][ T768] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 768] sendfile(6, 7, NULL, 140737974943952 [pid 767] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 767] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 767] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 767] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 767] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 770 attached => {parent_tid=[770]}, 88) = 770 [pid 770] set_robust_list(0x7f9627dc89a0, 24 [pid 767] rt_sigprocmask(SIG_SETMASK, [], [pid 770] <... set_robust_list resumed>) = 0 [pid 767] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 770] rt_sigprocmask(SIG_SETMASK, [], [pid 767] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 767] <... futex resumed>) = 0 [pid 770] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 767] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... mmap resumed>) = 0x20000000 [pid 770] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 767] <... futex resumed>) = 0 [pid 767] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 767] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... futex resumed>) = 1 [pid 770] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 770] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 767] <... futex resumed>) = 0 [pid 770] <... futex resumed>) = 1 [pid 770] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 767] exit_group(0 [pid 770] <... futex resumed>) = ? [pid 767] <... exit_group resumed>) = ? [pid 770] +++ exited with 0 +++ [pid 768] <... sendfile resumed>) = ? [pid 768] +++ exited with 0 +++ [pid 767] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=767, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./108/binderfs") = 0 umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./108/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./108") = 0 mkdir("./109", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 771 ./strace-static-x86_64: Process 771 attached [pid 771] set_robust_list(0x555556b826a0, 24) = 0 [pid 771] chdir("./109") = 0 [pid 771] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 771] setpgid(0, 0) = 0 [pid 771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 771] write(3, "1000", 4) = 4 [pid 771] close(3) = 0 [pid 771] symlink("/dev/binderfs", "./binderfs") = 0 [pid 771] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 771] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 771] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 771] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 771] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[772]}, 88) = 772 [pid 771] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 771] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 772 attached [pid 772] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 772] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 772] memfd_create("syzkaller", 0) = 3 [pid 772] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 772] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 772] munmap(0x7f9627d89000, 262144) = 0 [pid 772] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 772] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 772] close(3) = 0 [pid 772] mkdir("./file0", 0777) = 0 [pid 772] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 772] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 772] chdir("./file0") = 0 [pid 772] ioctl(4, LOOP_CLR_FD) = 0 [pid 772] close(4) = 0 [pid 772] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] <... futex resumed>) = 0 [pid 771] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 772] <... futex resumed>) = 1 [pid 772] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 772] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] <... futex resumed>) = 0 [pid 771] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 772] <... futex resumed>) = 1 [pid 772] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 772] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 771] <... futex resumed>) = 0 [pid 772] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 771] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 772] <... futex resumed>) = 0 [pid 772] creat("./bus", 000) = 6 [pid 772] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 772] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 771] <... futex resumed>) = 0 [pid 771] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 772] <... futex resumed>) = 0 [pid 772] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 772] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] <... futex resumed>) = 0 [pid 771] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 772] <... futex resumed>) = 1 [pid 772] open("./bus", O_RDONLY) = 7 [pid 772] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] <... futex resumed>) = 0 [pid 772] <... futex resumed>) = 1 [pid 771] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 53.572309][ T772] loop0: detected capacity change from 0 to 512 [ 53.583025][ T772] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 53.600864][ T772] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 772] sendfile(6, 7, NULL, 140737974943952 [pid 771] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 771] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 771] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 771] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 774 attached => {parent_tid=[774]}, 88) = 774 [pid 774] set_robust_list(0x7f9627dc89a0, 24 [pid 771] rt_sigprocmask(SIG_SETMASK, [], [pid 774] <... set_robust_list resumed>) = 0 [pid 771] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 774] rt_sigprocmask(SIG_SETMASK, [], [pid 771] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 774] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 771] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 774] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 774] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 774] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 771] <... futex resumed>) = 0 [pid 771] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 774] <... futex resumed>) = 0 [pid 771] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 774] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 774] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 771] <... futex resumed>) = 0 [pid 774] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 771] exit_group(0) = ? [pid 774] <... futex resumed>) = 231 [pid 774] +++ exited with 0 +++ [pid 772] <... sendfile resumed>) = ? [pid 772] +++ exited with 0 +++ [pid 771] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=771, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./109/binderfs") = 0 umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./109/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./109") = 0 mkdir("./110", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 776 ./strace-static-x86_64: Process 776 attached [pid 776] set_robust_list(0x555556b826a0, 24) = 0 [pid 776] chdir("./110") = 0 [pid 776] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 776] setpgid(0, 0) = 0 [pid 776] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 776] write(3, "1000", 4) = 4 [pid 776] close(3) = 0 [pid 776] symlink("/dev/binderfs", "./binderfs") = 0 [pid 776] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 776] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 776] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 776] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 776] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 776] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 776] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[777]}, 88) = 777 [pid 776] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 776] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 776] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 777 attached [pid 777] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 777] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 777] memfd_create("syzkaller", 0) = 3 [pid 777] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 777] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 777] munmap(0x7f9627d89000, 262144) = 0 [pid 777] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 777] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 777] close(3) = 0 [pid 777] mkdir("./file0", 0777) = 0 [pid 777] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 777] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 777] chdir("./file0") = 0 [pid 777] ioctl(4, LOOP_CLR_FD) = 0 [pid 777] close(4) = 0 [pid 777] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 776] <... futex resumed>) = 0 [pid 776] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 776] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 777] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 777] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 777] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 776] <... futex resumed>) = 0 [pid 776] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 776] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 777] <... futex resumed>) = 0 [pid 777] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 777] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 776] <... futex resumed>) = 0 [pid 777] <... futex resumed>) = 1 [pid 776] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 776] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 777] creat("./bus", 000) = 6 [pid 777] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 776] <... futex resumed>) = 0 [pid 776] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 776] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 777] <... futex resumed>) = 1 [pid 777] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 777] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 776] <... futex resumed>) = 0 [pid 776] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 776] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 777] open("./bus", O_RDONLY) = 7 [pid 777] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 776] <... futex resumed>) = 0 [pid 776] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 776] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 777] <... futex resumed>) = 1 [ 53.840546][ T777] loop0: detected capacity change from 0 to 512 [ 53.855934][ T777] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 53.869564][ T777] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 777] sendfile(6, 7, NULL, 140737974943952 [pid 776] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 776] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 776] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 776] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 776] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 776] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 776] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[779]}, 88) = 779 [pid 776] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 776] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 776] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 779 attached [pid 779] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 779] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 779] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 779] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 776] <... futex resumed>) = 0 [pid 779] sendmsg(-1, 0x20000000, 0 [pid 776] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 776] <... futex resumed>) = 0 [pid 779] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 776] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 779] <... futex resumed>) = 0 [pid 779] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 776] exit_group(0 [pid 779] <... futex resumed>) = ? [pid 776] <... exit_group resumed>) = ? [pid 779] +++ exited with 0 +++ [pid 777] <... sendfile resumed>) = ? [pid 777] +++ exited with 0 +++ [pid 776] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=776, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./110/binderfs") = 0 umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./110/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./110") = 0 mkdir("./111", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 780 ./strace-static-x86_64: Process 780 attached [pid 780] set_robust_list(0x555556b826a0, 24) = 0 [pid 780] chdir("./111") = 0 [pid 780] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 780] setpgid(0, 0) = 0 [pid 780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 780] write(3, "1000", 4) = 4 [pid 780] close(3) = 0 [pid 780] symlink("/dev/binderfs", "./binderfs") = 0 [pid 780] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 780] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 780] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 780] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 780] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 780] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 780] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[781]}, 88) = 781 [pid 780] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 780] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 780] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 781 attached [pid 781] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 781] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 781] memfd_create("syzkaller", 0) = 3 [pid 781] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 781] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 781] munmap(0x7f9627d89000, 262144) = 0 [pid 781] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 781] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 781] close(3) = 0 [pid 781] mkdir("./file0", 0777) = 0 [pid 781] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 781] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 781] chdir("./file0") = 0 [pid 781] ioctl(4, LOOP_CLR_FD) = 0 [pid 781] close(4) = 0 [pid 781] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 780] <... futex resumed>) = 0 [pid 780] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 780] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 781] <... futex resumed>) = 1 [pid 781] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 781] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 780] <... futex resumed>) = 0 [pid 780] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 780] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 781] <... futex resumed>) = 1 [pid 781] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 781] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 780] <... futex resumed>) = 0 [pid 780] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 780] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 781] <... futex resumed>) = 1 [pid 781] creat("./bus", 000) = 6 [pid 781] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 780] <... futex resumed>) = 0 [pid 780] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 780] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 781] <... futex resumed>) = 1 [pid 781] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 781] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 780] <... futex resumed>) = 0 [pid 780] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 780] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 781] <... futex resumed>) = 1 [pid 781] open("./bus", O_RDONLY) = 7 [pid 781] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 780] <... futex resumed>) = 0 [pid 780] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 780] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 781] <... futex resumed>) = 1 [ 54.130430][ T781] loop0: detected capacity change from 0 to 512 [ 54.138444][ T781] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 54.152158][ T781] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 781] sendfile(6, 7, NULL, 140737974943952 [pid 780] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 780] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 780] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 780] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 780] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 780] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 780] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 780] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 780] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 780] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 783 attached => {parent_tid=[783]}, 88) = 783 [pid 783] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 783] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 783] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 780] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 780] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 780] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 783] <... futex resumed>) = 0 [pid 783] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 783] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 780] <... futex resumed>) = 0 [pid 780] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 780] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 783] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 783] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 780] <... futex resumed>) = 0 [pid 783] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 780] exit_group(0 [pid 783] <... futex resumed>) = ? [pid 780] <... exit_group resumed>) = ? [pid 783] +++ exited with 0 +++ [pid 781] <... sendfile resumed>) = ? [pid 781] +++ exited with 0 +++ [pid 780] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=780, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./111/binderfs") = 0 umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./111/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./111") = 0 mkdir("./112", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 784 ./strace-static-x86_64: Process 784 attached [pid 784] set_robust_list(0x555556b826a0, 24) = 0 [pid 784] chdir("./112") = 0 [pid 784] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 784] setpgid(0, 0) = 0 [pid 784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 784] write(3, "1000", 4) = 4 [pid 784] close(3) = 0 [pid 784] symlink("/dev/binderfs", "./binderfs") = 0 [pid 784] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 784] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 784] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 784] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 784] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 784] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[785]}, 88) = 785 [pid 784] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 784] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 785 attached [pid 785] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 785] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 785] memfd_create("syzkaller", 0) = 3 [pid 785] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 785] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 785] munmap(0x7f9627d89000, 262144) = 0 [pid 785] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 785] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 785] close(3) = 0 [pid 785] mkdir("./file0", 0777) = 0 [pid 785] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 785] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 785] chdir("./file0") = 0 [pid 785] ioctl(4, LOOP_CLR_FD) = 0 [pid 785] close(4) = 0 [pid 785] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 785] <... futex resumed>) = 1 [pid 785] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 785] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 785] <... futex resumed>) = 1 [pid 785] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 785] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 785] <... futex resumed>) = 1 [pid 785] creat("./bus", 000) = 6 [pid 785] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 785] <... writev resumed>) = 1 [pid 785] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 785] <... futex resumed>) = 1 [pid 785] open("./bus", O_RDONLY) = 7 [pid 785] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 785] <... futex resumed>) = 1 [ 54.391491][ T785] loop0: detected capacity change from 0 to 512 [ 54.399490][ T785] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 54.412499][ T785] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 785] sendfile(6, 7, NULL, 140737974943952 [pid 784] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 784] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 784] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 784] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 784] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 787 attached [pid 787] set_robust_list(0x7f9627dc89a0, 24 [pid 784] <... clone3 resumed> => {parent_tid=[787]}, 88) = 787 [pid 787] <... set_robust_list resumed>) = 0 [pid 784] rt_sigprocmask(SIG_SETMASK, [], [pid 787] rt_sigprocmask(SIG_SETMASK, [], [pid 784] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 787] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 784] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 787] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 784] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... mmap resumed>) = 0x20000000 [pid 787] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 784] <... futex resumed>) = 0 [pid 784] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 784] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 1 [pid 787] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 787] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 784] <... futex resumed>) = 0 [pid 787] <... futex resumed>) = 1 [pid 787] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 784] exit_group(0 [pid 787] <... futex resumed>) = ? [pid 784] <... exit_group resumed>) = ? [pid 787] +++ exited with 0 +++ [pid 785] <... sendfile resumed>) = ? [pid 785] +++ exited with 0 +++ [pid 784] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=784, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./112/binderfs") = 0 umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./112/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./112") = 0 mkdir("./113", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 789 ./strace-static-x86_64: Process 789 attached [pid 789] set_robust_list(0x555556b826a0, 24) = 0 [pid 789] chdir("./113") = 0 [pid 789] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 789] setpgid(0, 0) = 0 [pid 789] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 789] write(3, "1000", 4) = 4 [pid 789] close(3) = 0 [pid 789] symlink("/dev/binderfs", "./binderfs") = 0 [pid 789] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 789] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 789] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 789] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 789] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[790]}, 88) = 790 [pid 789] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 789] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 790 attached [pid 790] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 790] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 790] memfd_create("syzkaller", 0) = 3 [pid 790] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 790] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 790] munmap(0x7f9627d89000, 262144) = 0 [pid 790] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 790] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 790] close(3) = 0 [pid 790] mkdir("./file0", 0777) = 0 [pid 790] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 790] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 790] chdir("./file0") = 0 [pid 790] ioctl(4, LOOP_CLR_FD) = 0 [pid 790] close(4) = 0 [pid 790] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = 0 [pid 789] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] <... futex resumed>) = 1 [pid 790] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 790] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = 0 [pid 789] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] <... futex resumed>) = 1 [pid 790] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 790] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 790] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] <... futex resumed>) = 0 [pid 789] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 789] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] <... futex resumed>) = 0 [pid 790] creat("./bus", 000) = 6 [pid 790] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = 0 [pid 789] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] <... futex resumed>) = 1 [pid 790] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 790] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = 0 [pid 789] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] <... futex resumed>) = 1 [pid 790] open("./bus", O_RDONLY) = 7 [pid 790] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = 0 [pid 789] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] <... futex resumed>) = 1 [ 54.689954][ T790] loop0: detected capacity change from 0 to 512 [ 54.698052][ T790] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 54.711172][ T790] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 790] sendfile(6, 7, NULL, 140737974943952 [pid 789] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 789] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 789] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 789] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 789] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 789] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[792]}, 88) = 792 [pid 789] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 789] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 792 attached [pid 792] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 792] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 792] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 792] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = 0 [pid 789] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 792] <... futex resumed>) = 1 [pid 792] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 792] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = 1 [pid 792] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] exit_group(0) = ? [pid 792] <... futex resumed>) = ? [pid 792] +++ exited with 0 +++ [pid 790] <... sendfile resumed>) = ? [pid 790] +++ exited with 0 +++ [pid 789] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=789, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./113/binderfs") = 0 umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./113/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./113") = 0 mkdir("./114", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 793 ./strace-static-x86_64: Process 793 attached [pid 793] set_robust_list(0x555556b826a0, 24) = 0 [pid 793] chdir("./114") = 0 [pid 793] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 793] setpgid(0, 0) = 0 [pid 793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 793] write(3, "1000", 4) = 4 [pid 793] close(3) = 0 [pid 793] symlink("/dev/binderfs", "./binderfs") = 0 [pid 793] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 793] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 793] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 793] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 793] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[794]}, 88) = 794 [pid 793] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 793] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 794 attached [pid 794] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 794] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 794] memfd_create("syzkaller", 0) = 3 [pid 794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 794] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 794] munmap(0x7f9627d89000, 262144) = 0 [pid 794] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 794] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 794] close(3) = 0 [pid 794] mkdir("./file0", 0777) = 0 [pid 794] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 794] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 794] chdir("./file0") = 0 [pid 794] ioctl(4, LOOP_CLR_FD) = 0 [pid 794] close(4) = 0 [pid 794] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = 0 [pid 793] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 794] <... futex resumed>) = 1 [pid 793] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 794] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = 0 [pid 793] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 794] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 794] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = 0 [pid 793] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 794] creat("./bus", 000) = 6 [pid 794] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = 0 [pid 793] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 794] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 794] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 793] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] open("./bus", O_RDONLY) = 7 [pid 794] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 793] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 54.985860][ T794] loop0: detected capacity change from 0 to 512 [ 54.994119][ T794] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 55.007104][ T794] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 794] sendfile(6, 7, NULL, 140737974943952 [pid 793] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 793] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 793] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 793] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 793] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 793] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 793] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 793] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[796]}, 88) = 796 [pid 793] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 793] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 796 attached [pid 796] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 796] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 796] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 796] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = 0 [pid 796] <... futex resumed>) = 1 [pid 793] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 796] sendmsg(-1, 0x20000000, 0 [pid 793] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 796] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 796] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = 0 [pid 796] <... futex resumed>) = 1 [pid 796] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] exit_group(0 [pid 796] <... futex resumed>) = ? [pid 793] <... exit_group resumed>) = ? [pid 796] +++ exited with 0 +++ [pid 794] <... sendfile resumed>) = ? [pid 794] +++ exited with 0 +++ [pid 793] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=793, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./114/binderfs") = 0 umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./114/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./114") = 0 mkdir("./115", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 797 ./strace-static-x86_64: Process 797 attached [pid 797] set_robust_list(0x555556b826a0, 24) = 0 [pid 797] chdir("./115") = 0 [pid 797] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 797] setpgid(0, 0) = 0 [pid 797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 797] write(3, "1000", 4) = 4 [pid 797] close(3) = 0 [pid 797] symlink("/dev/binderfs", "./binderfs") = 0 [pid 797] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 797] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 797] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 797] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 797] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 797] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[798]}, 88) = 798 [pid 797] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 797] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 798 attached [pid 798] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 798] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 798] memfd_create("syzkaller", 0) = 3 [pid 798] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 798] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 798] munmap(0x7f9627d89000, 262144) = 0 [pid 798] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 798] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 798] close(3) = 0 [pid 798] mkdir("./file0", 0777) = 0 [pid 798] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 798] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 798] chdir("./file0") = 0 [pid 798] ioctl(4, LOOP_CLR_FD) = 0 [pid 798] close(4) = 0 [pid 798] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 797] <... futex resumed>) = 0 [pid 797] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 798] <... futex resumed>) = 1 [pid 798] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 798] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 797] <... futex resumed>) = 0 [pid 797] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 798] <... futex resumed>) = 1 [pid 798] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 798] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 797] <... futex resumed>) = 0 [pid 797] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 798] <... futex resumed>) = 1 [pid 798] creat("./bus", 000) = 6 [pid 798] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 797] <... futex resumed>) = 0 [pid 797] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 798] <... futex resumed>) = 1 [pid 798] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 798] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 797] <... futex resumed>) = 0 [pid 798] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 797] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 798] <... futex resumed>) = 0 [pid 798] open("./bus", O_RDONLY) = 7 [pid 798] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 797] <... futex resumed>) = 0 [pid 797] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 798] <... futex resumed>) = 1 [ 55.278885][ T798] loop0: detected capacity change from 0 to 512 [ 55.289422][ T798] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 55.302661][ T798] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 798] sendfile(6, 7, NULL, 140737974943952 [pid 797] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 797] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 797] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 797] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 797] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[800]}, 88) = 800 [pid 797] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 797] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 797] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 800 attached [pid 800] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 800] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 800] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 800] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 797] <... futex resumed>) = 0 [pid 797] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 797] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 800] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 800] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 797] <... futex resumed>) = 0 [pid 800] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 797] exit_group(0 [pid 800] <... futex resumed>) = ? [pid 797] <... exit_group resumed>) = ? [pid 798] <... sendfile resumed>) = ? [pid 798] +++ exited with 0 +++ [pid 800] +++ exited with 0 +++ [pid 797] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=797, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./115/binderfs") = 0 umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./115/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./115") = 0 mkdir("./116", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 801 ./strace-static-x86_64: Process 801 attached [pid 801] set_robust_list(0x555556b826a0, 24) = 0 [pid 801] chdir("./116") = 0 [pid 801] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 801] setpgid(0, 0) = 0 [pid 801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 801] write(3, "1000", 4) = 4 [pid 801] close(3) = 0 [pid 801] symlink("/dev/binderfs", "./binderfs") = 0 [pid 801] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 801] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 801] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 801] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 801] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 801] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 801] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[802]}, 88) = 802 ./strace-static-x86_64: Process 802 attached [pid 801] rt_sigprocmask(SIG_SETMASK, [], [pid 802] set_robust_list(0x7f96301a99a0, 24 [pid 801] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 801] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 801] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 802] <... set_robust_list resumed>) = 0 [pid 802] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 802] memfd_create("syzkaller", 0) = 3 [pid 802] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 802] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 802] munmap(0x7f9627d89000, 262144) = 0 [pid 802] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 802] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 802] close(3) = 0 [pid 802] mkdir("./file0", 0777) = 0 [pid 802] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 802] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 802] chdir("./file0") = 0 [pid 802] ioctl(4, LOOP_CLR_FD) = 0 [pid 802] close(4) = 0 [pid 802] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 801] <... futex resumed>) = 0 [pid 801] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 801] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 802] <... futex resumed>) = 1 [pid 802] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 802] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 801] <... futex resumed>) = 0 [pid 801] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 801] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 802] <... futex resumed>) = 1 [pid 802] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 802] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 801] <... futex resumed>) = 0 [pid 801] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 801] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 802] <... futex resumed>) = 1 [pid 802] creat("./bus", 000) = 6 [pid 802] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 801] <... futex resumed>) = 0 [pid 801] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 801] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 802] <... futex resumed>) = 1 [pid 802] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 802] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 801] <... futex resumed>) = 0 [pid 801] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 801] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 802] open("./bus", O_RDONLY) = 7 [pid 802] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 801] <... futex resumed>) = 0 [pid 801] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 801] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 55.584702][ T802] loop0: detected capacity change from 0 to 512 [ 55.594266][ T802] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 55.607542][ T802] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 802] sendfile(6, 7, NULL, 140737974943952 [pid 801] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 801] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 801] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 801] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 801] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 801] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 804 attached [pid 804] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 804] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 804] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 801] <... clone3 resumed> => {parent_tid=[804]}, 88) = 804 [pid 801] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 801] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 804] <... futex resumed>) = 0 [pid 804] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 801] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 804] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 804] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 801] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 801] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 804] <... futex resumed>) = 0 [pid 801] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 804] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 804] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 801] <... futex resumed>) = 0 [pid 804] <... futex resumed>) = 1 [pid 804] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 801] exit_group(0 [pid 804] <... futex resumed>) = ? [pid 801] <... exit_group resumed>) = ? [pid 804] +++ exited with 0 +++ [pid 802] <... sendfile resumed>) = ? [pid 802] +++ exited with 0 +++ [pid 801] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=801, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./116/binderfs") = 0 umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./116/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./116") = 0 mkdir("./117", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 806 ./strace-static-x86_64: Process 806 attached [pid 806] set_robust_list(0x555556b826a0, 24) = 0 [pid 806] chdir("./117") = 0 [pid 806] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 806] setpgid(0, 0) = 0 [pid 806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 806] write(3, "1000", 4) = 4 [pid 806] close(3) = 0 [pid 806] symlink("/dev/binderfs", "./binderfs") = 0 [pid 806] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 806] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 806] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 806] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[807]}, 88) = 807 [pid 806] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 806] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 807 attached [pid 807] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 807] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 807] memfd_create("syzkaller", 0) = 3 [pid 807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 807] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 807] munmap(0x7f9627d89000, 262144) = 0 [pid 807] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 807] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 807] close(3) = 0 [pid 807] mkdir("./file0", 0777) = 0 [pid 807] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 807] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 807] chdir("./file0") = 0 [pid 807] ioctl(4, LOOP_CLR_FD) = 0 [pid 807] close(4) = 0 [pid 807] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = 0 [pid 806] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 807] <... futex resumed>) = 1 [pid 807] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 807] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = 0 [pid 806] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 807] <... futex resumed>) = 1 [pid 807] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 807] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = 0 [pid 806] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 807] <... futex resumed>) = 1 [pid 807] creat("./bus", 000) = 6 [pid 807] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = 0 [pid 806] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 807] <... futex resumed>) = 1 [pid 807] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 807] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = 0 [pid 806] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 807] <... futex resumed>) = 1 [pid 807] open("./bus", O_RDONLY) = 7 [pid 807] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = 0 [pid 806] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 807] <... futex resumed>) = 1 [ 55.847083][ T807] loop0: detected capacity change from 0 to 512 [ 55.855286][ T807] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 55.871871][ T807] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 807] sendfile(6, 7, NULL, 140737974943952 [pid 806] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 806] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 806] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 806] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 806] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[809]}, 88) = 809 [pid 806] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 806] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 809 attached [pid 809] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 809] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 809] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 809] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = 0 [pid 806] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 809] <... futex resumed>) = 1 [pid 809] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 809] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = 0 [pid 809] <... futex resumed>) = 1 [pid 809] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 806] exit_group(0 [pid 809] <... futex resumed>) = ? [pid 806] <... exit_group resumed>) = ? [pid 809] +++ exited with 0 +++ [pid 807] <... sendfile resumed>) = ? [pid 807] +++ exited with 0 +++ [pid 806] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=806, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./117/binderfs") = 0 umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./117/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./117") = 0 mkdir("./118", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 810 ./strace-static-x86_64: Process 810 attached [pid 810] set_robust_list(0x555556b826a0, 24) = 0 [pid 810] chdir("./118") = 0 [pid 810] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 810] setpgid(0, 0) = 0 [pid 810] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 810] write(3, "1000", 4) = 4 [pid 810] close(3) = 0 [pid 810] symlink("/dev/binderfs", "./binderfs") = 0 [pid 810] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 810] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 810] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 810] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 810] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 810] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 811 attached [pid 811] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 811] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 811] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 810] <... clone3 resumed> => {parent_tid=[811]}, 88) = 811 [pid 810] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 810] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 811] <... futex resumed>) = 0 [pid 811] memfd_create("syzkaller", 0 [pid 810] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 811] <... memfd_create resumed>) = 3 [pid 811] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 811] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 811] munmap(0x7f9627d89000, 262144) = 0 [pid 811] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 811] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 811] close(3) = 0 [pid 811] mkdir("./file0", 0777) = 0 [pid 811] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 811] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 811] chdir("./file0") = 0 [pid 811] ioctl(4, LOOP_CLR_FD) = 0 [pid 811] close(4) = 0 [pid 811] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 811] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 810] <... futex resumed>) = 0 [pid 810] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 810] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] <... futex resumed>) = 0 [pid 811] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 811] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] <... futex resumed>) = 0 [pid 810] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] <... futex resumed>) = 1 [pid 811] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 811] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] <... futex resumed>) = 0 [pid 810] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] <... futex resumed>) = 1 [pid 811] creat("./bus", 000) = 6 [pid 811] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] <... futex resumed>) = 0 [pid 810] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] <... futex resumed>) = 1 [pid 811] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 811] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] <... futex resumed>) = 0 [pid 810] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] <... futex resumed>) = 1 [pid 811] open("./bus", O_RDONLY) = 7 [pid 811] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] <... futex resumed>) = 0 [pid 810] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] <... futex resumed>) = 1 [ 56.124072][ T811] loop0: detected capacity change from 0 to 512 [ 56.132238][ T811] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 56.145163][ T811] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 811] sendfile(6, 7, NULL, 140737974943952 [pid 810] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 810] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 810] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 810] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 810] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 810] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[813]}, 88) = 813 [pid 810] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 810] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 813 attached [pid 813] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 813] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 813] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 813] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] <... futex resumed>) = 0 [pid 810] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 813] <... futex resumed>) = 1 [pid 813] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 813] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] <... futex resumed>) = 0 [pid 813] <... futex resumed>) = 1 [pid 813] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 810] exit_group(0 [pid 813] <... futex resumed>) = ? [pid 810] <... exit_group resumed>) = ? [pid 813] +++ exited with 0 +++ [pid 811] <... sendfile resumed>) = ? [pid 811] +++ exited with 0 +++ [pid 810] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=810, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./118/binderfs") = 0 umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./118/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./118/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./118") = 0 mkdir("./119", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 814 ./strace-static-x86_64: Process 814 attached [pid 814] set_robust_list(0x555556b826a0, 24) = 0 [pid 814] chdir("./119") = 0 [pid 814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 814] setpgid(0, 0) = 0 [pid 814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 814] write(3, "1000", 4) = 4 [pid 814] close(3) = 0 [pid 814] symlink("/dev/binderfs", "./binderfs") = 0 [pid 814] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 814] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 814] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 814] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[815]}, 88) = 815 [pid 814] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 814] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 815 attached [pid 815] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 815] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 815] memfd_create("syzkaller", 0) = 3 [pid 815] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 815] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 815] munmap(0x7f9627d89000, 262144) = 0 [pid 815] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 815] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 815] close(3) = 0 [pid 815] mkdir("./file0", 0777) = 0 [pid 815] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 815] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 815] chdir("./file0") = 0 [pid 815] ioctl(4, LOOP_CLR_FD) = 0 [pid 815] close(4) = 0 [pid 815] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 815] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 815] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] creat("./bus", 000) = 6 [pid 815] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 815] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 814] <... futex resumed>) = 0 [pid 815] open("./bus", O_RDONLY [pid 814] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... open resumed>) = 7 [pid 814] <... futex resumed>) = 0 [pid 815] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 0 [pid 814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 814] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 814] <... futex resumed>) = 0 [pid 815] sendfile(6, 7, NULL, 140737974943952 [ 56.450822][ T815] loop0: detected capacity change from 0 to 512 [ 56.462502][ T815] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 56.477155][ T815] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 814] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 814] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 814] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[817]}, 88) = 817 [pid 814] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 814] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 817 attached [pid 817] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 817] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 817] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 817] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 817] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 817] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 814] <... futex resumed>) = 0 [pid 817] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 814] exit_group(0 [pid 817] <... futex resumed>) = ? [pid 814] <... exit_group resumed>) = ? [pid 817] +++ exited with 0 +++ [pid 815] <... sendfile resumed>) = ? [pid 815] +++ exited with 0 +++ [pid 814] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=814, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./119/binderfs") = 0 umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./119/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./119") = 0 mkdir("./120", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 819 ./strace-static-x86_64: Process 819 attached [pid 819] set_robust_list(0x555556b826a0, 24) = 0 [pid 819] chdir("./120") = 0 [pid 819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 819] setpgid(0, 0) = 0 [pid 819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 819] write(3, "1000", 4) = 4 [pid 819] close(3) = 0 [pid 819] symlink("/dev/binderfs", "./binderfs") = 0 [pid 819] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 819] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 819] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 819] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 819] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[820]}, 88) = 820 [pid 819] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 819] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 820 attached [pid 820] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 820] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 820] memfd_create("syzkaller", 0) = 3 [pid 820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 820] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 820] munmap(0x7f9627d89000, 262144) = 0 [pid 820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 820] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 820] close(3) = 0 [pid 820] mkdir("./file0", 0777) = 0 [pid 820] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 820] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 820] chdir("./file0") = 0 [pid 820] ioctl(4, LOOP_CLR_FD) = 0 [pid 820] close(4) = 0 [pid 820] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 820] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 820] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] creat("./bus", 000) = 6 [pid 820] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 820] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] open("./bus", O_RDONLY) = 7 [pid 820] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [ 56.758440][ T820] loop0: detected capacity change from 0 to 512 [ 56.767826][ T820] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 56.787479][ T820] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 820] sendfile(6, 7, NULL, 140737974943952 [pid 819] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 819] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 819] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 819] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 819] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 819] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 819] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 819] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 822 attached => {parent_tid=[822]}, 88) = 822 [pid 819] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 819] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] set_robust_list(0x7f9627dc89a0, 24 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... set_robust_list resumed>) = 0 [pid 822] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 822] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 822] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... futex resumed>) = 1 [pid 822] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 822] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 819] <... futex resumed>) = 0 [pid 822] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 819] exit_group(0) = ? [pid 822] <... futex resumed>) = ? [pid 822] +++ exited with 0 +++ [pid 820] <... sendfile resumed>) = ? [pid 820] +++ exited with 0 +++ [pid 819] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=819, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./120/binderfs") = 0 umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./120/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./120") = 0 mkdir("./121", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 823 ./strace-static-x86_64: Process 823 attached [pid 823] set_robust_list(0x555556b826a0, 24) = 0 [pid 823] chdir("./121") = 0 [pid 823] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 823] setpgid(0, 0) = 0 [pid 823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 823] write(3, "1000", 4) = 4 [pid 823] close(3) = 0 [pid 823] symlink("/dev/binderfs", "./binderfs") = 0 [pid 823] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 823] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 823] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 823] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 823] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[824]}, 88) = 824 [pid 823] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 823] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 824 attached [pid 824] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 824] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 824] memfd_create("syzkaller", 0) = 3 [pid 824] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 824] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 824] munmap(0x7f9627d89000, 262144) = 0 [pid 824] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 824] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 824] close(3) = 0 [pid 824] mkdir("./file0", 0777) = 0 [pid 824] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 824] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 824] chdir("./file0") = 0 [pid 824] ioctl(4, LOOP_CLR_FD) = 0 [pid 824] close(4) = 0 [pid 824] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 824] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 0 [pid 824] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 824] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 824] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 0 [pid 824] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 824] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 1 [pid 824] creat("./bus", 000) = 6 [pid 824] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 1 [pid 824] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 824] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] <... futex resumed>) = 0 [pid 824] open("./bus", O_RDONLY [pid 823] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... open resumed>) = 7 [pid 824] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 57.071835][ T824] loop0: detected capacity change from 0 to 512 [ 57.081260][ T824] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 57.094450][ T824] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 824] sendfile(6, 7, NULL, 140737974943952 [pid 823] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 823] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 823] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 823] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 823] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 823] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[826]}, 88) = 826 ./strace-static-x86_64: Process 826 attached [pid 823] rt_sigprocmask(SIG_SETMASK, [], [pid 826] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 826] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 826] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 823] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 823] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 826] <... futex resumed>) = 0 [pid 823] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 826] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 826] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] <... futex resumed>) = 0 [pid 826] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 823] exit_group(0 [pid 826] <... futex resumed>) = ? [pid 823] <... exit_group resumed>) = ? [pid 826] +++ exited with 0 +++ [pid 824] <... sendfile resumed>) = ? [pid 824] +++ exited with 0 +++ [pid 823] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=823, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./121/binderfs") = 0 umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./121/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./121") = 0 mkdir("./122", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 827 ./strace-static-x86_64: Process 827 attached [pid 827] set_robust_list(0x555556b826a0, 24) = 0 [pid 827] chdir("./122") = 0 [pid 827] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 827] setpgid(0, 0) = 0 [pid 827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 827] write(3, "1000", 4) = 4 [pid 827] close(3) = 0 [pid 827] symlink("/dev/binderfs", "./binderfs") = 0 [pid 827] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 827] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 827] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 827] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 827] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[828]}, 88) = 828 [pid 827] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 827] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 828 attached [pid 828] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 828] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 828] memfd_create("syzkaller", 0) = 3 [pid 828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 828] munmap(0x7f9627d89000, 262144) = 0 [pid 828] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 828] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 828] close(3) = 0 [pid 828] mkdir("./file0", 0777) = 0 [pid 828] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 828] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 828] chdir("./file0") = 0 [pid 828] ioctl(4, LOOP_CLR_FD) = 0 [pid 828] close(4) = 0 [pid 828] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] <... futex resumed>) = 0 [pid 827] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... futex resumed>) = 1 [pid 828] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 828] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] <... futex resumed>) = 0 [pid 827] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... futex resumed>) = 1 [pid 828] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 828] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] <... futex resumed>) = 0 [pid 827] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... futex resumed>) = 1 [pid 828] creat("./bus", 000) = 6 [pid 828] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] <... futex resumed>) = 0 [pid 827] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... futex resumed>) = 1 [pid 828] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 828] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] <... futex resumed>) = 0 [pid 827] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... futex resumed>) = 1 [pid 828] open("./bus", O_RDONLY) = 7 [pid 828] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] <... futex resumed>) = 0 [pid 827] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... futex resumed>) = 1 [ 57.371701][ T828] loop0: detected capacity change from 0 to 512 [ 57.380678][ T828] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 57.393882][ T828] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 828] sendfile(6, 7, NULL, 140737974943952 [pid 827] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 827] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 827] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 827] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 827] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 830 attached => {parent_tid=[830]}, 88) = 830 [pid 830] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 830] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 830] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 827] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 827] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 830] <... futex resumed>) = 0 [pid 830] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 830] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] <... futex resumed>) = 0 [pid 830] <... futex resumed>) = 1 [pid 827] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 830] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 830] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 827] <... futex resumed>) = 0 [pid 830] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] exit_group(0 [pid 830] <... futex resumed>) = ? [pid 827] <... exit_group resumed>) = ? [pid 830] +++ exited with 0 +++ [pid 828] <... sendfile resumed>) = ? [pid 828] +++ exited with 0 +++ [pid 827] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=827, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./122/binderfs") = 0 umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./122/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./122/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./122") = 0 mkdir("./123", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 831 ./strace-static-x86_64: Process 831 attached [pid 831] set_robust_list(0x555556b826a0, 24) = 0 [pid 831] chdir("./123") = 0 [pid 831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 831] setpgid(0, 0) = 0 [pid 831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 831] write(3, "1000", 4) = 4 [pid 831] close(3) = 0 [pid 831] symlink("/dev/binderfs", "./binderfs") = 0 [pid 831] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 831] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 831] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 831] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[832]}, 88) = 832 [pid 831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 831] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 832 attached [pid 832] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 832] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 832] memfd_create("syzkaller", 0) = 3 [pid 832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 832] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 832] munmap(0x7f9627d89000, 262144) = 0 [pid 832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 832] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 832] close(3) = 0 [pid 832] mkdir("./file0", 0777) = 0 [pid 832] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 832] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 832] chdir("./file0") = 0 [pid 832] ioctl(4, LOOP_CLR_FD) = 0 [pid 832] close(4) = 0 [pid 832] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... futex resumed>) = 1 [pid 832] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 832] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... futex resumed>) = 1 [pid 832] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 832] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... futex resumed>) = 1 [pid 832] creat("./bus", 000) = 6 [pid 832] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... futex resumed>) = 1 [pid 832] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 832] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 831] <... futex resumed>) = 0 [pid 832] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 831] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 832] <... futex resumed>) = 0 [pid 831] <... futex resumed>) = 1 [pid 832] open("./bus", O_RDONLY [pid 831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... open resumed>) = 7 [pid 832] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 831] <... futex resumed>) = 0 [pid 832] sendfile(6, 7, NULL, 140737974943952 [pid 831] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 57.682551][ T832] loop0: detected capacity change from 0 to 512 [ 57.691281][ T832] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 57.704509][ T832] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 831] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 831] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 831] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[835]}, 88) = 835 ./strace-static-x86_64: Process 835 attached [pid 835] set_robust_list(0x7f9627dc89a0, 24 [pid 831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 835] <... set_robust_list resumed>) = 0 [pid 831] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] rt_sigprocmask(SIG_SETMASK, [], [pid 831] <... futex resumed>) = 0 [pid 835] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 835] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 831] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 835] <... mmap resumed>) = 0x20000000 [pid 835] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 835] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 835] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 835] <... futex resumed>) = 1 [pid 835] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 831] exit_group(0) = ? [pid 835] <... futex resumed>) = 231 [pid 835] +++ exited with 0 +++ [pid 832] <... sendfile resumed>) = ? [pid 832] +++ exited with 0 +++ [pid 831] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=831, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./123/binderfs") = 0 umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./123/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./123") = 0 mkdir("./124", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 836 ./strace-static-x86_64: Process 836 attached [pid 836] set_robust_list(0x555556b826a0, 24) = 0 [pid 836] chdir("./124") = 0 [pid 836] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 836] setpgid(0, 0) = 0 [pid 836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 836] write(3, "1000", 4) = 4 [pid 836] close(3) = 0 [pid 836] symlink("/dev/binderfs", "./binderfs") = 0 [pid 836] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 836] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 836] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 836] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 836] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 836] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 836] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 837 attached => {parent_tid=[837]}, 88) = 837 [pid 836] rt_sigprocmask(SIG_SETMASK, [], [pid 837] set_robust_list(0x7f96301a99a0, 24 [pid 836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 836] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 836] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 837] <... set_robust_list resumed>) = 0 [pid 837] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 837] memfd_create("syzkaller", 0) = 3 [pid 837] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 837] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 837] munmap(0x7f9627d89000, 262144) = 0 [pid 837] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 57.897055][ T832] syz-executor126 (832) used greatest stack depth: 20912 bytes left [pid 837] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 837] close(3) = 0 [pid 837] mkdir("./file0", 0777) = 0 [pid 837] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 837] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 837] chdir("./file0") = 0 [pid 837] ioctl(4, LOOP_CLR_FD) = 0 [pid 837] close(4) = 0 [pid 837] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 837] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 836] <... futex resumed>) = 0 [pid 836] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 837] <... futex resumed>) = 0 [pid 836] <... futex resumed>) = 1 [pid 836] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 837] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 837] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 837] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 836] <... futex resumed>) = 0 [pid 836] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 836] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 837] <... futex resumed>) = 0 [pid 837] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 837] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] <... futex resumed>) = 0 [pid 836] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 836] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 837] <... futex resumed>) = 1 [pid 837] creat("./bus", 000) = 6 [pid 837] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] <... futex resumed>) = 0 [pid 836] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 836] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 837] <... futex resumed>) = 1 [pid 837] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 837] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] <... futex resumed>) = 0 [pid 836] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 836] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 837] <... futex resumed>) = 1 [pid 837] open("./bus", O_RDONLY) = 7 [pid 837] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 836] <... futex resumed>) = 0 [pid 836] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 836] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 837] <... futex resumed>) = 1 [ 57.954462][ T837] loop0: detected capacity change from 0 to 512 [ 57.964230][ T837] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 57.977866][ T837] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 837] sendfile(6, 7, NULL, 140737974943952 [pid 836] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 836] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 836] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 836] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 836] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 836] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 836] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[839]}, 88) = 839 ./strace-static-x86_64: Process 839 attached [pid 836] rt_sigprocmask(SIG_SETMASK, [], [pid 839] set_robust_list(0x7f9627dc89a0, 24 [pid 836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 836] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... set_robust_list resumed>) = 0 [pid 836] <... futex resumed>) = 0 [pid 836] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 839] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 839] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 839] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 836] <... futex resumed>) = 0 [pid 839] sendmsg(-1, 0x20000000, 0 [pid 836] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 836] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 839] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 836] <... futex resumed>) = 0 [pid 839] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 836] exit_group(0 [pid 839] <... futex resumed>) = ? [pid 836] <... exit_group resumed>) = ? [pid 839] +++ exited with 0 +++ [pid 837] <... sendfile resumed>) = ? [pid 837] +++ exited with 0 +++ [pid 836] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=836, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./124/binderfs") = 0 umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./124/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./124") = 0 mkdir("./125", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 840 ./strace-static-x86_64: Process 840 attached [pid 840] set_robust_list(0x555556b826a0, 24) = 0 [pid 840] chdir("./125") = 0 [pid 840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 840] setpgid(0, 0) = 0 [pid 840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 840] write(3, "1000", 4) = 4 [pid 840] close(3) = 0 [pid 840] symlink("/dev/binderfs", "./binderfs") = 0 [pid 840] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 840] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 840] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 840] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 840] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 840] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 840] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 841 attached => {parent_tid=[841]}, 88) = 841 [pid 840] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 840] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 841] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 841] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 841] memfd_create("syzkaller", 0) = 3 [pid 841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 841] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 841] munmap(0x7f9627d89000, 262144) = 0 [pid 841] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 841] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 841] close(3) = 0 [pid 841] mkdir("./file0", 0777) = 0 [pid 841] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 841] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 841] chdir("./file0") = 0 [pid 841] ioctl(4, LOOP_CLR_FD) = 0 [pid 841] close(4) = 0 [pid 841] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 841] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 840] <... futex resumed>) = 0 [pid 840] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 841] <... futex resumed>) = 0 [pid 841] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 841] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... futex resumed>) = 0 [pid 840] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 841] <... futex resumed>) = 1 [pid 841] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 841] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... futex resumed>) = 0 [pid 840] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 841] <... futex resumed>) = 1 [pid 841] creat("./bus", 000) = 6 [pid 841] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... futex resumed>) = 0 [pid 840] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 841] <... futex resumed>) = 1 [pid 841] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 841] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... futex resumed>) = 0 [pid 840] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 841] <... futex resumed>) = 1 [pid 841] open("./bus", O_RDONLY) = 7 [pid 841] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... futex resumed>) = 0 [pid 840] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 841] <... futex resumed>) = 1 [ 58.343632][ T841] loop0: detected capacity change from 0 to 512 [ 58.353584][ T841] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 58.368721][ T841] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 841] sendfile(6, 7, NULL, 140737974943952 [pid 840] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 840] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 840] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 840] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 840] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 840] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[843]}, 88) = 843 [pid 840] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 840] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 840] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 843 attached [pid 843] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 843] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 843] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 843] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... futex resumed>) = 0 [pid 840] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 840] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 843] <... futex resumed>) = 1 [pid 843] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 843] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... futex resumed>) = 0 [pid 843] <... futex resumed>) = 1 [pid 843] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 840] exit_group(0 [pid 843] <... futex resumed>) = ? [pid 840] <... exit_group resumed>) = ? [pid 843] +++ exited with 0 +++ [pid 841] <... sendfile resumed>) = ? [pid 841] +++ exited with 0 +++ [pid 840] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=840, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./125/binderfs") = 0 umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./125/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./125") = 0 mkdir("./126", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 844 ./strace-static-x86_64: Process 844 attached [pid 844] set_robust_list(0x555556b826a0, 24) = 0 [pid 844] chdir("./126") = 0 [pid 844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 844] setpgid(0, 0) = 0 [pid 844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 844] write(3, "1000", 4) = 4 [pid 844] close(3) = 0 [pid 844] symlink("/dev/binderfs", "./binderfs") = 0 [pid 844] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 844] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 844] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 844] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 844] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[845]}, 88) = 845 [pid 844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 845 attached [pid 844] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 845] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 845] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 845] memfd_create("syzkaller", 0) = 3 [pid 845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 845] munmap(0x7f9627d89000, 262144) = 0 [pid 845] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 845] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 845] close(3) = 0 [pid 845] mkdir("./file0", 0777) = 0 [pid 845] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 845] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 845] chdir("./file0") = 0 [pid 845] ioctl(4, LOOP_CLR_FD) = 0 [pid 845] close(4) = 0 [pid 845] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 845] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 844] <... futex resumed>) = 0 [pid 844] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 845] <... futex resumed>) = 0 [pid 845] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 845] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 845] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 844] <... futex resumed>) = 0 [pid 844] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 845] <... futex resumed>) = 0 [pid 845] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 845] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 844] <... futex resumed>) = 0 [pid 844] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 845] <... futex resumed>) = 1 [pid 845] creat("./bus", 000) = 6 [pid 845] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 844] <... futex resumed>) = 0 [pid 844] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 845] <... futex resumed>) = 1 [pid 845] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 845] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 844] <... futex resumed>) = 0 [pid 844] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 845] <... futex resumed>) = 1 [pid 845] open("./bus", O_RDONLY) = 7 [pid 845] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 844] <... futex resumed>) = 0 [pid 844] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 845] <... futex resumed>) = 1 [ 58.629580][ T845] loop0: detected capacity change from 0 to 512 [ 58.637497][ T845] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 58.650949][ T845] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 845] sendfile(6, 7, NULL, 140737974943952 [pid 844] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 844] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 844] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 844] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[848]}, 88) = 848 ./strace-static-x86_64: Process 848 attached [pid 844] rt_sigprocmask(SIG_SETMASK, [], [pid 848] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 848] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 848] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 844] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 844] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 848] <... futex resumed>) = 0 [pid 848] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 844] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 848] <... mmap resumed>) = 0x20000000 [pid 848] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 844] <... futex resumed>) = 0 [pid 844] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 844] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 848] <... futex resumed>) = 1 [pid 848] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 848] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 844] <... futex resumed>) = 0 [pid 848] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 844] exit_group(0 [pid 848] <... futex resumed>) = ? [pid 844] <... exit_group resumed>) = ? [pid 848] +++ exited with 0 +++ [pid 845] <... sendfile resumed>) = ? [pid 845] +++ exited with 0 +++ [pid 844] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=844, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./126/binderfs") = 0 umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./126/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./126") = 0 mkdir("./127", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 849 ./strace-static-x86_64: Process 849 attached [pid 849] set_robust_list(0x555556b826a0, 24) = 0 [pid 849] chdir("./127") = 0 [pid 849] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 849] setpgid(0, 0) = 0 [pid 849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 849] write(3, "1000", 4) = 4 [pid 849] close(3) = 0 [pid 849] symlink("/dev/binderfs", "./binderfs") = 0 [pid 849] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 849] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 849] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 849] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 849] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 849] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 850 attached => {parent_tid=[850]}, 88) = 850 [pid 849] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 849] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 849] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 850] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 850] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 850] memfd_create("syzkaller", 0) = 3 [pid 850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 850] munmap(0x7f9627d89000, 262144) = 0 [pid 850] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 850] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 850] close(3) = 0 [pid 850] mkdir("./file0", 0777) = 0 [pid 850] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 850] chdir("./file0") = 0 [pid 850] ioctl(4, LOOP_CLR_FD) = 0 [pid 850] close(4) = 0 [pid 850] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 849] <... futex resumed>) = 0 [pid 850] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 849] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 849] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 850] <... futex resumed>) = 0 [pid 850] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 850] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 849] <... futex resumed>) = 0 [pid 849] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 849] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 850] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 850] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 849] <... futex resumed>) = 0 [pid 849] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] creat("./bus", 000 [pid 849] <... futex resumed>) = 0 [pid 850] <... creat resumed>) = 6 [pid 850] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 850] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 849] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 849] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 849] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 850] <... futex resumed>) = 0 [pid 850] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 850] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 849] <... futex resumed>) = 0 [pid 849] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 849] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 850] <... futex resumed>) = 1 [pid 850] open("./bus", O_RDONLY) = 7 [pid 850] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 849] <... futex resumed>) = 0 [pid 849] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 849] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 850] <... futex resumed>) = 1 [ 58.972600][ T850] loop0: detected capacity change from 0 to 512 [ 58.982101][ T850] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 58.995611][ T850] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 850] sendfile(6, 7, NULL, 140737974943952 [pid 849] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 849] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 849] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 849] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 849] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 849] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 853 attached => {parent_tid=[853]}, 88) = 853 [pid 853] set_robust_list(0x7f9627dc89a0, 24 [pid 849] rt_sigprocmask(SIG_SETMASK, [], [pid 853] <... set_robust_list resumed>) = 0 [pid 849] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 849] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 853] rt_sigprocmask(SIG_SETMASK, [], [pid 849] <... futex resumed>) = 0 [pid 849] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 853] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 853] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 849] <... futex resumed>) = 0 [pid 849] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 849] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 853] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 849] <... futex resumed>) = 0 [pid 853] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 849] exit_group(0 [pid 853] <... futex resumed>) = ? [pid 849] <... exit_group resumed>) = ? [pid 853] +++ exited with 0 +++ [pid 850] <... sendfile resumed>) = ? [pid 850] +++ exited with 0 +++ [pid 849] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=849, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./127/binderfs") = 0 umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./127/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./127/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./127") = 0 mkdir("./128", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 854 ./strace-static-x86_64: Process 854 attached [pid 854] set_robust_list(0x555556b826a0, 24) = 0 [pid 854] chdir("./128") = 0 [pid 854] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 854] setpgid(0, 0) = 0 [pid 854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 854] write(3, "1000", 4) = 4 [pid 854] close(3) = 0 [pid 854] symlink("/dev/binderfs", "./binderfs") = 0 [pid 854] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 854] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 854] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 854] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 854] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 855 attached [pid 855] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 855] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 855] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] <... clone3 resumed> => {parent_tid=[855]}, 88) = 855 [pid 854] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 854] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 855] <... futex resumed>) = 0 [pid 855] memfd_create("syzkaller", 0) = 3 [pid 855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 855] munmap(0x7f9627d89000, 262144) = 0 [pid 855] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 855] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 855] close(3) = 0 [pid 855] mkdir("./file0", 0777) = 0 [pid 855] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 855] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 855] chdir("./file0") = 0 [pid 855] ioctl(4, LOOP_CLR_FD) = 0 [pid 855] close(4) = 0 [pid 855] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 855] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 855] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] creat("./bus", 000) = 6 [pid 855] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 855] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] open("./bus", O_RDONLY) = 7 [pid 855] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [ 59.296444][ T855] loop0: detected capacity change from 0 to 512 [ 59.304864][ T855] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 59.317950][ T855] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 855] sendfile(6, 7, NULL, 140737974943952 [pid 854] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 854] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 854] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 854] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 854] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 857 attached [pid 857] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 857] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 857] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] <... clone3 resumed> => {parent_tid=[857]}, 88) = 857 [pid 854] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 854] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 857] <... futex resumed>) = 0 [pid 857] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 857] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 857] <... futex resumed>) = 1 [pid 854] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 857] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 857] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] <... futex resumed>) = 0 [pid 857] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] exit_group(0 [pid 857] <... futex resumed>) = ? [pid 854] <... exit_group resumed>) = ? [pid 857] +++ exited with 0 +++ [pid 855] <... sendfile resumed>) = ? [pid 855] +++ exited with 0 +++ [pid 854] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=854, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./128/binderfs") = 0 umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./128/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./128") = 0 mkdir("./129", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 858 ./strace-static-x86_64: Process 858 attached [pid 858] set_robust_list(0x555556b826a0, 24) = 0 [pid 858] chdir("./129") = 0 [pid 858] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 858] setpgid(0, 0) = 0 [pid 858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 858] write(3, "1000", 4) = 4 [pid 858] close(3) = 0 [pid 858] symlink("/dev/binderfs", "./binderfs") = 0 [pid 858] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 858] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 858] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 858] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 858] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 858] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 858] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 859 attached [pid 859] set_robust_list(0x7f96301a99a0, 24 [pid 858] <... clone3 resumed> => {parent_tid=[859]}, 88) = 859 [pid 859] <... set_robust_list resumed>) = 0 [pid 859] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 859] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 858] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 858] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 858] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 859] <... futex resumed>) = 0 [pid 859] memfd_create("syzkaller", 0) = 3 [pid 859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 859] munmap(0x7f9627d89000, 262144) = 0 [pid 859] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 859] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 859] close(3) = 0 [pid 859] mkdir("./file0", 0777) = 0 [pid 859] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 859] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 859] chdir("./file0") = 0 [pid 859] ioctl(4, LOOP_CLR_FD) = 0 [pid 859] close(4) = 0 [pid 859] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = 0 [pid 858] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 858] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 859] <... futex resumed>) = 1 [pid 859] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 859] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = 0 [pid 858] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 858] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 859] <... futex resumed>) = 1 [pid 859] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 859] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = 0 [pid 858] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 858] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 859] <... futex resumed>) = 1 [pid 859] creat("./bus", 000) = 6 [pid 859] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = 0 [pid 858] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 858] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 859] <... futex resumed>) = 1 [pid 859] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 859] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = 0 [pid 858] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 858] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 859] <... futex resumed>) = 1 [pid 859] open("./bus", O_RDONLY) = 7 [pid 859] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = 0 [pid 858] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 858] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 859] <... futex resumed>) = 1 [ 59.586018][ T859] loop0: detected capacity change from 0 to 512 [ 59.594092][ T859] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 59.606966][ T859] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 859] sendfile(6, 7, NULL, 140737974943952 [pid 858] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 858] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 858] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 858] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 858] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 858] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 858] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 862 attached => {parent_tid=[862]}, 88) = 862 [pid 858] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 858] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 858] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 862] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 862] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 862] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 862] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 858] <... futex resumed>) = 0 [pid 858] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 858] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 862] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 862] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 858] <... futex resumed>) = 0 [pid 862] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 858] exit_group(0 [pid 862] <... futex resumed>) = ? [pid 858] <... exit_group resumed>) = ? [pid 859] <... sendfile resumed>) = ? [pid 862] +++ exited with 0 +++ [pid 859] +++ exited with 0 +++ [pid 858] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=858, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./129/binderfs") = 0 umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./129/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./129/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./129") = 0 mkdir("./130", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 864 ./strace-static-x86_64: Process 864 attached [pid 864] set_robust_list(0x555556b826a0, 24) = 0 [pid 864] chdir("./130") = 0 [pid 864] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 864] setpgid(0, 0) = 0 [pid 864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 864] write(3, "1000", 4) = 4 [pid 864] close(3) = 0 [pid 864] symlink("/dev/binderfs", "./binderfs") = 0 [pid 864] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 864] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 864] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 864] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 864] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 864] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[865]}, 88) = 865 ./strace-static-x86_64: Process 865 attached [pid 864] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 864] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 864] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 865] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 865] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 865] memfd_create("syzkaller", 0) = 3 [pid 865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 865] munmap(0x7f9627d89000, 262144) = 0 [pid 865] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 865] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 865] close(3) = 0 [pid 865] mkdir("./file0", 0777) = 0 [pid 865] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 865] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 865] chdir("./file0") = 0 [pid 865] ioctl(4, LOOP_CLR_FD) = 0 [pid 865] close(4) = 0 [pid 865] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 864] <... futex resumed>) = 0 [pid 864] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 865] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 864] <... futex resumed>) = 0 [pid 864] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 865] <... open resumed>) = 4 [pid 865] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 864] <... futex resumed>) = 0 [pid 865] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 864] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 864] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 865] <... open resumed>) = 5 [pid 865] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 864] <... futex resumed>) = 0 [pid 865] creat("./bus", 000 [pid 864] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 864] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 865] <... creat resumed>) = 6 [pid 865] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 864] <... futex resumed>) = 0 [pid 864] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 865] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 864] <... futex resumed>) = 0 [pid 864] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 865] <... writev resumed>) = 1 [pid 865] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 864] <... futex resumed>) = 0 [pid 864] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 865] open("./bus", O_RDONLY [pid 864] <... futex resumed>) = 0 [pid 864] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 865] <... open resumed>) = 7 [pid 865] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 864] <... futex resumed>) = 0 [pid 864] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 864] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 59.895349][ T865] loop0: detected capacity change from 0 to 512 [ 59.903345][ T865] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 59.916379][ T865] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 865] sendfile(6, 7, NULL, 140737974943952 [pid 864] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 864] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 864] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 864] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 864] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 864] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 864] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 864] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[867]}, 88) = 867 [pid 864] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 864] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 864] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 867 attached [pid 867] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 867] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 867] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 867] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 864] <... futex resumed>) = 0 [pid 864] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 864] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 867] <... futex resumed>) = 1 [pid 867] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 867] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 864] <... futex resumed>) = 0 [pid 867] <... futex resumed>) = 1 [pid 867] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 864] exit_group(0 [pid 867] <... futex resumed>) = ? [pid 864] <... exit_group resumed>) = ? [pid 867] +++ exited with 0 +++ [pid 865] <... sendfile resumed>) = ? [pid 865] +++ exited with 0 +++ [pid 864] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=864, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./130/binderfs") = 0 umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./130/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./130") = 0 mkdir("./131", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 868 ./strace-static-x86_64: Process 868 attached [pid 868] set_robust_list(0x555556b826a0, 24) = 0 [pid 868] chdir("./131") = 0 [pid 868] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 868] setpgid(0, 0) = 0 [pid 868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 868] write(3, "1000", 4) = 4 [pid 868] close(3) = 0 [pid 868] symlink("/dev/binderfs", "./binderfs") = 0 [pid 868] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 868] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 868] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 868] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 868] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[869]}, 88) = 869 [pid 868] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 868] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 869 attached [pid 869] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 869] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 869] memfd_create("syzkaller", 0) = 3 [pid 869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 869] munmap(0x7f9627d89000, 262144) = 0 [pid 869] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 869] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 869] close(3) = 0 [pid 869] mkdir("./file0", 0777) = 0 [pid 869] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 869] chdir("./file0") = 0 [pid 869] ioctl(4, LOOP_CLR_FD) = 0 [pid 869] close(4) = 0 [pid 869] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 869] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 868] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... futex resumed>) = 0 [pid 869] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 869] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 868] <... futex resumed>) = 0 [pid 869] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 868] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 869] <... open resumed>) = 5 [pid 868] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 868] <... futex resumed>) = 0 [pid 869] creat("./bus", 000 [pid 868] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... creat resumed>) = 6 [pid 869] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 869] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] open("./bus", O_RDONLY) = 7 [pid 869] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 60.213167][ T869] loop0: detected capacity change from 0 to 512 [ 60.221235][ T869] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 60.234116][ T869] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 869] sendfile(6, 7, NULL, 140737974943952 [pid 868] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 868] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 868] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 868] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 868] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 868] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 868] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 871 attached => {parent_tid=[871]}, 88) = 871 [pid 868] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 871] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 871] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 871] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 868] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 871] <... futex resumed>) = 0 [pid 868] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 871] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 871] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 871] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 871] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 868] <... futex resumed>) = 0 [pid 871] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 868] exit_group(0 [pid 871] <... futex resumed>) = ? [pid 868] <... exit_group resumed>) = ? [pid 871] +++ exited with 0 +++ [pid 869] <... sendfile resumed>) = ? [pid 869] +++ exited with 0 +++ [pid 868] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=868, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./131/binderfs") = 0 umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./131/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./131") = 0 mkdir("./132", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 872 ./strace-static-x86_64: Process 872 attached [pid 872] set_robust_list(0x555556b826a0, 24) = 0 [pid 872] chdir("./132") = 0 [pid 872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 872] setpgid(0, 0) = 0 [pid 872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 872] write(3, "1000", 4) = 4 [pid 872] close(3) = 0 [pid 872] symlink("/dev/binderfs", "./binderfs") = 0 [pid 872] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 872] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 872] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 872] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 872] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 872] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[873]}, 88) = 873 [pid 872] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 872] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 873 attached [pid 873] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 873] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 873] memfd_create("syzkaller", 0) = 3 [pid 873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 873] munmap(0x7f9627d89000, 262144) = 0 [pid 873] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 873] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 873] close(3) = 0 [pid 873] mkdir("./file0", 0777) = 0 [pid 873] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 873] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 873] chdir("./file0") = 0 [pid 873] ioctl(4, LOOP_CLR_FD) = 0 [pid 873] close(4) = 0 [pid 873] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 873] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 872] <... futex resumed>) = 0 [pid 872] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 872] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 873] <... futex resumed>) = 0 [pid 873] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 873] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... futex resumed>) = 0 [pid 872] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 873] <... futex resumed>) = 1 [pid 873] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 873] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... futex resumed>) = 0 [pid 872] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 873] <... futex resumed>) = 1 [pid 873] creat("./bus", 000) = 6 [pid 873] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... futex resumed>) = 0 [pid 872] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 873] <... futex resumed>) = 1 [pid 873] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 873] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... futex resumed>) = 0 [pid 872] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 873] <... futex resumed>) = 1 [pid 873] open("./bus", O_RDONLY) = 7 [pid 873] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... futex resumed>) = 0 [pid 872] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 873] <... futex resumed>) = 1 [ 60.488319][ T873] loop0: detected capacity change from 0 to 512 [ 60.496276][ T873] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 60.509469][ T873] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 873] sendfile(6, 7, NULL, 140737974943952 [pid 872] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 872] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 872] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 872] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 872] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 872] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 875 attached => {parent_tid=[875]}, 88) = 875 [pid 875] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 872] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 875] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 872] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 875] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 875] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 872] <... futex resumed>) = 0 [pid 872] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 875] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 875] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 872] <... futex resumed>) = 0 [pid 875] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 872] exit_group(0 [pid 875] <... futex resumed>) = ? [pid 872] <... exit_group resumed>) = ? [pid 875] +++ exited with 0 +++ [pid 873] <... sendfile resumed>) = ? [pid 873] +++ exited with 0 +++ [pid 872] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=872, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./132/binderfs") = 0 umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./132/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./132/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./132") = 0 mkdir("./133", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 877 ./strace-static-x86_64: Process 877 attached [pid 877] set_robust_list(0x555556b826a0, 24) = 0 [pid 877] chdir("./133") = 0 [pid 877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 877] setpgid(0, 0) = 0 [pid 877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 877] write(3, "1000", 4) = 4 [pid 877] close(3) = 0 [pid 877] symlink("/dev/binderfs", "./binderfs") = 0 [pid 877] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 877] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 877] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 877] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 877] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 877] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 877] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[878]}, 88) = 878 [pid 877] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 878 attached [pid 878] set_robust_list(0x7f96301a99a0, 24 [pid 877] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 878] <... set_robust_list resumed>) = 0 [pid 878] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 878] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 877] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 878] <... futex resumed>) = 0 [pid 878] memfd_create("syzkaller", 0 [pid 877] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 878] <... memfd_create resumed>) = 3 [pid 878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 878] munmap(0x7f9627d89000, 262144) = 0 [pid 878] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 878] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 878] close(3) = 0 [pid 878] mkdir("./file0", 0777) = 0 [pid 878] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 878] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 878] chdir("./file0") = 0 [pid 878] ioctl(4, LOOP_CLR_FD) = 0 [pid 878] close(4) = 0 [pid 878] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 877] <... futex resumed>) = 0 [pid 877] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 878] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 877] <... futex resumed>) = 0 [pid 877] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 878] <... open resumed>) = 4 [pid 878] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 877] <... futex resumed>) = 0 [pid 878] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 877] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 878] <... open resumed>) = 5 [pid 877] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 878] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 877] <... futex resumed>) = 0 [pid 878] creat("./bus", 000 [pid 877] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 877] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 878] <... creat resumed>) = 6 [pid 878] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 877] <... futex resumed>) = 0 [pid 877] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 877] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 878] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 878] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 877] <... futex resumed>) = 0 [pid 877] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 877] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 878] open("./bus", O_RDONLY) = 7 [pid 878] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 877] <... futex resumed>) = 0 [pid 877] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 877] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 60.740925][ T878] loop0: detected capacity change from 0 to 512 [ 60.749094][ T878] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 60.762585][ T878] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 878] sendfile(6, 7, NULL, 140737974943952 [pid 877] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 877] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 877] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 877] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 877] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 877] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 877] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[880]}, 88) = 880 [pid 877] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 877] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 877] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 880 attached [pid 880] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 880] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 880] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 880] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 877] <... futex resumed>) = 0 [pid 877] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 877] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 880] <... futex resumed>) = 1 [pid 880] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 880] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 877] <... futex resumed>) = 0 [pid 880] <... futex resumed>) = 1 [pid 880] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 877] exit_group(0 [pid 880] <... futex resumed>) = ? [pid 877] <... exit_group resumed>) = ? [pid 880] +++ exited with 0 +++ [pid 878] <... sendfile resumed>) = ? [pid 878] +++ exited with 0 +++ [pid 877] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=877, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./133/binderfs") = 0 umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./133/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./133") = 0 mkdir("./134", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 881 ./strace-static-x86_64: Process 881 attached [pid 881] set_robust_list(0x555556b826a0, 24) = 0 [pid 881] chdir("./134") = 0 [pid 881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 881] setpgid(0, 0) = 0 [pid 881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 881] write(3, "1000", 4) = 4 [pid 881] close(3) = 0 [pid 881] symlink("/dev/binderfs", "./binderfs") = 0 [pid 881] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 881] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 881] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 881] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 881] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[882]}, 88) = 882 [pid 881] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 881] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 882 attached [pid 881] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 882] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 882] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 882] memfd_create("syzkaller", 0) = 3 [pid 882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 882] munmap(0x7f9627d89000, 262144) = 0 [pid 882] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 882] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 882] close(3) = 0 [pid 882] mkdir("./file0", 0777) = 0 [pid 882] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 882] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 882] chdir("./file0") = 0 [pid 882] ioctl(4, LOOP_CLR_FD) = 0 [pid 882] close(4) = 0 [pid 882] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] <... futex resumed>) = 1 [pid 882] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 882] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] <... futex resumed>) = 1 [pid 882] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 882] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 882] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 881] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] <... futex resumed>) = 0 [pid 882] creat("./bus", 000) = 6 [pid 882] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] <... futex resumed>) = 1 [pid 882] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 882] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] <... futex resumed>) = 1 [pid 882] open("./bus", O_RDONLY) = 7 [pid 882] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 882] <... futex resumed>) = 1 [ 61.043337][ T882] loop0: detected capacity change from 0 to 512 [ 61.051131][ T882] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 61.064322][ T882] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 882] sendfile(6, 7, NULL, 140737974943952 [pid 881] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 881] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 881] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 881] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 881] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 881] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 881] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[884]}, 88) = 884 [pid 881] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 881] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 884 attached [pid 884] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 884] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 884] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 884] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 881] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 884] <... futex resumed>) = 1 [pid 884] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 884] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 884] <... futex resumed>) = 1 [pid 884] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] exit_group(0) = ? [pid 884] <... futex resumed>) = ? [pid 882] <... sendfile resumed>) = ? [pid 882] +++ exited with 0 +++ [pid 884] +++ exited with 0 +++ [pid 881] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=881, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./134/binderfs") = 0 umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./134/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./134/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./134") = 0 mkdir("./135", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 885 ./strace-static-x86_64: Process 885 attached [pid 885] set_robust_list(0x555556b826a0, 24) = 0 [pid 885] chdir("./135") = 0 [pid 885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 885] setpgid(0, 0) = 0 [pid 885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 885] write(3, "1000", 4) = 4 [pid 885] close(3) = 0 [pid 885] symlink("/dev/binderfs", "./binderfs") = 0 [pid 885] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 885] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 885] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 885] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 886 attached [pid 886] set_robust_list(0x7f96301a99a0, 24 [pid 885] <... clone3 resumed> => {parent_tid=[886]}, 88) = 886 [pid 886] <... set_robust_list resumed>) = 0 [pid 885] rt_sigprocmask(SIG_SETMASK, [], [pid 886] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 886] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 885] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 885] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 886] <... futex resumed>) = 0 [pid 885] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 886] memfd_create("syzkaller", 0) = 3 [pid 886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 886] munmap(0x7f9627d89000, 262144) = 0 [pid 886] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 886] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 886] close(3) = 0 [pid 886] mkdir("./file0", 0777) = 0 [pid 886] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 886] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 886] chdir("./file0") = 0 [pid 886] ioctl(4, LOOP_CLR_FD) = 0 [pid 886] close(4) = 0 [pid 886] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 886] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 885] <... futex resumed>) = 0 [pid 885] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 885] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 886] <... futex resumed>) = 0 [pid 886] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 886] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 885] <... futex resumed>) = 0 [pid 885] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 886] <... futex resumed>) = 1 [pid 886] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 886] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 885] <... futex resumed>) = 0 [pid 885] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 886] <... futex resumed>) = 1 [pid 886] creat("./bus", 000) = 6 [pid 886] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 885] <... futex resumed>) = 0 [pid 886] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 885] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 886] <... writev resumed>) = 1 [pid 886] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 885] <... futex resumed>) = 0 [pid 886] open("./bus", O_RDONLY [pid 885] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 886] <... open resumed>) = 7 [pid 886] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 885] <... futex resumed>) = 0 [pid 886] sendfile(6, 7, NULL, 140737974943952 [pid 885] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 61.319960][ T886] loop0: detected capacity change from 0 to 512 [ 61.328281][ T886] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 61.341333][ T886] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 885] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 885] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 885] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 885] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 888 attached => {parent_tid=[888]}, 88) = 888 [pid 888] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 888] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 888] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 885] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 885] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 888] <... futex resumed>) = 0 [pid 888] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 885] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 888] <... mmap resumed>) = 0x20000000 [pid 888] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 888] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 885] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 888] <... futex resumed>) = 0 [pid 885] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 888] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 888] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 885] <... futex resumed>) = 0 [pid 888] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 885] exit_group(0 [pid 888] <... futex resumed>) = ? [pid 885] <... exit_group resumed>) = ? [pid 888] +++ exited with 0 +++ [pid 886] <... sendfile resumed>) = ? [pid 886] +++ exited with 0 +++ [pid 885] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=885, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./135/binderfs") = 0 umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./135/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./135/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./135") = 0 mkdir("./136", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 889 ./strace-static-x86_64: Process 889 attached [pid 889] set_robust_list(0x555556b826a0, 24) = 0 [pid 889] chdir("./136") = 0 [pid 889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 889] setpgid(0, 0) = 0 [pid 889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 889] write(3, "1000", 4) = 4 [pid 889] close(3) = 0 [pid 889] symlink("/dev/binderfs", "./binderfs") = 0 [pid 889] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 889] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 889] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 889] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 889] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 889] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[890]}, 88) = 890 [pid 889] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 889] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 890 attached [pid 890] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 890] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 890] memfd_create("syzkaller", 0) = 3 [pid 890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 890] munmap(0x7f9627d89000, 262144) = 0 [pid 890] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 890] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 890] close(3) = 0 [pid 890] mkdir("./file0", 0777) = 0 [pid 890] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 890] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 890] chdir("./file0") = 0 [pid 890] ioctl(4, LOOP_CLR_FD) = 0 [pid 890] close(4) = 0 [pid 890] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 889] <... futex resumed>) = 0 [pid 889] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 890] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 890] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... futex resumed>) = 0 [pid 890] <... futex resumed>) = 1 [pid 889] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 890] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 890] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 889] <... futex resumed>) = 0 [pid 889] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 890] creat("./bus", 000) = 6 [pid 890] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 889] <... futex resumed>) = 0 [pid 889] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 890] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 890] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... futex resumed>) = 0 [pid 889] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 890] <... futex resumed>) = 1 [pid 890] open("./bus", O_RDONLY) = 7 [pid 890] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... futex resumed>) = 0 [pid 889] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 890] <... futex resumed>) = 1 [ 61.585731][ T890] loop0: detected capacity change from 0 to 512 [ 61.594769][ T890] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 61.607907][ T890] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 890] sendfile(6, 7, NULL, 140737974943952 [pid 889] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 889] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 889] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 889] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 889] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[892]}, 88) = 892 [pid 889] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 889] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 889] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 892 attached [pid 892] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 892] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 892] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 892] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 889] <... futex resumed>) = 0 [pid 889] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 892] sendmsg(-1, 0x20000000, 0 [pid 889] <... futex resumed>) = 0 [pid 892] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 889] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 892] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 889] <... futex resumed>) = 0 [pid 892] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 889] exit_group(0 [pid 892] <... futex resumed>) = ? [pid 889] <... exit_group resumed>) = ? [pid 892] +++ exited with 0 +++ [pid 890] <... sendfile resumed>) = ? [pid 890] +++ exited with 0 +++ [pid 889] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=889, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./136/binderfs") = 0 umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./136/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./136/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./136") = 0 mkdir("./137", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 894 ./strace-static-x86_64: Process 894 attached [pid 894] set_robust_list(0x555556b826a0, 24) = 0 [pid 894] chdir("./137") = 0 [pid 894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 894] setpgid(0, 0) = 0 [pid 894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 894] write(3, "1000", 4) = 4 [pid 894] close(3) = 0 [pid 894] symlink("/dev/binderfs", "./binderfs") = 0 [pid 894] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 894] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 894] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 894] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 894] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 894] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[895]}, 88) = 895 [pid 894] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 894] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 894] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 895 attached [pid 895] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 895] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 895] memfd_create("syzkaller", 0) = 3 [pid 895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 895] munmap(0x7f9627d89000, 262144) = 0 [pid 895] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 895] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 895] close(3) = 0 [pid 895] mkdir("./file0", 0777) = 0 [pid 895] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 895] chdir("./file0") = 0 [pid 895] ioctl(4, LOOP_CLR_FD) = 0 [pid 895] close(4) = 0 [pid 895] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... futex resumed>) = 0 [pid 894] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 894] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 895] <... futex resumed>) = 1 [pid 895] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 895] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... futex resumed>) = 0 [pid 894] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 894] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 895] <... futex resumed>) = 1 [pid 895] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 895] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... futex resumed>) = 0 [pid 894] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 894] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 895] <... futex resumed>) = 1 [pid 895] creat("./bus", 000) = 6 [pid 895] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... futex resumed>) = 0 [pid 894] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 894] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 895] <... futex resumed>) = 1 [pid 895] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 895] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 894] <... futex resumed>) = 0 [pid 895] open("./bus", O_RDONLY [pid 894] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 894] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 895] <... open resumed>) = 7 [pid 895] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 894] <... futex resumed>) = 0 [pid 895] sendfile(6, 7, NULL, 140737974943952 [pid 894] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 61.870174][ T895] loop0: detected capacity change from 0 to 512 [ 61.878898][ T895] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 61.892118][ T895] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 894] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 894] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 894] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 894] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 894] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 894] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 894] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 897 attached => {parent_tid=[897]}, 88) = 897 [pid 897] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 897] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 897] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 894] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 894] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 897] <... futex resumed>) = 0 [pid 897] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 894] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 897] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... futex resumed>) = 0 [pid 894] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 894] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 897] <... futex resumed>) = 1 [pid 897] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 897] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... futex resumed>) = 0 [pid 897] <... futex resumed>) = 1 [pid 897] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 894] exit_group(0 [pid 897] <... futex resumed>) = ? [pid 894] <... exit_group resumed>) = ? [pid 897] +++ exited with 0 +++ [pid 895] <... sendfile resumed>) = ? [pid 895] +++ exited with 0 +++ [pid 894] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=894, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./137/binderfs") = 0 umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./137/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./137/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./137") = 0 mkdir("./138", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 898 ./strace-static-x86_64: Process 898 attached [pid 898] set_robust_list(0x555556b826a0, 24) = 0 [pid 898] chdir("./138") = 0 [pid 898] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 898] setpgid(0, 0) = 0 [pid 898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 898] write(3, "1000", 4) = 4 [pid 898] close(3) = 0 [pid 898] symlink("/dev/binderfs", "./binderfs") = 0 [pid 898] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 898] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 898] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 898] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 898] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 898] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 898] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[899]}, 88) = 899 [pid 898] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 898] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 898] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 899 attached [pid 899] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 899] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 899] memfd_create("syzkaller", 0) = 3 [pid 899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 899] munmap(0x7f9627d89000, 262144) = 0 [pid 899] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 899] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 899] close(3) = 0 [pid 899] mkdir("./file0", 0777) = 0 [pid 899] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 899] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 899] chdir("./file0") = 0 [pid 899] ioctl(4, LOOP_CLR_FD) = 0 [pid 899] close(4) = 0 [pid 899] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 898] <... futex resumed>) = 0 [pid 898] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 898] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 899] <... futex resumed>) = 1 [pid 899] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 899] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 898] <... futex resumed>) = 0 [pid 898] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 898] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 899] <... futex resumed>) = 1 [pid 899] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 899] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 898] <... futex resumed>) = 0 [pid 898] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 898] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 899] <... futex resumed>) = 1 [pid 899] creat("./bus", 000) = 6 [pid 899] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 898] <... futex resumed>) = 0 [pid 898] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 898] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 899] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 899] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 898] <... futex resumed>) = 0 [pid 898] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 898] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 899] <... futex resumed>) = 1 [pid 899] open("./bus", O_RDONLY) = 7 [pid 899] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 898] <... futex resumed>) = 0 [pid 898] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 898] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 899] <... futex resumed>) = 1 [ 62.161025][ T899] loop0: detected capacity change from 0 to 512 [ 62.168964][ T899] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 62.182389][ T899] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 899] sendfile(6, 7, NULL, 140737974943952 [pid 898] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 898] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 898] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 898] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 898] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 898] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 898] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 901 attached [pid 901] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 901] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 898] <... clone3 resumed> => {parent_tid=[901]}, 88) = 901 [pid 901] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 898] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 898] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 898] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 901] <... futex resumed>) = 0 [pid 901] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 901] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 898] <... futex resumed>) = 0 [pid 898] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 898] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 901] <... futex resumed>) = 1 [pid 901] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 901] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 898] <... futex resumed>) = 0 [pid 901] <... futex resumed>) = 1 [pid 901] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 898] exit_group(0 [pid 901] <... futex resumed>) = ? [pid 898] <... exit_group resumed>) = ? [pid 899] <... sendfile resumed>) = ? [pid 901] +++ exited with 0 +++ [pid 899] +++ exited with 0 +++ [pid 898] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=898, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./138/binderfs") = 0 umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./138/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./138/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./138") = 0 mkdir("./139", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 902 ./strace-static-x86_64: Process 902 attached [pid 902] set_robust_list(0x555556b826a0, 24) = 0 [pid 902] chdir("./139") = 0 [pid 902] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 902] setpgid(0, 0) = 0 [pid 902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 902] write(3, "1000", 4) = 4 [pid 902] close(3) = 0 [pid 902] symlink("/dev/binderfs", "./binderfs") = 0 [pid 902] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 902] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 902] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 902] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 902] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 902] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 902] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[903]}, 88) = 903 [pid 902] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 902] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 903 attached [pid 903] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 903] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 903] memfd_create("syzkaller", 0) = 3 [pid 903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 903] munmap(0x7f9627d89000, 262144) = 0 [pid 903] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 903] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 903] close(3) = 0 [pid 903] mkdir("./file0", 0777) = 0 [pid 903] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 903] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 903] chdir("./file0") = 0 [pid 903] ioctl(4, LOOP_CLR_FD) = 0 [pid 903] close(4) = 0 [pid 903] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 903] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] <... futex resumed>) = 0 [pid 902] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 903] <... futex resumed>) = 0 [pid 903] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 903] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 902] <... futex resumed>) = 0 [pid 902] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 903] <... futex resumed>) = 1 [pid 903] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 903] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 902] <... futex resumed>) = 0 [pid 903] creat("./bus", 000 [pid 902] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 903] <... creat resumed>) = 6 [pid 902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 903] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 902] <... futex resumed>) = 0 [pid 903] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 902] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 903] <... writev resumed>) = 1 [pid 903] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 903] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 902] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 903] <... futex resumed>) = 0 [pid 903] open("./bus", O_RDONLY) = 7 [pid 903] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 902] <... futex resumed>) = 0 [pid 902] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 903] <... futex resumed>) = 1 [ 62.421478][ T903] loop0: detected capacity change from 0 to 512 [ 62.429413][ T903] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 62.442488][ T903] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 903] sendfile(6, 7, NULL, 140737974943952 [pid 902] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 902] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 902] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 902] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 902] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 902] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 905 attached => {parent_tid=[905]}, 88) = 905 [pid 902] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 902] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 902] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 905] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 905] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 905] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 905] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 902] <... futex resumed>) = 0 [pid 902] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 902] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 905] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 905] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 902] <... futex resumed>) = 0 [pid 905] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] exit_group(0 [pid 905] <... futex resumed>) = ? [pid 902] <... exit_group resumed>) = ? [pid 905] +++ exited with 0 +++ [pid 903] <... sendfile resumed>) = ? [pid 903] +++ exited with 0 +++ [pid 902] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=902, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./139/binderfs") = 0 umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./139/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./139/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./139") = 0 mkdir("./140", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 907 ./strace-static-x86_64: Process 907 attached [pid 907] set_robust_list(0x555556b826a0, 24) = 0 [pid 907] chdir("./140") = 0 [pid 907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 907] setpgid(0, 0) = 0 [pid 907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 907] write(3, "1000", 4) = 4 [pid 907] close(3) = 0 [pid 907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 907] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 907] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 907] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 907] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 907] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 907] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[908]}, 88) = 908 [pid 907] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 907] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 907] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 908 attached [pid 908] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 908] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 908] memfd_create("syzkaller", 0) = 3 [pid 908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 908] munmap(0x7f9627d89000, 262144) = 0 [pid 908] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 908] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 908] close(3) = 0 [pid 908] mkdir("./file0", 0777) = 0 [pid 908] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 908] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 908] chdir("./file0") = 0 [pid 908] ioctl(4, LOOP_CLR_FD) = 0 [pid 908] close(4) = 0 [pid 908] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 907] <... futex resumed>) = 0 [pid 907] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 907] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 908] <... futex resumed>) = 1 [pid 908] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 908] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 907] <... futex resumed>) = 0 [pid 907] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 908] <... futex resumed>) = 1 [pid 907] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 908] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 908] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 907] <... futex resumed>) = 0 [pid 907] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 908] creat("./bus", 000) = 6 [pid 908] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 908] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 907] <... futex resumed>) = 0 [pid 907] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 907] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 907] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 908] <... futex resumed>) = 0 [pid 908] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 908] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 907] <... futex resumed>) = 0 [pid 908] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 907] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 907] <... futex resumed>) = 0 [pid 908] open("./bus", O_RDONLY [pid 907] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 908] <... open resumed>) = 7 [pid 908] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 907] <... futex resumed>) = 0 [pid 908] sendfile(6, 7, NULL, 140737974943952 [pid 907] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 62.707725][ T908] loop0: detected capacity change from 0 to 512 [ 62.716061][ T908] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 62.729322][ T908] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 907] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 907] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 907] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 907] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 907] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 907] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[910]}, 88) = 910 [pid 907] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 907] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 907] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 910 attached [pid 910] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 910] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 910] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 910] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 907] <... futex resumed>) = 0 [pid 907] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 907] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 910] <... futex resumed>) = 1 [pid 910] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 910] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 907] <... futex resumed>) = 0 [pid 910] <... futex resumed>) = 1 [pid 910] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 907] exit_group(0) = ? [pid 910] <... futex resumed>) = ? [pid 910] +++ exited with 0 +++ [pid 908] <... sendfile resumed>) = ? [pid 908] +++ exited with 0 +++ [pid 907] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=907, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./140/binderfs") = 0 umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./140/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./140/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./140") = 0 mkdir("./141", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 911 ./strace-static-x86_64: Process 911 attached [pid 911] set_robust_list(0x555556b826a0, 24) = 0 [pid 911] chdir("./141") = 0 [pid 911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 911] setpgid(0, 0) = 0 [pid 911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 911] write(3, "1000", 4) = 4 [pid 911] close(3) = 0 [pid 911] symlink("/dev/binderfs", "./binderfs") = 0 [pid 911] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 911] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 911] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 911] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 911] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[912]}, 88) = 912 [pid 911] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 911] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 911] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 912 attached [pid 912] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 912] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 912] memfd_create("syzkaller", 0) = 3 [pid 912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 912] munmap(0x7f9627d89000, 262144) = 0 [pid 912] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 912] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 912] close(3) = 0 [pid 912] mkdir("./file0", 0777) = 0 [pid 912] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 912] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 912] chdir("./file0") = 0 [pid 912] ioctl(4, LOOP_CLR_FD) = 0 [pid 912] close(4) = 0 [pid 912] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 911] <... futex resumed>) = 0 [pid 911] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 911] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 912] <... futex resumed>) = 1 [pid 912] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 912] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 911] <... futex resumed>) = 0 [pid 911] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 911] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 912] <... futex resumed>) = 1 [pid 912] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 912] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 911] <... futex resumed>) = 0 [pid 911] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 911] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 912] <... futex resumed>) = 1 [pid 912] creat("./bus", 000) = 6 [pid 912] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 911] <... futex resumed>) = 0 [pid 911] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 911] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 912] <... futex resumed>) = 1 [pid 912] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 912] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 911] <... futex resumed>) = 0 [pid 911] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 911] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 912] <... futex resumed>) = 1 [pid 912] open("./bus", O_RDONLY) = 7 [pid 912] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 911] <... futex resumed>) = 0 [pid 911] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 911] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 912] <... futex resumed>) = 1 [ 62.971811][ T912] loop0: detected capacity change from 0 to 512 [ 62.979696][ T912] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 62.993009][ T912] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 63.003778][ T912] EXT4-fs mount: 36 callbacks suppressed [ 63.003788][ T912] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 912] sendfile(6, 7, NULL, 140737974943952 [pid 911] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 911] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 911] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 911] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[914]}, 88) = 914 [pid 911] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 911] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 911] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 914 attached [pid 914] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 914] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 914] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 914] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 911] <... futex resumed>) = 0 [pid 911] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 911] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 914] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 914] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 911] <... futex resumed>) = 0 [pid 914] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 911] exit_group(0 [pid 914] <... futex resumed>) = ? [pid 911] <... exit_group resumed>) = ? [pid 912] <... sendfile resumed>) = ? [pid 912] +++ exited with 0 +++ [pid 914] +++ exited with 0 +++ [pid 911] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=911, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./141/binderfs") = 0 umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./141/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./141/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./141") = 0 mkdir("./142", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 915 ./strace-static-x86_64: Process 915 attached [pid 915] set_robust_list(0x555556b826a0, 24) = 0 [pid 915] chdir("./142") = 0 [pid 915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 915] setpgid(0, 0) = 0 [pid 915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 915] write(3, "1000", 4) = 4 [pid 915] close(3) = 0 [pid 915] symlink("/dev/binderfs", "./binderfs") = 0 [pid 915] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 915] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 915] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 915] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 915] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 915] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 915] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[916]}, 88) = 916 [pid 915] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 915] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 916 attached [pid 916] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 916] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 916] memfd_create("syzkaller", 0) = 3 [pid 916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 916] munmap(0x7f9627d89000, 262144) = 0 [pid 916] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 916] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 916] close(3) = 0 [pid 916] mkdir("./file0", 0777) = 0 [pid 916] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 916] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 916] chdir("./file0") = 0 [pid 916] ioctl(4, LOOP_CLR_FD) = 0 [pid 916] close(4) = 0 [pid 916] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] <... futex resumed>) = 0 [pid 915] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 916] <... futex resumed>) = 1 [pid 916] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 916] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] <... futex resumed>) = 0 [pid 915] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 916] <... futex resumed>) = 1 [pid 916] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 916] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] <... futex resumed>) = 0 [pid 915] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 916] <... futex resumed>) = 1 [pid 916] creat("./bus", 000) = 6 [pid 916] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] <... futex resumed>) = 0 [pid 915] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 916] <... futex resumed>) = 1 [pid 916] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 916] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] <... futex resumed>) = 0 [pid 915] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 916] <... futex resumed>) = 1 [pid 916] open("./bus", O_RDONLY) = 7 [pid 916] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] <... futex resumed>) = 0 [pid 915] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 916] <... futex resumed>) = 1 [ 63.265762][ T916] loop0: detected capacity change from 0 to 512 [ 63.277590][ T916] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 63.291476][ T916] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 63.301273][ T916] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 916] sendfile(6, 7, NULL, 140737974943952 [pid 915] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 915] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 915] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 915] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 915] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 915] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 918 attached => {parent_tid=[918]}, 88) = 918 [pid 918] set_robust_list(0x7f9627dc89a0, 24 [pid 915] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 915] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 915] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 918] <... set_robust_list resumed>) = 0 [pid 918] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 918] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 918] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 915] <... futex resumed>) = 0 [pid 915] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 915] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 918] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 918] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 915] <... futex resumed>) = 0 [pid 918] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 915] exit_group(0 [pid 918] <... futex resumed>) = ? [pid 915] <... exit_group resumed>) = ? [pid 918] +++ exited with 0 +++ [pid 916] <... sendfile resumed>) = ? [pid 916] +++ exited with 0 +++ [pid 915] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=915, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./142/binderfs") = 0 umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./142/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./142/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./142") = 0 mkdir("./143", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 919 ./strace-static-x86_64: Process 919 attached [pid 919] set_robust_list(0x555556b826a0, 24) = 0 [pid 919] chdir("./143") = 0 [pid 919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 919] setpgid(0, 0) = 0 [pid 919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 919] write(3, "1000", 4) = 4 [pid 919] close(3) = 0 [pid 919] symlink("/dev/binderfs", "./binderfs") = 0 [pid 919] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 919] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 919] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 919] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 919] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 919] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 919] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[920]}, 88) = 920 [pid 919] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 919] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 920 attached [pid 920] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 920] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 920] memfd_create("syzkaller", 0) = 3 [pid 920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 920] munmap(0x7f9627d89000, 262144) = 0 [pid 920] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 920] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 920] close(3) = 0 [pid 920] mkdir("./file0", 0777) = 0 [pid 920] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 920] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 920] chdir("./file0") = 0 [pid 920] ioctl(4, LOOP_CLR_FD) = 0 [pid 920] close(4) = 0 [pid 920] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 919] <... futex resumed>) = 0 [pid 919] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 920] <... futex resumed>) = 1 [pid 920] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 920] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 919] <... futex resumed>) = 0 [pid 919] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 920] <... futex resumed>) = 1 [pid 920] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 920] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 919] <... futex resumed>) = 0 [pid 919] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 920] <... futex resumed>) = 1 [pid 920] creat("./bus", 000) = 6 [pid 920] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 919] <... futex resumed>) = 0 [pid 919] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 920] <... futex resumed>) = 1 [pid 920] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 920] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 919] <... futex resumed>) = 0 [pid 919] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 920] <... futex resumed>) = 1 [pid 920] open("./bus", O_RDONLY) = 7 [pid 920] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 919] <... futex resumed>) = 0 [pid 919] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 920] <... futex resumed>) = 1 [ 63.577617][ T920] loop0: detected capacity change from 0 to 512 [ 63.586586][ T920] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 63.600482][ T920] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 63.610420][ T920] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 920] sendfile(6, 7, NULL, 140737974943952 [pid 919] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 919] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 919] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 919] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 919] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 919] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 922 attached => {parent_tid=[922]}, 88) = 922 [pid 922] set_robust_list(0x7f9627dc89a0, 24 [pid 919] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 919] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 919] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 922] <... set_robust_list resumed>) = 0 [pid 922] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 922] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 922] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 919] <... futex resumed>) = 0 [pid 919] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 919] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 922] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 922] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 919] <... futex resumed>) = 0 [pid 922] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 919] exit_group(0) = ? [pid 922] <... futex resumed>) = 231 [pid 922] +++ exited with 0 +++ [pid 920] <... sendfile resumed>) = ? [pid 920] +++ exited with 0 +++ [pid 919] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=919, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./143/binderfs") = 0 umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./143/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./143/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./143") = 0 mkdir("./144", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 924 ./strace-static-x86_64: Process 924 attached [pid 924] set_robust_list(0x555556b826a0, 24) = 0 [pid 924] chdir("./144") = 0 [pid 924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 924] setpgid(0, 0) = 0 [pid 924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 924] write(3, "1000", 4) = 4 [pid 924] close(3) = 0 [pid 924] symlink("/dev/binderfs", "./binderfs") = 0 [pid 924] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 924] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 924] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 924] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 924] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 924] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 925 attached => {parent_tid=[925]}, 88) = 925 [pid 924] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 924] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 924] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 925] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 925] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 925] memfd_create("syzkaller", 0) = 3 [pid 925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 925] munmap(0x7f9627d89000, 262144) = 0 [pid 925] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 925] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 925] close(3) = 0 [pid 925] mkdir("./file0", 0777) = 0 [pid 925] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 925] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 925] chdir("./file0") = 0 [pid 925] ioctl(4, LOOP_CLR_FD) = 0 [pid 925] close(4) = 0 [pid 925] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 924] <... futex resumed>) = 0 [pid 924] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 924] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 925] <... futex resumed>) = 1 [pid 925] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 925] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 924] <... futex resumed>) = 0 [pid 924] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 924] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 925] <... futex resumed>) = 1 [pid 925] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 925] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 924] <... futex resumed>) = 0 [pid 924] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 924] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 925] <... futex resumed>) = 1 [pid 925] creat("./bus", 000) = 6 [pid 925] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 924] <... futex resumed>) = 0 [pid 924] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 924] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 925] <... futex resumed>) = 1 [pid 925] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 925] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 924] <... futex resumed>) = 0 [pid 925] open("./bus", O_RDONLY [pid 924] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 925] <... open resumed>) = 7 [pid 924] <... futex resumed>) = 0 [pid 925] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 924] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 925] <... futex resumed>) = 0 [pid 924] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 925] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 924] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 924] <... futex resumed>) = 0 [pid 925] sendfile(6, 7, NULL, 140737974943952 [ 63.854351][ T925] loop0: detected capacity change from 0 to 512 [ 63.864681][ T925] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 63.877750][ T925] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 63.893919][ T925] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 924] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 924] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 924] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 924] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 924] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 927 attached => {parent_tid=[927]}, 88) = 927 [pid 927] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 927] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 927] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 924] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 924] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 927] <... futex resumed>) = 0 [pid 924] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 927] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 927] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 924] <... futex resumed>) = 0 [pid 924] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 927] sendmsg(-1, 0x20000000, 0 [pid 924] <... futex resumed>) = 0 [pid 924] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 927] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 927] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 924] <... futex resumed>) = 0 [pid 927] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 924] exit_group(0 [pid 927] <... futex resumed>) = ? [pid 924] <... exit_group resumed>) = ? [pid 927] +++ exited with 0 +++ [pid 925] <... sendfile resumed>) = ? [pid 925] +++ exited with 0 +++ [pid 924] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=924, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./144/binderfs") = 0 umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./144/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./144/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./144") = 0 mkdir("./145", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 928 ./strace-static-x86_64: Process 928 attached [pid 928] set_robust_list(0x555556b826a0, 24) = 0 [pid 928] chdir("./145") = 0 [pid 928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 928] setpgid(0, 0) = 0 [pid 928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 928] write(3, "1000", 4) = 4 [pid 928] close(3) = 0 [pid 928] symlink("/dev/binderfs", "./binderfs") = 0 [pid 928] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 928] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 928] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 928] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 928] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[929]}, 88) = 929 [pid 928] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 928] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 929 attached [pid 929] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 929] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 929] memfd_create("syzkaller", 0) = 3 [pid 929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 929] munmap(0x7f9627d89000, 262144) = 0 [pid 929] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 929] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 929] close(3) = 0 [pid 929] mkdir("./file0", 0777) = 0 [pid 929] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 929] chdir("./file0") = 0 [pid 929] ioctl(4, LOOP_CLR_FD) = 0 [pid 929] close(4) = 0 [pid 929] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 929] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 928] <... futex resumed>) = 0 [pid 928] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 929] <... futex resumed>) = 0 [pid 929] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 929] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... futex resumed>) = 0 [pid 928] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 929] <... futex resumed>) = 1 [pid 929] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 929] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... futex resumed>) = 0 [pid 928] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 929] <... futex resumed>) = 1 [pid 929] creat("./bus", 000) = 6 [pid 929] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... futex resumed>) = 0 [pid 928] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 929] <... futex resumed>) = 1 [pid 929] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 929] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... futex resumed>) = 0 [pid 928] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 929] <... futex resumed>) = 1 [pid 929] open("./bus", O_RDONLY) = 7 [pid 929] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... futex resumed>) = 0 [pid 928] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 929] <... futex resumed>) = 1 [ 64.142639][ T929] loop0: detected capacity change from 0 to 512 [ 64.150637][ T929] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 64.164366][ T929] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 64.177588][ T929] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 929] sendfile(6, 7, NULL, 140737974943952 [pid 928] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 928] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 928] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 928] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 928] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[931]}, 88) = 931 [pid 928] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 928] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 931 attached [pid 931] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 931] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 931] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 931] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... futex resumed>) = 0 [pid 928] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 931] <... futex resumed>) = 1 [pid 931] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 931] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... futex resumed>) = 0 [pid 931] <... futex resumed>) = 1 [pid 931] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 928] exit_group(0 [pid 931] <... futex resumed>) = 231 [pid 928] <... exit_group resumed>) = ? [pid 929] <... sendfile resumed>) = ? [pid 929] +++ exited with 0 +++ [pid 931] +++ exited with 0 +++ [pid 928] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=928, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./145/binderfs") = 0 umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./145/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./145/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./145") = 0 mkdir("./146", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 932 ./strace-static-x86_64: Process 932 attached [pid 932] set_robust_list(0x555556b826a0, 24) = 0 [pid 932] chdir("./146") = 0 [pid 932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 932] setpgid(0, 0) = 0 [pid 932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 932] write(3, "1000", 4) = 4 [pid 932] close(3) = 0 [pid 932] symlink("/dev/binderfs", "./binderfs") = 0 [pid 932] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 932] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 932] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 932] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 932] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[933]}, 88) = 933 [pid 932] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 932] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 933 attached [pid 933] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 933] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 933] memfd_create("syzkaller", 0) = 3 [pid 933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 933] munmap(0x7f9627d89000, 262144) = 0 [pid 933] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 933] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 933] close(3) = 0 [pid 933] mkdir("./file0", 0777) = 0 [pid 933] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 933] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 933] chdir("./file0") = 0 [pid 933] ioctl(4, LOOP_CLR_FD) = 0 [pid 933] close(4) = 0 [pid 933] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = 0 [pid 932] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 933] <... futex resumed>) = 1 [pid 933] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 933] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = 0 [pid 932] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 933] <... futex resumed>) = 1 [pid 933] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 933] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = 0 [pid 932] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 933] <... futex resumed>) = 1 [pid 933] creat("./bus", 000) = 6 [pid 933] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = 0 [pid 932] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 933] <... futex resumed>) = 1 [pid 933] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 933] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = 0 [pid 932] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 933] <... futex resumed>) = 1 [pid 933] open("./bus", O_RDONLY) = 7 [pid 933] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = 0 [pid 932] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 933] <... futex resumed>) = 1 [ 64.418099][ T933] loop0: detected capacity change from 0 to 512 [ 64.426463][ T933] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 64.439695][ T933] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 64.450194][ T933] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 933] sendfile(6, 7, NULL, 140737974943952 [pid 932] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 932] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 932] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 932] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 932] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[935]}, 88) = 935 [pid 932] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 932] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 935 attached [pid 935] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 935] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 935] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 935] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = 0 [pid 932] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 935] <... futex resumed>) = 1 [pid 935] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 935] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = 0 [pid 935] <... futex resumed>) = 1 [pid 935] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 932] exit_group(0 [pid 935] <... futex resumed>) = ? [pid 932] <... exit_group resumed>) = ? [pid 935] +++ exited with 0 +++ [pid 933] <... sendfile resumed>) = ? [pid 933] +++ exited with 0 +++ [pid 932] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=932, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./146/binderfs") = 0 umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./146/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./146/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./146/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./146") = 0 mkdir("./147", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 937 ./strace-static-x86_64: Process 937 attached [pid 937] set_robust_list(0x555556b826a0, 24) = 0 [pid 937] chdir("./147") = 0 [pid 937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 937] setpgid(0, 0) = 0 [pid 937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 937] write(3, "1000", 4) = 4 [pid 937] close(3) = 0 [pid 937] symlink("/dev/binderfs", "./binderfs") = 0 [pid 937] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 937] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 937] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 937] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 937] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 937] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 937] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[938]}, 88) = 938 [pid 937] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 937] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 937] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 938 attached [pid 938] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 938] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 938] memfd_create("syzkaller", 0) = 3 [pid 938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 938] munmap(0x7f9627d89000, 262144) = 0 [pid 938] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 938] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 938] close(3) = 0 [pid 938] mkdir("./file0", 0777) = 0 [pid 938] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 938] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 938] chdir("./file0") = 0 [pid 938] ioctl(4, LOOP_CLR_FD) = 0 [pid 938] close(4) = 0 [pid 938] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 937] <... futex resumed>) = 0 [pid 937] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 937] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 938] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 938] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 937] <... futex resumed>) = 0 [pid 937] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 937] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 938] <... futex resumed>) = 1 [pid 938] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 938] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 937] <... futex resumed>) = 0 [pid 937] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 937] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 938] <... futex resumed>) = 1 [pid 938] creat("./bus", 000) = 6 [pid 938] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 937] <... futex resumed>) = 0 [pid 937] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 937] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 938] <... futex resumed>) = 1 [pid 938] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 938] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 937] <... futex resumed>) = 0 [pid 937] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 937] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 938] <... futex resumed>) = 1 [pid 938] open("./bus", O_RDONLY) = 7 [pid 938] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 937] <... futex resumed>) = 0 [pid 937] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 938] sendfile(6, 7, NULL, 140737974943952 [pid 937] <... futex resumed>) = 0 [ 64.731018][ T938] loop0: detected capacity change from 0 to 512 [ 64.739113][ T938] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 64.752531][ T938] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 64.762509][ T938] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 937] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 937] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 937] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 937] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 937] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 937] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 937] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 937] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[940]}, 88) = 940 [pid 937] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 937] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 937] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 940 attached [pid 940] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 940] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 940] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 940] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 937] <... futex resumed>) = 0 [pid 937] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 937] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 940] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 940] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 937] <... futex resumed>) = 0 [pid 940] <... futex resumed>) = 1 [pid 940] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 937] exit_group(0 [pid 940] <... futex resumed>) = ? [pid 937] <... exit_group resumed>) = ? [pid 938] <... sendfile resumed>) = ? [pid 938] +++ exited with 0 +++ [pid 940] +++ exited with 0 +++ [pid 937] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=937, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./147/binderfs") = 0 umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./147/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./147/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./147/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./147") = 0 mkdir("./148", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 941 ./strace-static-x86_64: Process 941 attached [pid 941] set_robust_list(0x555556b826a0, 24) = 0 [pid 941] chdir("./148") = 0 [pid 941] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 941] setpgid(0, 0) = 0 [pid 941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 941] write(3, "1000", 4) = 4 [pid 941] close(3) = 0 [pid 941] symlink("/dev/binderfs", "./binderfs") = 0 [pid 941] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 941] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 941] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 941] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 941] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[942]}, 88) = 942 [pid 941] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 941] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 942 attached [pid 942] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 942] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 942] memfd_create("syzkaller", 0) = 3 [pid 942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 942] munmap(0x7f9627d89000, 262144) = 0 [pid 942] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 942] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 942] close(3) = 0 [pid 942] mkdir("./file0", 0777) = 0 [ 65.030973][ T942] loop0: detected capacity change from 0 to 512 [ 65.039088][ T942] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 65.059240][ T942] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 942] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 942] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 942] chdir("./file0") = 0 [pid 942] ioctl(4, LOOP_CLR_FD) = 0 [pid 942] close(4) = 0 [pid 942] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... futex resumed>) = 0 [pid 941] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 942] <... futex resumed>) = 1 [pid 942] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 942] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... futex resumed>) = 0 [pid 941] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 942] <... futex resumed>) = 1 [pid 942] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 942] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... futex resumed>) = 0 [pid 941] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 942] <... futex resumed>) = 1 [pid 942] creat("./bus", 000) = 6 [pid 942] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... futex resumed>) = 0 [pid 941] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 942] <... futex resumed>) = 1 [pid 942] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 942] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] <... futex resumed>) = 0 [pid 941] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 942] open("./bus", O_RDONLY) = 7 [pid 942] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] <... futex resumed>) = 0 [pid 941] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 65.071761][ T942] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 942] sendfile(6, 7, NULL, 140737974943952 [pid 941] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 941] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 941] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 941] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 941] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[944]}, 88) = 944 ./strace-static-x86_64: Process 944 attached [pid 941] rt_sigprocmask(SIG_SETMASK, [], [pid 944] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 944] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 944] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 941] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 941] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 944] <... futex resumed>) = 0 [pid 944] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 944] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... futex resumed>) = 0 [pid 941] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 944] <... futex resumed>) = 1 [pid 944] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 944] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... futex resumed>) = 0 [pid 944] <... futex resumed>) = 1 [pid 944] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 941] exit_group(0) = ? [pid 944] <... futex resumed>) = ? [pid 944] +++ exited with 0 +++ [pid 942] <... sendfile resumed>) = ? [pid 942] +++ exited with 0 +++ [pid 941] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=941, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./148/binderfs") = 0 umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./148/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./148/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./148/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./148") = 0 mkdir("./149", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 945 ./strace-static-x86_64: Process 945 attached [pid 945] set_robust_list(0x555556b826a0, 24) = 0 [pid 945] chdir("./149") = 0 [pid 945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 945] setpgid(0, 0) = 0 [pid 945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 945] write(3, "1000", 4) = 4 [pid 945] close(3) = 0 [pid 945] symlink("/dev/binderfs", "./binderfs") = 0 [pid 945] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 945] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 945] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 945] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 945] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[946]}, 88) = 946 [pid 945] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 945] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 946 attached [pid 946] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 946] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 946] memfd_create("syzkaller", 0) = 3 [pid 946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 946] munmap(0x7f9627d89000, 262144) = 0 [pid 946] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 946] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 946] close(3) = 0 [pid 946] mkdir("./file0", 0777) = 0 [pid 946] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 946] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 946] chdir("./file0") = 0 [pid 946] ioctl(4, LOOP_CLR_FD) = 0 [pid 946] close(4) = 0 [pid 946] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 945] <... futex resumed>) = 0 [pid 945] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 946] <... futex resumed>) = 1 [pid 946] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 946] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 946] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 945] <... futex resumed>) = 0 [pid 945] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 946] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 946] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 945] <... futex resumed>) = 0 [pid 945] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 946] creat("./bus", 000) = 6 [pid 946] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 945] <... futex resumed>) = 0 [pid 945] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 946] <... futex resumed>) = 1 [pid 946] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 946] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 945] <... futex resumed>) = 0 [pid 945] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 946] open("./bus", O_RDONLY) = 7 [pid 946] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 945] <... futex resumed>) = 0 [pid 945] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 946] sendfile(6, 7, NULL, 140737974943952 [ 65.323476][ T946] loop0: detected capacity change from 0 to 512 [ 65.331511][ T946] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 65.345515][ T946] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 65.355153][ T946] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 945] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 945] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 945] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 945] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 945] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[948]}, 88) = 948 [pid 945] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 945] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 948 attached [pid 948] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 948] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 948] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 948] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 945] <... futex resumed>) = 0 [pid 948] <... futex resumed>) = 1 [pid 945] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 948] sendmsg(-1, 0x20000000, 0 [pid 945] <... futex resumed>) = 0 [pid 948] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 948] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 948] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 945] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 945] exit_group(0) = ? [pid 948] <... futex resumed>) = ? [pid 948] +++ exited with 0 +++ [pid 946] <... sendfile resumed>) = ? [pid 946] +++ exited with 0 +++ [pid 945] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=945, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./149/binderfs") = 0 umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./149/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./149/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./149/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./149") = 0 mkdir("./150", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 949 attached , child_tidptr=0x555556b82690) = 949 [pid 949] set_robust_list(0x555556b826a0, 24) = 0 [pid 949] chdir("./150") = 0 [pid 949] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 949] setpgid(0, 0) = 0 [pid 949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 949] write(3, "1000", 4) = 4 [pid 949] close(3) = 0 [pid 949] symlink("/dev/binderfs", "./binderfs") = 0 [pid 949] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 949] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 949] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 949] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 949] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 950 attached => {parent_tid=[950]}, 88) = 950 [pid 950] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 950] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 950] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 949] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 949] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 950] <... futex resumed>) = 0 [pid 949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 950] memfd_create("syzkaller", 0) = 3 [pid 950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 950] munmap(0x7f9627d89000, 262144) = 0 [pid 950] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 950] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 950] close(3) = 0 [pid 950] mkdir("./file0", 0777) = 0 [pid 950] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 950] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 950] chdir("./file0") = 0 [pid 950] ioctl(4, LOOP_CLR_FD) = 0 [pid 950] close(4) = 0 [pid 950] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 950] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 949] <... futex resumed>) = 0 [pid 949] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 950] <... futex resumed>) = 0 [pid 950] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 950] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 949] <... futex resumed>) = 0 [pid 949] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 950] <... futex resumed>) = 1 [pid 950] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 950] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 949] <... futex resumed>) = 0 [pid 950] <... futex resumed>) = 1 [pid 950] creat("./bus", 000 [pid 949] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 950] <... creat resumed>) = 6 [pid 950] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 949] <... futex resumed>) = 0 [pid 949] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 950] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 950] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 949] <... futex resumed>) = 0 [pid 949] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 950] <... futex resumed>) = 1 [pid 950] open("./bus", O_RDONLY) = 7 [pid 950] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 949] <... futex resumed>) = 0 [pid 949] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 950] <... futex resumed>) = 1 [ 65.655645][ T950] loop0: detected capacity change from 0 to 512 [ 65.666657][ T950] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 65.684708][ T950] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 65.694921][ T950] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 950] sendfile(6, 7, NULL, 140737974943952 [pid 949] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 949] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 949] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 949] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 949] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[953]}, 88) = 953 [pid 949] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 949] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 953 attached [pid 953] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 953] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 953] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 953] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 949] <... futex resumed>) = 0 [pid 949] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 953] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 953] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 949] <... futex resumed>) = 0 [pid 953] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 949] exit_group(0 [pid 953] <... futex resumed>) = ? [pid 949] <... exit_group resumed>) = ? [pid 950] <... sendfile resumed>) = ? [pid 950] +++ exited with 0 +++ [pid 953] +++ exited with 0 +++ [pid 949] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=949, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./150/binderfs") = 0 umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./150/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./150/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./150/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./150") = 0 mkdir("./151", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 954 ./strace-static-x86_64: Process 954 attached [pid 954] set_robust_list(0x555556b826a0, 24) = 0 [pid 954] chdir("./151") = 0 [pid 954] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 954] setpgid(0, 0) = 0 [pid 954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 954] write(3, "1000", 4) = 4 [pid 954] close(3) = 0 [pid 954] symlink("/dev/binderfs", "./binderfs") = 0 [pid 954] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 954] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 954] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 954] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 954] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 954] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 954] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 955 attached => {parent_tid=[955]}, 88) = 955 [pid 955] set_robust_list(0x7f96301a99a0, 24 [pid 954] rt_sigprocmask(SIG_SETMASK, [], [pid 955] <... set_robust_list resumed>) = 0 [pid 954] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 955] rt_sigprocmask(SIG_SETMASK, [], [pid 954] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 955] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 954] <... futex resumed>) = 0 [pid 955] memfd_create("syzkaller", 0 [pid 954] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 955] <... memfd_create resumed>) = 3 [pid 955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 955] munmap(0x7f9627d89000, 262144) = 0 [pid 955] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 955] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 955] close(3) = 0 [pid 955] mkdir("./file0", 0777) = 0 [ 66.011756][ T955] loop0: detected capacity change from 0 to 512 [ 66.019653][ T955] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 66.032894][ T955] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 955] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 955] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 955] chdir("./file0") = 0 [pid 955] ioctl(4, LOOP_CLR_FD) = 0 [pid 955] close(4) = 0 [pid 955] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 954] <... futex resumed>) = 0 [pid 954] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 954] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 955] <... futex resumed>) = 1 [pid 955] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 955] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 954] <... futex resumed>) = 0 [pid 954] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 954] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 955] <... futex resumed>) = 1 [pid 955] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 955] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 954] <... futex resumed>) = 0 [pid 954] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 954] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 955] <... futex resumed>) = 1 [pid 955] creat("./bus", 000) = 6 [pid 955] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 954] <... futex resumed>) = 0 [pid 954] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 954] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 955] <... futex resumed>) = 1 [pid 955] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 955] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 954] <... futex resumed>) = 0 [pid 954] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 954] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 955] <... futex resumed>) = 1 [pid 955] open("./bus", O_RDONLY) = 7 [pid 955] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 954] <... futex resumed>) = 0 [pid 954] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 954] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 955] <... futex resumed>) = 1 [ 66.053860][ T955] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 955] sendfile(6, 7, NULL, 140737974943952 [pid 954] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 954] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 954] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 954] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 954] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 954] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 954] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 954] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 954] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 957 attached => {parent_tid=[957]}, 88) = 957 [pid 954] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 954] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 954] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 957] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 957] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 957] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 957] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 954] <... futex resumed>) = 0 [pid 954] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 957] sendmsg(-1, 0x20000000, 0 [pid 954] <... futex resumed>) = 0 [pid 954] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 957] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 957] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 954] <... futex resumed>) = 0 [pid 957] <... futex resumed>) = 1 [pid 957] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 954] exit_group(0 [pid 957] <... futex resumed>) = ? [pid 954] <... exit_group resumed>) = ? [pid 957] +++ exited with 0 +++ [pid 955] <... sendfile resumed>) = ? [pid 955] +++ exited with 0 +++ [pid 954] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=954, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./151/binderfs") = 0 umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./151/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./151/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./151/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./151") = 0 mkdir("./152", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 958 ./strace-static-x86_64: Process 958 attached [pid 958] set_robust_list(0x555556b826a0, 24) = 0 [pid 958] chdir("./152") = 0 [pid 958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 958] setpgid(0, 0) = 0 [pid 958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 958] write(3, "1000", 4) = 4 [pid 958] close(3) = 0 [pid 958] symlink("/dev/binderfs", "./binderfs") = 0 [pid 958] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 958] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 958] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 958] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 958] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 958] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 959 attached => {parent_tid=[959]}, 88) = 959 [pid 958] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 958] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 959] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 959] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 959] memfd_create("syzkaller", 0) = 3 [pid 959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 959] munmap(0x7f9627d89000, 262144) = 0 [pid 959] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 959] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 959] close(3) = 0 [pid 959] mkdir("./file0", 0777) = 0 [ 66.374577][ T959] loop0: detected capacity change from 0 to 512 [ 66.394944][ T959] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 66.408068][ T959] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 959] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 959] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 959] chdir("./file0") = 0 [pid 959] ioctl(4, LOOP_CLR_FD) = 0 [pid 959] close(4) = 0 [pid 959] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 958] <... futex resumed>) = 0 [pid 958] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 959] <... futex resumed>) = 1 [pid 959] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 959] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 959] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 958] <... futex resumed>) = 0 [pid 958] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 959] <... futex resumed>) = 0 [pid 959] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 959] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 958] <... futex resumed>) = 0 [pid 958] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 959] <... futex resumed>) = 1 [pid 959] creat("./bus", 000) = 6 [pid 959] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 958] <... futex resumed>) = 0 [pid 958] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 959] <... futex resumed>) = 1 [pid 959] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 959] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 958] <... futex resumed>) = 0 [pid 958] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 959] <... futex resumed>) = 1 [pid 959] open("./bus", O_RDONLY) = 7 [pid 959] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 958] <... futex resumed>) = 0 [pid 958] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 959] <... futex resumed>) = 1 [ 66.417639][ T959] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 959] sendfile(6, 7, NULL, 140737974943952 [pid 958] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 958] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 958] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 958] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 958] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 961 attached => {parent_tid=[961]}, 88) = 961 [pid 958] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 958] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 958] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 961] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 961] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 961] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 961] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 958] <... futex resumed>) = 0 [pid 958] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 958] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 961] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 961] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 958] <... futex resumed>) = 0 [pid 961] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 958] exit_group(0) = ? [pid 961] <... futex resumed>) = ? [pid 961] +++ exited with 0 +++ [pid 959] <... sendfile resumed>) = ? [pid 959] +++ exited with 0 +++ [pid 958] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=958, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./152/binderfs") = 0 umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./152/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./152/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./152/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./152") = 0 mkdir("./153", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 962 ./strace-static-x86_64: Process 962 attached [pid 962] set_robust_list(0x555556b826a0, 24) = 0 [pid 962] chdir("./153") = 0 [pid 962] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 962] setpgid(0, 0) = 0 [pid 962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 962] write(3, "1000", 4) = 4 [pid 962] close(3) = 0 [pid 962] symlink("/dev/binderfs", "./binderfs") = 0 [pid 962] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 962] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 962] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 962] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 962] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[963]}, 88) = 963 [pid 962] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 962] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 963 attached [pid 963] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 963] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 963] memfd_create("syzkaller", 0) = 3 [pid 963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 963] munmap(0x7f9627d89000, 262144) = 0 [pid 963] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 963] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 963] close(3) = 0 [pid 963] mkdir("./file0", 0777) = 0 [pid 963] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 963] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 963] chdir("./file0") = 0 [pid 963] ioctl(4, LOOP_CLR_FD) = 0 [pid 963] close(4) = 0 [pid 963] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] <... futex resumed>) = 0 [pid 962] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 963] <... futex resumed>) = 1 [pid 963] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 963] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] <... futex resumed>) = 0 [pid 962] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 963] <... futex resumed>) = 1 [pid 963] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 963] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] <... futex resumed>) = 0 [pid 962] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 963] <... futex resumed>) = 1 [pid 963] creat("./bus", 000) = 6 [pid 963] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] <... futex resumed>) = 0 [pid 962] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 963] <... futex resumed>) = 1 [pid 963] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 963] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] <... futex resumed>) = 0 [pid 962] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 963] <... futex resumed>) = 1 [pid 963] open("./bus", O_RDONLY) = 7 [pid 963] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] <... futex resumed>) = 0 [pid 962] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 963] <... futex resumed>) = 1 [ 66.663626][ T963] loop0: detected capacity change from 0 to 512 [ 66.673843][ T963] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 66.688692][ T963] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 66.698519][ T963] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 963] sendfile(6, 7, NULL, 140737974943952 [pid 962] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 962] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 962] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 962] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 962] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[966]}, 88) = 966 [pid 962] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 962] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 966 attached [pid 966] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 966] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 966] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 966] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] <... futex resumed>) = 0 [pid 962] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 966] <... futex resumed>) = 1 [pid 966] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 966] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] <... futex resumed>) = 0 [pid 966] <... futex resumed>) = 1 [pid 966] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 962] exit_group(0 [pid 966] <... futex resumed>) = ? [pid 962] <... exit_group resumed>) = ? [pid 966] +++ exited with 0 +++ [pid 963] <... sendfile resumed>) = ? [pid 963] +++ exited with 0 +++ [pid 962] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=962, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./153/binderfs") = 0 umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./153/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./153/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./153/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./153") = 0 mkdir("./154", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 967 ./strace-static-x86_64: Process 967 attached [pid 967] set_robust_list(0x555556b826a0, 24) = 0 [pid 967] chdir("./154") = 0 [pid 967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 967] setpgid(0, 0) = 0 [pid 967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 967] write(3, "1000", 4) = 4 [pid 967] close(3) = 0 [pid 967] symlink("/dev/binderfs", "./binderfs") = 0 [pid 967] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 967] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 967] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 967] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 967] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 967] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[968]}, 88) = 968 [pid 967] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 967] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 968 attached [pid 968] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 968] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 968] memfd_create("syzkaller", 0) = 3 [pid 968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 968] munmap(0x7f9627d89000, 262144) = 0 [pid 968] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 968] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 968] close(3) = 0 [pid 968] mkdir("./file0", 0777) = 0 [pid 968] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 968] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 968] chdir("./file0") = 0 [pid 968] ioctl(4, LOOP_CLR_FD) = 0 [pid 968] close(4) = 0 [pid 968] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 967] <... futex resumed>) = 0 [pid 967] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 968] <... futex resumed>) = 1 [pid 968] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 968] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 967] <... futex resumed>) = 0 [pid 967] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 968] <... futex resumed>) = 1 [pid 968] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 968] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 967] <... futex resumed>) = 0 [pid 967] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 968] <... futex resumed>) = 1 [pid 968] creat("./bus", 000) = 6 [pid 968] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 967] <... futex resumed>) = 0 [pid 967] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 968] <... futex resumed>) = 1 [pid 968] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 968] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 967] <... futex resumed>) = 0 [pid 967] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 968] <... futex resumed>) = 1 [pid 968] open("./bus", O_RDONLY) = 7 [pid 968] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 967] <... futex resumed>) = 0 [pid 967] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 968] <... futex resumed>) = 1 [pid 967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 66.977857][ T968] loop0: detected capacity change from 0 to 512 [ 66.988223][ T968] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 67.001724][ T968] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 67.011605][ T968] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 968] sendfile(6, 7, NULL, 140737974943952 [pid 967] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 967] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 967] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 967] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 967] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 970 attached [pid 970] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 970] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 970] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 967] <... clone3 resumed> => {parent_tid=[970]}, 88) = 970 [pid 967] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 967] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 970] <... futex resumed>) = 0 [pid 967] <... futex resumed>) = 1 [pid 970] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 967] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 970] <... mmap resumed>) = 0x20000000 [pid 970] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 967] <... futex resumed>) = 0 [pid 970] sendmsg(-1, 0x20000000, 0 [pid 967] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 970] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 967] <... futex resumed>) = 0 [pid 970] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 967] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 970] <... futex resumed>) = 0 [pid 967] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 970] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 967] exit_group(0 [pid 970] <... futex resumed>) = ? [pid 967] <... exit_group resumed>) = ? [pid 970] +++ exited with 0 +++ [pid 968] <... sendfile resumed>) = ? [pid 968] +++ exited with 0 +++ [pid 967] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=967, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./154/binderfs") = 0 umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./154/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./154/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./154/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./154") = 0 mkdir("./155", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 971 ./strace-static-x86_64: Process 971 attached [pid 971] set_robust_list(0x555556b826a0, 24) = 0 [pid 971] chdir("./155") = 0 [pid 971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 971] setpgid(0, 0) = 0 [pid 971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 971] write(3, "1000", 4) = 4 [pid 971] close(3) = 0 [pid 971] symlink("/dev/binderfs", "./binderfs") = 0 [pid 971] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 971] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 971] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 971] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 971] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 971] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 971] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[972]}, 88) = 972 [pid 971] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 971] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 971] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 972 attached [pid 972] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 972] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 972] memfd_create("syzkaller", 0) = 3 [pid 972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 972] munmap(0x7f9627d89000, 262144) = 0 [pid 972] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 972] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 972] close(3) = 0 [pid 972] mkdir("./file0", 0777) = 0 [pid 972] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 972] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 972] chdir("./file0") = 0 [pid 972] ioctl(4, LOOP_CLR_FD) = 0 [pid 972] close(4) = 0 [pid 972] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 971] <... futex resumed>) = 0 [pid 971] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 971] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 972] <... futex resumed>) = 1 [pid 972] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 972] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 971] <... futex resumed>) = 0 [pid 971] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 971] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 972] <... futex resumed>) = 1 [pid 972] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 972] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 971] <... futex resumed>) = 0 [pid 972] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 971] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 972] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 972] creat("./bus", 000) = 6 [pid 972] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 972] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 971] <... futex resumed>) = 1 [pid 971] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 971] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 971] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 972] <... futex resumed>) = 0 [pid 972] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 972] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 971] <... futex resumed>) = 0 [pid 972] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 971] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 972] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 971] <... futex resumed>) = 0 [pid 972] open("./bus", O_RDONLY [pid 971] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 972] <... open resumed>) = 7 [pid 972] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 971] <... futex resumed>) = 0 [pid 972] sendfile(6, 7, NULL, 140737974943952 [pid 971] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 67.293721][ T972] loop0: detected capacity change from 0 to 512 [ 67.307340][ T972] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 67.321064][ T972] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 67.330764][ T972] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 971] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 971] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 971] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 971] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 971] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 971] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 971] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 971] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 971] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 974 attached => {parent_tid=[974]}, 88) = 974 [pid 974] set_robust_list(0x7f9627dc89a0, 24 [pid 971] rt_sigprocmask(SIG_SETMASK, [], [pid 974] <... set_robust_list resumed>) = 0 [pid 974] rt_sigprocmask(SIG_SETMASK, [], [pid 971] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 971] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 974] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 971] <... futex resumed>) = 0 [pid 974] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 971] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 974] <... mmap resumed>) = 0x20000000 [pid 974] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 971] <... futex resumed>) = 0 [pid 971] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 974] sendmsg(-1, 0x20000000, 0 [pid 971] <... futex resumed>) = 0 [pid 971] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 974] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 974] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 971] <... futex resumed>) = 0 [pid 974] <... futex resumed>) = 1 [pid 974] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 971] exit_group(0) = ? [pid 974] <... futex resumed>) = 231 [pid 972] <... sendfile resumed>) = ? [pid 974] +++ exited with 0 +++ [pid 972] +++ exited with 0 +++ [pid 971] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=971, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./155/binderfs") = 0 umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./155/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./155/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./155/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./155") = 0 mkdir("./156", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 975 ./strace-static-x86_64: Process 975 attached [pid 975] set_robust_list(0x555556b826a0, 24) = 0 [pid 975] chdir("./156") = 0 [pid 975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 975] setpgid(0, 0) = 0 [pid 975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 975] write(3, "1000", 4) = 4 [pid 975] close(3) = 0 [pid 975] symlink("/dev/binderfs", "./binderfs") = 0 [pid 975] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 975] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 975] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 975] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 975] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 975] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 975] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[976]}, 88) = 976 ./strace-static-x86_64: Process 976 attached [pid 975] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 975] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 975] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 976] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 976] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 976] memfd_create("syzkaller", 0) = 3 [pid 976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 976] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 976] munmap(0x7f9627d89000, 262144) = 0 [pid 976] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 976] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 976] close(3) = 0 [pid 976] mkdir("./file0", 0777) = 0 [pid 976] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 976] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 976] chdir("./file0") = 0 [pid 976] ioctl(4, LOOP_CLR_FD) = 0 [pid 976] close(4) = 0 [pid 976] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 975] <... futex resumed>) = 0 [pid 975] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 975] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 976] <... futex resumed>) = 1 [pid 976] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 976] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 976] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 975] <... futex resumed>) = 0 [pid 975] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 975] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 976] <... futex resumed>) = 0 [pid 976] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 976] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 975] <... futex resumed>) = 0 [pid 975] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 975] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 976] <... futex resumed>) = 1 [pid 976] creat("./bus", 000) = 6 [pid 976] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 975] <... futex resumed>) = 0 [pid 975] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 975] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 976] <... futex resumed>) = 1 [pid 976] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 976] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 975] <... futex resumed>) = 0 [pid 975] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 975] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 976] <... futex resumed>) = 1 [pid 976] open("./bus", O_RDONLY) = 7 [pid 976] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 975] <... futex resumed>) = 0 [pid 975] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 976] <... futex resumed>) = 1 [pid 975] <... futex resumed>) = 0 [pid 975] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 67.601283][ T976] loop0: detected capacity change from 0 to 512 [ 67.609429][ T976] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 67.622523][ T976] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 67.632733][ T976] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 976] sendfile(6, 7, NULL, 140737974943952 [pid 975] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 975] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 975] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 975] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 975] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 975] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 975] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 978 attached => {parent_tid=[978]}, 88) = 978 [pid 975] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 975] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 975] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 978] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 978] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 978] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 978] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 975] <... futex resumed>) = 0 [pid 975] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 975] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 978] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 978] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 975] <... futex resumed>) = 0 [pid 978] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 975] exit_group(0 [pid 978] <... futex resumed>) = ? [pid 975] <... exit_group resumed>) = ? [pid 978] +++ exited with 0 +++ [pid 976] <... sendfile resumed>) = ? [pid 976] +++ exited with 0 +++ [pid 975] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=975, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./156/binderfs") = 0 umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./156/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./156/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./156/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./156") = 0 mkdir("./157", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 980 ./strace-static-x86_64: Process 980 attached [pid 980] set_robust_list(0x555556b826a0, 24) = 0 [pid 980] chdir("./157") = 0 [pid 980] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 980] setpgid(0, 0) = 0 [pid 980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 980] write(3, "1000", 4) = 4 [pid 980] close(3) = 0 [pid 980] symlink("/dev/binderfs", "./binderfs") = 0 [pid 980] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 980] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 980] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 980] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 980] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 980] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 980] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[981]}, 88) = 981 [pid 980] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 980] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 981 attached [pid 981] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 981] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 981] memfd_create("syzkaller", 0) = 3 [pid 981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 981] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 981] munmap(0x7f9627d89000, 262144) = 0 [pid 981] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 981] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 981] close(3) = 0 [pid 981] mkdir("./file0", 0777) = 0 [pid 981] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 981] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 981] chdir("./file0") = 0 [pid 981] ioctl(4, LOOP_CLR_FD) = 0 [pid 981] close(4) = 0 [pid 981] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 980] <... futex resumed>) = 0 [pid 980] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 980] <... futex resumed>) = 0 [pid 980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 981] <... open resumed>) = 4 [pid 981] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 980] <... futex resumed>) = 0 [pid 980] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 980] <... futex resumed>) = 0 [pid 980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 981] <... open resumed>) = 5 [pid 981] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 980] <... futex resumed>) = 0 [pid 980] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] creat("./bus", 000 [pid 980] <... futex resumed>) = 0 [pid 980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 981] <... creat resumed>) = 6 [pid 981] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 980] <... futex resumed>) = 0 [pid 980] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 981] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 981] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 980] <... futex resumed>) = 0 [pid 980] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 981] <... futex resumed>) = 1 [pid 981] open("./bus", O_RDONLY) = 7 [pid 981] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 980] <... futex resumed>) = 0 [pid 981] sendfile(6, 7, NULL, 140737974943952 [pid 980] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 67.894410][ T981] loop0: detected capacity change from 0 to 512 [ 67.902673][ T981] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 67.915669][ T981] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 67.925293][ T981] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 980] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 980] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 980] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 980] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 980] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 983 attached => {parent_tid=[983]}, 88) = 983 [pid 980] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 980] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 980] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 983] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 983] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 983] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 983] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 980] <... futex resumed>) = 0 [pid 980] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 980] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 983] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 983] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 980] <... futex resumed>) = 0 [pid 983] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 980] exit_group(0) = ? [pid 983] <... futex resumed>) = ? [pid 983] +++ exited with 0 +++ [pid 981] <... sendfile resumed>) = ? [pid 981] +++ exited with 0 +++ [pid 980] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=980, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./157/binderfs") = 0 umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./157/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./157/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./157/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./157") = 0 mkdir("./158", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 984 ./strace-static-x86_64: Process 984 attached [pid 984] set_robust_list(0x555556b826a0, 24) = 0 [pid 984] chdir("./158") = 0 [pid 984] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 984] setpgid(0, 0) = 0 [pid 984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 984] write(3, "1000", 4) = 4 [pid 984] close(3) = 0 [pid 984] symlink("/dev/binderfs", "./binderfs") = 0 [pid 984] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 984] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 984] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 984] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 984] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 984] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 985 attached => {parent_tid=[985]}, 88) = 985 [pid 985] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 985] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 985] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 984] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 984] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 985] <... futex resumed>) = 0 [pid 985] memfd_create("syzkaller", 0 [pid 984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 985] <... memfd_create resumed>) = 3 [pid 985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 985] munmap(0x7f9627d89000, 262144) = 0 [pid 985] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 985] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 985] close(3) = 0 [pid 985] mkdir("./file0", 0777) = 0 [pid 985] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 985] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 985] chdir("./file0") = 0 [pid 985] ioctl(4, LOOP_CLR_FD) = 0 [pid 985] close(4) = 0 [pid 985] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 984] <... futex resumed>) = 0 [pid 984] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 985] <... futex resumed>) = 1 [pid 985] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 985] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 984] <... futex resumed>) = 0 [pid 984] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 985] <... futex resumed>) = 1 [pid 985] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 985] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 984] <... futex resumed>) = 0 [pid 984] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 985] <... futex resumed>) = 1 [pid 985] creat("./bus", 000) = 6 [pid 985] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 984] <... futex resumed>) = 0 [pid 984] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 985] <... futex resumed>) = 1 [pid 985] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 985] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 984] <... futex resumed>) = 0 [pid 984] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 985] <... futex resumed>) = 1 [pid 985] open("./bus", O_RDONLY) = 7 [pid 985] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 984] <... futex resumed>) = 0 [pid 984] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 985] <... futex resumed>) = 1 [ 68.193006][ T985] loop0: detected capacity change from 0 to 512 [ 68.201777][ T985] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 68.215078][ T985] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 68.225399][ T985] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 985] sendfile(6, 7, NULL, 140737974943952 [pid 984] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 984] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 984] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 984] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 984] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 988 attached [pid 988] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 988] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 988] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 984] <... clone3 resumed> => {parent_tid=[988]}, 88) = 988 [pid 984] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 984] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 984] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 988] <... futex resumed>) = 0 [pid 988] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 988] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 984] <... futex resumed>) = 0 [pid 984] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 984] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 988] <... futex resumed>) = 1 [pid 988] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 988] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 984] <... futex resumed>) = 0 [pid 988] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 984] exit_group(0) = ? [pid 988] <... futex resumed>) = ? [pid 985] <... sendfile resumed>) = ? [pid 988] +++ exited with 0 +++ [pid 985] +++ exited with 0 +++ [pid 984] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=984, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./158/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./158/binderfs") = 0 umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./158/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./158/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./158/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./158") = 0 mkdir("./159", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 989 ./strace-static-x86_64: Process 989 attached [pid 989] set_robust_list(0x555556b826a0, 24) = 0 [pid 989] chdir("./159") = 0 [pid 989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 989] setpgid(0, 0) = 0 [pid 989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 989] write(3, "1000", 4) = 4 [pid 989] close(3) = 0 [pid 989] symlink("/dev/binderfs", "./binderfs") = 0 [pid 989] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 989] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 989] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 989] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 989] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 990 attached => {parent_tid=[990]}, 88) = 990 [pid 990] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 990] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 990] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 989] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 989] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 990] <... futex resumed>) = 0 [pid 990] memfd_create("syzkaller", 0 [pid 989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 990] <... memfd_create resumed>) = 3 [pid 990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 990] munmap(0x7f9627d89000, 262144) = 0 [pid 990] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 990] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 990] close(3) = 0 [pid 990] mkdir("./file0", 0777) = 0 [pid 990] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 990] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 990] chdir("./file0") = 0 [pid 990] ioctl(4, LOOP_CLR_FD) = 0 [pid 990] close(4) = 0 [pid 990] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 989] <... futex resumed>) = 0 [pid 989] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 990] <... futex resumed>) = 1 [pid 990] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 990] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 989] <... futex resumed>) = 0 [pid 989] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 990] <... futex resumed>) = 1 [pid 990] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 990] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 989] <... futex resumed>) = 0 [pid 989] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 990] <... futex resumed>) = 1 [pid 990] creat("./bus", 000) = 6 [pid 990] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 989] <... futex resumed>) = 0 [pid 989] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 990] <... futex resumed>) = 1 [pid 990] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 990] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 989] <... futex resumed>) = 0 [pid 989] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 990] <... futex resumed>) = 1 [pid 990] open("./bus", O_RDONLY) = 7 [pid 990] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 989] <... futex resumed>) = 0 [pid 989] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 990] <... futex resumed>) = 1 [ 68.511544][ T990] loop0: detected capacity change from 0 to 512 [ 68.519602][ T990] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 68.532540][ T990] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 68.542313][ T990] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 990] sendfile(6, 7, NULL, 140737974943952 [pid 989] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 989] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 989] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 989] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 989] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[992]}, 88) = 992 [pid 989] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 989] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 992 attached [pid 992] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 992] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 992] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 992] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 989] <... futex resumed>) = 0 [pid 992] <... futex resumed>) = 1 [pid 989] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 992] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 992] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 989] <... futex resumed>) = 0 [pid 992] <... futex resumed>) = 1 [pid 992] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 989] exit_group(0 [pid 992] <... futex resumed>) = ? [pid 989] <... exit_group resumed>) = ? [pid 992] +++ exited with 0 +++ [pid 990] <... sendfile resumed>) = ? [pid 990] +++ exited with 0 +++ [pid 989] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=989, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./159/binderfs") = 0 umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./159/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./159/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./159/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./159") = 0 mkdir("./160", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 994 ./strace-static-x86_64: Process 994 attached [pid 994] set_robust_list(0x555556b826a0, 24) = 0 [pid 994] chdir("./160") = 0 [pid 994] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 994] setpgid(0, 0) = 0 [pid 994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 994] write(3, "1000", 4) = 4 [pid 994] close(3) = 0 [pid 994] symlink("/dev/binderfs", "./binderfs") = 0 [pid 994] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 994] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 994] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 994] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 994] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 994] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 994] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 995 attached => {parent_tid=[995]}, 88) = 995 [pid 995] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 995] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 995] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 994] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 994] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 995] <... futex resumed>) = 0 [pid 995] memfd_create("syzkaller", 0) = 3 [pid 994] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 995] munmap(0x7f9627d89000, 262144) = 0 [pid 995] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 995] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 995] close(3) = 0 [pid 995] mkdir("./file0", 0777) = 0 [pid 995] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 995] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 995] chdir("./file0") = 0 [pid 995] ioctl(4, LOOP_CLR_FD) = 0 [pid 995] close(4) = 0 [pid 995] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] <... futex resumed>) = 0 [pid 994] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 994] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 995] <... futex resumed>) = 1 [pid 995] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 995] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] <... futex resumed>) = 0 [pid 994] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 994] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 995] <... futex resumed>) = 1 [pid 995] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 995] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] <... futex resumed>) = 0 [pid 994] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 994] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 995] <... futex resumed>) = 1 [pid 995] creat("./bus", 000) = 6 [pid 995] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] <... futex resumed>) = 0 [pid 994] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 994] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 995] <... futex resumed>) = 1 [pid 995] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 995] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] <... futex resumed>) = 0 [pid 994] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 994] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 995] <... futex resumed>) = 1 [pid 995] open("./bus", O_RDONLY) = 7 [pid 995] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] <... futex resumed>) = 0 [pid 994] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 994] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 995] <... futex resumed>) = 1 [ 68.797250][ T995] loop0: detected capacity change from 0 to 512 [ 68.805542][ T995] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 68.818550][ T995] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 68.828020][ T995] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 995] sendfile(6, 7, NULL, 140737974943952 [pid 994] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 994] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 994] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 994] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 994] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 994] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[997]}, 88) = 997 ./strace-static-x86_64: Process 997 attached [pid 997] set_robust_list(0x7f9627dc89a0, 24 [pid 994] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 997] <... set_robust_list resumed>) = 0 [pid 997] rt_sigprocmask(SIG_SETMASK, [], [pid 994] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 997] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 994] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 997] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 997] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] <... futex resumed>) = 0 [pid 994] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 997] <... futex resumed>) = 1 [pid 994] <... futex resumed>) = 0 [pid 994] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 997] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 997] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] <... futex resumed>) = 0 [pid 997] <... futex resumed>) = 1 [pid 997] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 994] exit_group(0 [pid 997] <... futex resumed>) = ? [pid 994] <... exit_group resumed>) = ? [pid 997] +++ exited with 0 +++ [pid 995] <... sendfile resumed>) = ? [pid 995] +++ exited with 0 +++ [pid 994] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=994, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./160/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./160/binderfs") = 0 umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./160/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./160/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./160/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./160") = 0 mkdir("./161", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 998 ./strace-static-x86_64: Process 998 attached [pid 998] set_robust_list(0x555556b826a0, 24) = 0 [pid 998] chdir("./161") = 0 [pid 998] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 998] setpgid(0, 0) = 0 [pid 998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 998] write(3, "1000", 4) = 4 [pid 998] close(3) = 0 [pid 998] symlink("/dev/binderfs", "./binderfs") = 0 [pid 998] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 998] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 998] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 998] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 998] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 998] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 998] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[999]}, 88) = 999 [pid 998] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 998] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 998] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 999 attached [pid 999] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 999] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 999] memfd_create("syzkaller", 0) = 3 [pid 999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 999] munmap(0x7f9627d89000, 262144) = 0 [pid 999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 999] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 999] close(3) = 0 [pid 999] mkdir("./file0", 0777) = 0 [pid 999] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 999] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 999] chdir("./file0") = 0 [pid 999] ioctl(4, LOOP_CLR_FD) = 0 [pid 999] close(4) = 0 [pid 999] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 998] <... futex resumed>) = 0 [pid 998] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 998] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 999] <... futex resumed>) = 1 [pid 999] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 999] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 998] <... futex resumed>) = 0 [pid 998] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 998] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 999] <... futex resumed>) = 1 [pid 999] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 999] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 998] <... futex resumed>) = 0 [pid 998] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 998] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 999] <... futex resumed>) = 1 [pid 999] creat("./bus", 000) = 6 [pid 999] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 998] <... futex resumed>) = 0 [pid 998] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 998] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 999] <... futex resumed>) = 1 [pid 999] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 999] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 998] <... futex resumed>) = 0 [pid 998] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 998] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 999] <... futex resumed>) = 1 [pid 999] open("./bus", O_RDONLY) = 7 [pid 999] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 998] <... futex resumed>) = 0 [pid 998] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 998] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 999] <... futex resumed>) = 1 [ 69.078934][ T999] loop0: detected capacity change from 0 to 512 [ 69.090072][ T999] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 69.103437][ T999] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 69.113403][ T999] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 999] sendfile(6, 7, NULL, 140737974943952 [pid 998] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 998] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 998] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 998] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 998] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 998] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 998] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 998] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 998] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1001]}, 88) = 1001 [pid 998] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 998] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 998] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1001 attached [pid 1001] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1001] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1001] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1001] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 998] <... futex resumed>) = 0 [pid 998] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 998] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1001] <... futex resumed>) = 1 [pid 1001] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1001] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 998] <... futex resumed>) = 0 [pid 1001] <... futex resumed>) = 1 [pid 1001] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 998] exit_group(0) = ? [pid 1001] <... futex resumed>) = ? [pid 1001] +++ exited with 0 +++ [pid 999] <... sendfile resumed>) = ? [pid 999] +++ exited with 0 +++ [pid 998] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=998, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./161/binderfs") = 0 umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./161/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./161/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./161/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./161") = 0 mkdir("./162", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1002 ./strace-static-x86_64: Process 1002 attached [pid 1002] set_robust_list(0x555556b826a0, 24) = 0 [pid 1002] chdir("./162") = 0 [pid 1002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1002] setpgid(0, 0) = 0 [pid 1002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1002] write(3, "1000", 4) = 4 [pid 1002] close(3) = 0 [pid 1002] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1002] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1002] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1002] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1002] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1002] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1002] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1003 attached [pid 1003] set_robust_list(0x7f96301a99a0, 24 [pid 1002] <... clone3 resumed> => {parent_tid=[1003]}, 88) = 1003 [pid 1002] rt_sigprocmask(SIG_SETMASK, [], [pid 1003] <... set_robust_list resumed>) = 0 [pid 1003] rt_sigprocmask(SIG_SETMASK, [], [pid 1002] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1003] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1002] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1003] memfd_create("syzkaller", 0) = 3 [pid 1003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1003] munmap(0x7f9627d89000, 262144) = 0 [pid 1003] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1003] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1003] close(3) = 0 [pid 1003] mkdir("./file0", 0777) = 0 [pid 1003] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1003] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1003] chdir("./file0") = 0 [pid 1003] ioctl(4, LOOP_CLR_FD) = 0 [pid 1003] close(4) = 0 [pid 1003] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1002] <... futex resumed>) = 0 [pid 1002] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1003] <... futex resumed>) = 1 [pid 1003] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1003] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1002] <... futex resumed>) = 0 [pid 1002] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1003] <... futex resumed>) = 1 [pid 1003] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1003] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1002] <... futex resumed>) = 0 [pid 1002] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1003] <... futex resumed>) = 1 [pid 1003] creat("./bus", 000) = 6 [pid 1003] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1002] <... futex resumed>) = 0 [pid 1002] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1003] <... futex resumed>) = 1 [pid 1003] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1003] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1002] <... futex resumed>) = 0 [pid 1002] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1003] <... futex resumed>) = 1 [pid 1003] open("./bus", O_RDONLY) = 7 [pid 1003] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1002] <... futex resumed>) = 0 [pid 1002] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1003] <... futex resumed>) = 1 [ 69.352040][ T1003] loop0: detected capacity change from 0 to 512 [ 69.363317][ T1003] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 69.377430][ T1003] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 69.391748][ T1003] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1003] sendfile(6, 7, NULL, 140737974943952 [pid 1002] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1002] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1002] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1002] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1002] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1005 attached [pid 1005] set_robust_list(0x7f9627dc89a0, 24 [pid 1002] <... clone3 resumed> => {parent_tid=[1005]}, 88) = 1005 [pid 1005] <... set_robust_list resumed>) = 0 [pid 1002] rt_sigprocmask(SIG_SETMASK, [], [pid 1005] rt_sigprocmask(SIG_SETMASK, [], [pid 1002] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1005] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1002] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1005] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1002] <... futex resumed>) = 0 [pid 1002] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1005] <... mmap resumed>) = 0x20000000 [pid 1005] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1002] <... futex resumed>) = 0 [pid 1002] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1005] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1005] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1002] <... futex resumed>) = 0 [pid 1005] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1002] exit_group(0 [pid 1005] <... futex resumed>) = ? [pid 1002] <... exit_group resumed>) = ? [pid 1005] +++ exited with 0 +++ [pid 1003] <... sendfile resumed>) = 230 [pid 1003] +++ exited with 0 +++ [pid 1002] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1002, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./162/binderfs") = 0 umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./162/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./162/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./162/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./162") = 0 mkdir("./163", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1006 ./strace-static-x86_64: Process 1006 attached [pid 1006] set_robust_list(0x555556b826a0, 24) = 0 [pid 1006] chdir("./163") = 0 [pid 1006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1006] setpgid(0, 0) = 0 [pid 1006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1006] write(3, "1000", 4) = 4 [pid 1006] close(3) = 0 [pid 1006] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1006] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1006] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1006] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1006] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1006] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1007 attached => {parent_tid=[1007]}, 88) = 1007 [pid 1007] set_robust_list(0x7f96301a99a0, 24 [pid 1006] rt_sigprocmask(SIG_SETMASK, [], [pid 1007] <... set_robust_list resumed>) = 0 [pid 1006] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1007] rt_sigprocmask(SIG_SETMASK, [], [pid 1006] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1007] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1006] <... futex resumed>) = 0 [pid 1006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1007] memfd_create("syzkaller", 0) = 3 [pid 1007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1007] munmap(0x7f9627d89000, 262144) = 0 [pid 1007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1007] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1007] close(3) = 0 [pid 1007] mkdir("./file0", 0777) = 0 [pid 1007] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1007] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1007] chdir("./file0") = 0 [pid 1007] ioctl(4, LOOP_CLR_FD) = 0 [pid 1007] close(4) = 0 [pid 1007] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1006] <... futex resumed>) = 0 [pid 1006] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1007] <... futex resumed>) = 1 [pid 1007] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1007] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1006] <... futex resumed>) = 0 [pid 1006] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1007] <... futex resumed>) = 1 [pid 1007] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1007] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1006] <... futex resumed>) = 0 [pid 1006] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1007] <... futex resumed>) = 1 [pid 1007] creat("./bus", 000) = 6 [pid 1007] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1006] <... futex resumed>) = 0 [pid 1006] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1007] <... futex resumed>) = 1 [pid 1007] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1007] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1006] <... futex resumed>) = 0 [pid 1006] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1007] <... futex resumed>) = 1 [pid 1007] open("./bus", O_RDONLY) = 7 [pid 1007] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1006] <... futex resumed>) = 0 [pid 1006] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1007] <... futex resumed>) = 1 [ 69.669108][ T1007] loop0: detected capacity change from 0 to 512 [ 69.679676][ T1007] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 69.694894][ T1007] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 69.704663][ T1007] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1007] sendfile(6, 7, NULL, 140737974943952 [pid 1006] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1006] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1006] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1006] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1006] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1010]}, 88) = 1010 ./strace-static-x86_64: Process 1010 attached [pid 1006] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1006] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1010] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1010] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1010] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1010] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1006] <... futex resumed>) = 0 [pid 1010] <... futex resumed>) = 1 [pid 1006] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1010] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1010] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1006] <... futex resumed>) = 0 [pid 1010] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1006] exit_group(0 [pid 1010] <... futex resumed>) = ? [pid 1006] <... exit_group resumed>) = ? [pid 1010] +++ exited with 0 +++ [pid 1007] <... sendfile resumed>) = ? [pid 1007] +++ exited with 0 +++ [pid 1006] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1006, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./163/binderfs") = 0 umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./163/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./163/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./163/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./163") = 0 mkdir("./164", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1011 ./strace-static-x86_64: Process 1011 attached [pid 1011] set_robust_list(0x555556b826a0, 24) = 0 [pid 1011] chdir("./164") = 0 [pid 1011] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1011] setpgid(0, 0) = 0 [pid 1011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1011] write(3, "1000", 4) = 4 [pid 1011] close(3) = 0 [pid 1011] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1011] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1011] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1011] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1011] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1011] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1011] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1012 attached => {parent_tid=[1012]}, 88) = 1012 [pid 1012] set_robust_list(0x7f96301a99a0, 24 [pid 1011] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1011] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1011] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1012] <... set_robust_list resumed>) = 0 [pid 1012] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1012] memfd_create("syzkaller", 0) = 3 [pid 1012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1012] munmap(0x7f9627d89000, 262144) = 0 [pid 1012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1012] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1012] close(3) = 0 [pid 1012] mkdir("./file0", 0777) = 0 [pid 1012] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1012] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1012] chdir("./file0") = 0 [pid 1012] ioctl(4, LOOP_CLR_FD) = 0 [pid 1012] close(4) = 0 [pid 1012] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1011] <... futex resumed>) = 0 [pid 1011] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1011] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1012] <... futex resumed>) = 1 [pid 1012] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1012] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1011] <... futex resumed>) = 0 [pid 1011] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1011] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1012] <... futex resumed>) = 1 [pid 1012] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1012] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1011] <... futex resumed>) = 0 [pid 1011] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1011] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1012] <... futex resumed>) = 1 [pid 1012] creat("./bus", 000) = 6 [pid 1012] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1011] <... futex resumed>) = 0 [pid 1011] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1011] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1012] <... futex resumed>) = 1 [pid 1012] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1012] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1011] <... futex resumed>) = 0 [pid 1011] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1011] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1012] <... futex resumed>) = 1 [pid 1012] open("./bus", O_RDONLY) = 7 [pid 1012] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1011] <... futex resumed>) = 0 [pid 1011] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1011] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1012] <... futex resumed>) = 1 [ 69.977752][ T1012] loop0: detected capacity change from 0 to 512 [ 69.987257][ T1012] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 70.001376][ T1012] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 70.011246][ T1012] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1012] sendfile(6, 7, NULL, 140737974943952 [pid 1011] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1011] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1011] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1011] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1011] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1011] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1011] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1015]}, 88) = 1015 [pid 1011] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1011] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1011] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1015 attached [pid 1015] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1015] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1015] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1015] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1011] <... futex resumed>) = 0 [pid 1011] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1011] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1015] <... futex resumed>) = 1 [pid 1015] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1015] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1011] <... futex resumed>) = 0 [pid 1015] <... futex resumed>) = 1 [pid 1015] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1011] exit_group(0) = ? [pid 1015] <... futex resumed>) = ? [pid 1015] +++ exited with 0 +++ [pid 1012] <... sendfile resumed>) = ? [pid 1012] +++ exited with 0 +++ [pid 1011] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1011, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./164/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./164/binderfs") = 0 umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./164/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./164/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./164/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./164") = 0 mkdir("./165", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1016 ./strace-static-x86_64: Process 1016 attached [pid 1016] set_robust_list(0x555556b826a0, 24) = 0 [pid 1016] chdir("./165") = 0 [pid 1016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1016] setpgid(0, 0) = 0 [pid 1016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1016] write(3, "1000", 4) = 4 [pid 1016] close(3) = 0 [pid 1016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1016] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1016] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1016] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1016] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1016] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1016] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1017 attached => {parent_tid=[1017]}, 88) = 1017 [pid 1017] set_robust_list(0x7f96301a99a0, 24 [pid 1016] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1016] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1017] <... set_robust_list resumed>) = 0 [pid 1017] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1017] memfd_create("syzkaller", 0) = 3 [pid 1017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1017] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1017] munmap(0x7f9627d89000, 262144) = 0 [pid 1017] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1017] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1017] close(3) = 0 [pid 1017] mkdir("./file0", 0777) = 0 [pid 1017] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1017] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1017] chdir("./file0") = 0 [pid 1017] ioctl(4, LOOP_CLR_FD) = 0 [pid 1017] close(4) = 0 [pid 1017] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1016] <... futex resumed>) = 0 [pid 1016] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1017] <... futex resumed>) = 1 [pid 1017] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1017] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1016] <... futex resumed>) = 0 [pid 1016] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1017] <... futex resumed>) = 1 [pid 1017] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1017] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1016] <... futex resumed>) = 0 [pid 1016] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1017] <... futex resumed>) = 1 [pid 1016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1017] creat("./bus", 000) = 6 [pid 1017] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1017] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1016] <... futex resumed>) = 0 [pid 1016] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1017] <... futex resumed>) = 0 [pid 1017] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1017] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1016] <... futex resumed>) = 0 [pid 1016] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1017] <... futex resumed>) = 1 [pid 1016] <... futex resumed>) = 0 [pid 1017] open("./bus", O_RDONLY [pid 1016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1017] <... open resumed>) = 7 [pid 1017] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1016] <... futex resumed>) = 0 [pid 1016] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1017] <... futex resumed>) = 1 [ 70.291915][ T1017] loop0: detected capacity change from 0 to 512 [ 70.300171][ T1017] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 70.313125][ T1017] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 70.322933][ T1017] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1017] sendfile(6, 7, NULL, 140737974943952 [pid 1016] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1016] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1016] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1016] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1016] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1019 attached => {parent_tid=[1019]}, 88) = 1019 [pid 1016] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1016] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1016] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1019] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1019] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1019] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1019] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1016] <... futex resumed>) = 0 [pid 1016] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1016] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1019] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1019] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1016] <... futex resumed>) = 0 [pid 1019] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1016] exit_group(0 [pid 1019] <... futex resumed>) = ? [pid 1016] <... exit_group resumed>) = ? [pid 1017] <... sendfile resumed>) = ? [pid 1017] +++ exited with 0 +++ [pid 1019] +++ exited with 0 +++ [pid 1016] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1016, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./165/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./165/binderfs") = 0 umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./165/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./165/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./165/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./165") = 0 mkdir("./166", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1020 ./strace-static-x86_64: Process 1020 attached [pid 1020] set_robust_list(0x555556b826a0, 24) = 0 [pid 1020] chdir("./166") = 0 [pid 1020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1020] setpgid(0, 0) = 0 [pid 1020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1020] write(3, "1000", 4) = 4 [pid 1020] close(3) = 0 [pid 1020] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1020] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1020] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1020] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1020] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1020] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1020] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1020] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1021]}, 88) = 1021 [pid 1020] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1020] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1021 attached [pid 1021] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1021] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1021] memfd_create("syzkaller", 0) = 3 [pid 1021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1021] munmap(0x7f9627d89000, 262144) = 0 [pid 1021] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1021] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1021] close(3) = 0 [pid 1021] mkdir("./file0", 0777) = 0 [pid 1021] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1021] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1021] chdir("./file0") = 0 [pid 1021] ioctl(4, LOOP_CLR_FD) = 0 [pid 1021] close(4) = 0 [pid 1021] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1020] <... futex resumed>) = 0 [pid 1020] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1021] <... futex resumed>) = 1 [pid 1021] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1021] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1020] <... futex resumed>) = 0 [pid 1020] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1021] <... futex resumed>) = 1 [pid 1021] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1021] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1020] <... futex resumed>) = 0 [pid 1020] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1021] <... futex resumed>) = 1 [pid 1021] creat("./bus", 000) = 6 [pid 1021] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1020] <... futex resumed>) = 0 [pid 1020] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1021] <... futex resumed>) = 1 [pid 1021] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1021] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1021] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1020] <... futex resumed>) = 0 [pid 1020] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1021] <... futex resumed>) = 0 [pid 1021] open("./bus", O_RDONLY) = 7 [pid 1021] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1020] <... futex resumed>) = 0 [pid 1020] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 70.598355][ T1021] loop0: detected capacity change from 0 to 512 [ 70.607612][ T1021] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 70.620822][ T1021] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 70.630550][ T1021] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1021] sendfile(6, 7, NULL, 140737974943952 [pid 1020] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1020] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1020] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1020] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1020] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1020] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1023]}, 88) = 1023 [pid 1020] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1020] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1020] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1023 attached [pid 1023] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1023] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1023] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1023] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1020] <... futex resumed>) = 0 [pid 1020] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1020] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1023] <... futex resumed>) = 1 [pid 1023] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1023] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1020] <... futex resumed>) = 0 [pid 1023] <... futex resumed>) = 1 [pid 1023] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1020] exit_group(0 [pid 1023] <... futex resumed>) = ? [pid 1020] <... exit_group resumed>) = ? [pid 1023] +++ exited with 0 +++ [pid 1021] <... sendfile resumed>) = ? [pid 1021] +++ exited with 0 +++ [pid 1020] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1020, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./166/binderfs") = 0 umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./166/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./166/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./166/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./166") = 0 mkdir("./167", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1025 ./strace-static-x86_64: Process 1025 attached [pid 1025] set_robust_list(0x555556b826a0, 24) = 0 [pid 1025] chdir("./167") = 0 [pid 1025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1025] setpgid(0, 0) = 0 [pid 1025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1025] write(3, "1000", 4) = 4 [pid 1025] close(3) = 0 [pid 1025] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1025] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1025] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1025] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1025] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1025] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1025] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1026]}, 88) = 1026 [pid 1025] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1025] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1025] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1026 attached [pid 1026] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1026] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1026] memfd_create("syzkaller", 0) = 3 [pid 1026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1026] munmap(0x7f9627d89000, 262144) = 0 [pid 1026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1026] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1026] close(3) = 0 [pid 1026] mkdir("./file0", 0777) = 0 [pid 1026] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1026] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1026] chdir("./file0") = 0 [pid 1026] ioctl(4, LOOP_CLR_FD) = 0 [pid 1026] close(4) = 0 [pid 1026] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1025] <... futex resumed>) = 0 [pid 1025] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1025] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1026] <... futex resumed>) = 1 [pid 1026] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1026] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1025] <... futex resumed>) = 0 [pid 1025] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1025] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1026] <... futex resumed>) = 1 [pid 1026] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1026] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1026] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1025] <... futex resumed>) = 0 [pid 1025] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1025] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1026] <... futex resumed>) = 0 [pid 1026] creat("./bus", 000) = 6 [pid 1026] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1025] <... futex resumed>) = 0 [pid 1025] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1025] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1026] <... futex resumed>) = 1 [pid 1026] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1026] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1025] <... futex resumed>) = 0 [pid 1025] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1025] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1026] <... futex resumed>) = 1 [pid 1026] open("./bus", O_RDONLY) = 7 [pid 1026] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1025] <... futex resumed>) = 0 [pid 1025] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1025] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1026] <... futex resumed>) = 1 [ 70.884749][ T1026] loop0: detected capacity change from 0 to 512 [ 70.893087][ T1026] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 70.906012][ T1026] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 70.916762][ T1026] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1026] sendfile(6, 7, NULL, 140737974943952 [pid 1025] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1025] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1025] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1025] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1025] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1025] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1028]}, 88) = 1028 [pid 1025] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1025] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1025] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1028 attached [pid 1028] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1028] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1028] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1028] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1025] <... futex resumed>) = 0 [pid 1025] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1025] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1028] <... futex resumed>) = 1 [pid 1028] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1028] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1025] <... futex resumed>) = 0 [pid 1028] <... futex resumed>) = 1 [pid 1028] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1025] exit_group(0 [pid 1028] <... futex resumed>) = ? [pid 1025] <... exit_group resumed>) = ? [pid 1028] +++ exited with 0 +++ [pid 1026] <... sendfile resumed>) = ? [pid 1026] +++ exited with 0 +++ [pid 1025] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1025, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./167/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./167/binderfs") = 0 umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./167/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./167/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./167/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./167") = 0 mkdir("./168", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1029 ./strace-static-x86_64: Process 1029 attached [pid 1029] set_robust_list(0x555556b826a0, 24) = 0 [pid 1029] chdir("./168") = 0 [pid 1029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1029] setpgid(0, 0) = 0 [pid 1029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1029] write(3, "1000", 4) = 4 [pid 1029] close(3) = 0 [pid 1029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1029] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1029] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1029] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1029] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1029] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1029] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1030]}, 88) = 1030 [pid 1029] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 1030 attached NULL, 8) = 0 [pid 1030] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1030] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1030] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1029] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1030] <... futex resumed>) = 0 [pid 1030] memfd_create("syzkaller", 0 [pid 1029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1030] <... memfd_create resumed>) = 3 [pid 1030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1030] munmap(0x7f9627d89000, 262144) = 0 [pid 1030] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1030] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1030] close(3) = 0 [pid 1030] mkdir("./file0", 0777) = 0 [pid 1030] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1030] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1030] chdir("./file0") = 0 [pid 1030] ioctl(4, LOOP_CLR_FD) = 0 [pid 1030] close(4) = 0 [pid 1030] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1030] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1029] <... futex resumed>) = 0 [pid 1029] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1030] <... futex resumed>) = 0 [pid 1030] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1030] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1029] <... futex resumed>) = 0 [pid 1029] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1030] <... futex resumed>) = 1 [pid 1030] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1030] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1029] <... futex resumed>) = 0 [pid 1029] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1030] <... futex resumed>) = 1 [pid 1030] creat("./bus", 000) = 6 [pid 1030] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1029] <... futex resumed>) = 0 [pid 1029] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1030] <... futex resumed>) = 1 [pid 1030] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1030] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1029] <... futex resumed>) = 0 [pid 1029] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1030] <... futex resumed>) = 1 [pid 1030] open("./bus", O_RDONLY) = 7 [pid 1030] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1029] <... futex resumed>) = 0 [pid 1029] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 71.210978][ T1030] loop0: detected capacity change from 0 to 512 [ 71.219053][ T1030] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 71.232150][ T1030] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 71.241914][ T1030] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1030] sendfile(6, 7, NULL, 140737974943952 [pid 1029] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1029] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1029] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1029] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1029] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1032]}, 88) = 1032 [pid 1029] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1029] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1029] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1032 attached [pid 1032] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1032] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1032] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1032] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1029] <... futex resumed>) = 0 [pid 1029] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1029] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1032] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1032] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1029] <... futex resumed>) = 0 [pid 1032] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1029] exit_group(0 [pid 1032] <... futex resumed>) = ? [pid 1030] <... sendfile resumed>) = ? [pid 1029] <... exit_group resumed>) = ? [pid 1032] +++ exited with 0 +++ [pid 1030] +++ exited with 0 +++ [pid 1029] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1029, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./168/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./168/binderfs") = 0 umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./168/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./168/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./168/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./168") = 0 mkdir("./169", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1033 ./strace-static-x86_64: Process 1033 attached [pid 1033] set_robust_list(0x555556b826a0, 24) = 0 [pid 1033] chdir("./169") = 0 [pid 1033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1033] setpgid(0, 0) = 0 [pid 1033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1033] write(3, "1000", 4) = 4 [pid 1033] close(3) = 0 [pid 1033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1033] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1033] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1033] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1033] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1033] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1033] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1034]}, 88) = 1034 [pid 1033] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1033] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1034 attached [pid 1034] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1034] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1034] memfd_create("syzkaller", 0) = 3 [pid 1034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1034] munmap(0x7f9627d89000, 262144) = 0 [pid 1034] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1034] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1034] close(3) = 0 [pid 1034] mkdir("./file0", 0777) = 0 [pid 1034] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1034] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1034] chdir("./file0") = 0 [pid 1034] ioctl(4, LOOP_CLR_FD) = 0 [pid 1034] close(4) = 0 [pid 1034] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1033] <... futex resumed>) = 0 [pid 1033] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1034] <... futex resumed>) = 1 [pid 1034] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1034] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1033] <... futex resumed>) = 0 [pid 1033] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1034] <... futex resumed>) = 1 [pid 1034] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1034] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1033] <... futex resumed>) = 0 [pid 1033] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1034] <... futex resumed>) = 1 [pid 1034] creat("./bus", 000) = 6 [pid 1034] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1033] <... futex resumed>) = 0 [pid 1033] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1034] <... futex resumed>) = 1 [pid 1034] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1034] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1033] <... futex resumed>) = 0 [pid 1033] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1034] <... futex resumed>) = 1 [pid 1034] open("./bus", O_RDONLY) = 7 [pid 1034] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1033] <... futex resumed>) = 0 [pid 1033] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1034] <... futex resumed>) = 1 [ 71.527426][ T1034] loop0: detected capacity change from 0 to 512 [ 71.536118][ T1034] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 71.549684][ T1034] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 71.561275][ T1034] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1034] sendfile(6, 7, NULL, 140737974943952 [pid 1033] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1033] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1033] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1033] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1033] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1036 attached => {parent_tid=[1036]}, 88) = 1036 [pid 1033] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1036] set_robust_list(0x7f9627dc89a0, 24 [pid 1033] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1036] <... set_robust_list resumed>) = 0 [pid 1033] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1036] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1036] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1036] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1033] <... futex resumed>) = 0 [pid 1036] <... futex resumed>) = 1 [pid 1033] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1033] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1036] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1036] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1033] <... futex resumed>) = 0 [pid 1036] <... futex resumed>) = 1 [pid 1036] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1033] exit_group(0 [pid 1036] <... futex resumed>) = ? [pid 1033] <... exit_group resumed>) = ? [pid 1034] <... sendfile resumed>) = ? [pid 1034] +++ exited with 0 +++ [pid 1036] +++ exited with 0 +++ [pid 1033] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1033, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./169/binderfs") = 0 umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./169/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./169/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./169/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./169") = 0 mkdir("./170", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1038 ./strace-static-x86_64: Process 1038 attached [pid 1038] set_robust_list(0x555556b826a0, 24) = 0 [pid 1038] chdir("./170") = 0 [pid 1038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1038] setpgid(0, 0) = 0 [pid 1038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1038] write(3, "1000", 4) = 4 [pid 1038] close(3) = 0 [pid 1038] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1038] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1038] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1038] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1038] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1038] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1039]}, 88) = 1039 [pid 1038] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1038] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1039 attached [pid 1039] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1039] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1039] memfd_create("syzkaller", 0) = 3 [pid 1039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1039] munmap(0x7f9627d89000, 262144) = 0 [pid 1039] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1039] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1039] close(3) = 0 [pid 1039] mkdir("./file0", 0777) = 0 [ 71.812421][ T1039] loop0: detected capacity change from 0 to 512 [ 71.830085][ T1039] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 71.843169][ T1039] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1039] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1039] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1039] chdir("./file0") = 0 [pid 1039] ioctl(4, LOOP_CLR_FD) = 0 [pid 1039] close(4) = 0 [pid 1039] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1038] <... futex resumed>) = 0 [pid 1038] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1039] <... futex resumed>) = 1 [pid 1039] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1039] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1038] <... futex resumed>) = 0 [pid 1038] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1039] <... futex resumed>) = 1 [pid 1039] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1039] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1039] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1038] <... futex resumed>) = 0 [pid 1038] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1038] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1039] <... futex resumed>) = 0 [pid 1039] creat("./bus", 000) = 6 [pid 1039] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1038] <... futex resumed>) = 0 [pid 1038] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1039] <... futex resumed>) = 1 [pid 1039] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1039] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1038] <... futex resumed>) = 0 [pid 1038] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1039] <... futex resumed>) = 1 [pid 1039] open("./bus", O_RDONLY) = 7 [pid 1039] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1038] <... futex resumed>) = 0 [pid 1038] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 71.856102][ T1039] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1039] sendfile(6, 7, NULL, 140737974943952 [pid 1038] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1038] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1038] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1038] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1038] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1038] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1038] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1041]}, 88) = 1041 [pid 1038] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1038] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1041 attached [pid 1041] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1041] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1041] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1041] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1038] <... futex resumed>) = 0 [pid 1038] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1041] <... futex resumed>) = 1 [pid 1041] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1041] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1038] <... futex resumed>) = 0 [pid 1041] <... futex resumed>) = 1 [pid 1041] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1038] exit_group(0 [pid 1041] <... futex resumed>) = ? [pid 1038] <... exit_group resumed>) = ? [pid 1041] +++ exited with 0 +++ [pid 1039] <... sendfile resumed>) = ? [pid 1039] +++ exited with 0 +++ [pid 1038] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1038, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./170/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./170/binderfs") = 0 umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./170/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./170/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./170/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./170") = 0 mkdir("./171", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1042 ./strace-static-x86_64: Process 1042 attached [pid 1042] set_robust_list(0x555556b826a0, 24) = 0 [pid 1042] chdir("./171") = 0 [pid 1042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1042] setpgid(0, 0) = 0 [pid 1042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1042] write(3, "1000", 4) = 4 [pid 1042] close(3) = 0 [pid 1042] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1042] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1042] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1042] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1042] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1042] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1043]}, 88) = 1043 [pid 1042] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 1043 attached NULL, 8) = 0 [pid 1042] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1043] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1043] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1043] memfd_create("syzkaller", 0) = 3 [pid 1043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1043] munmap(0x7f9627d89000, 262144) = 0 [pid 1043] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1043] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1043] close(3) = 0 [pid 1043] mkdir("./file0", 0777) = 0 [pid 1043] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1043] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1043] chdir("./file0") = 0 [pid 1043] ioctl(4, LOOP_CLR_FD) = 0 [pid 1043] close(4) = 0 [pid 1043] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1042] <... futex resumed>) = 0 [pid 1042] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1043] <... futex resumed>) = 1 [pid 1043] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1043] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1042] <... futex resumed>) = 0 [pid 1042] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1043] <... futex resumed>) = 1 [pid 1043] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1043] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1042] <... futex resumed>) = 0 [pid 1042] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1043] <... futex resumed>) = 1 [pid 1043] creat("./bus", 000) = 6 [pid 1043] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1042] <... futex resumed>) = 0 [pid 1042] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1043] <... futex resumed>) = 1 [pid 1043] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1043] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1042] <... futex resumed>) = 0 [pid 1042] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1043] open("./bus", O_RDONLY [pid 1042] <... futex resumed>) = 0 [pid 1042] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1043] <... open resumed>) = 7 [pid 1043] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1042] <... futex resumed>) = 0 [pid 1042] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 72.176907][ T1043] loop0: detected capacity change from 0 to 512 [ 72.185630][ T1043] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 72.199005][ T1043] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 72.209194][ T1043] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1043] sendfile(6, 7, NULL, 140737974943952 [pid 1042] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1042] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1042] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1042] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1042] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1042] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1046 attached => {parent_tid=[1046]}, 88) = 1046 [pid 1042] rt_sigprocmask(SIG_SETMASK, [], [pid 1046] set_robust_list(0x7f9627dc89a0, 24 [pid 1042] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1042] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1046] <... set_robust_list resumed>) = 0 [pid 1046] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1046] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1046] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1042] <... futex resumed>) = 0 [pid 1042] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1046] <... futex resumed>) = 1 [pid 1046] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1046] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1042] <... futex resumed>) = 0 [pid 1046] <... futex resumed>) = 1 [pid 1046] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1042] exit_group(0 [pid 1046] <... futex resumed>) = ? [pid 1042] <... exit_group resumed>) = ? [pid 1046] +++ exited with 0 +++ [pid 1043] <... sendfile resumed>) = ? [pid 1043] +++ exited with 0 +++ [pid 1042] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1042, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./171/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./171/binderfs") = 0 umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./171/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./171/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./171/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./171") = 0 mkdir("./172", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1047 ./strace-static-x86_64: Process 1047 attached [pid 1047] set_robust_list(0x555556b826a0, 24) = 0 [pid 1047] chdir("./172") = 0 [pid 1047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1047] setpgid(0, 0) = 0 [pid 1047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1047] write(3, "1000", 4) = 4 [pid 1047] close(3) = 0 [pid 1047] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1047] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1047] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1047] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1047] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1047] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1047] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1047] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1048]}, 88) = 1048 ./strace-static-x86_64: Process 1048 attached [pid 1047] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1047] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1047] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1048] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1048] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1048] memfd_create("syzkaller", 0) = 3 [pid 1048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1048] munmap(0x7f9627d89000, 262144) = 0 [pid 1048] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1048] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1048] close(3) = 0 [pid 1048] mkdir("./file0", 0777) = 0 [pid 1048] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1048] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1048] chdir("./file0") = 0 [pid 1048] ioctl(4, LOOP_CLR_FD) = 0 [pid 1048] close(4) = 0 [pid 1048] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1047] <... futex resumed>) = 0 [pid 1047] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1047] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1048] <... futex resumed>) = 1 [pid 1048] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1048] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1047] <... futex resumed>) = 0 [pid 1047] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1047] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1048] <... futex resumed>) = 1 [pid 1048] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1048] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1047] <... futex resumed>) = 0 [pid 1047] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1047] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1048] <... futex resumed>) = 1 [pid 1048] creat("./bus", 000) = 6 [pid 1048] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1047] <... futex resumed>) = 0 [pid 1047] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1047] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1048] <... futex resumed>) = 1 [pid 1048] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1048] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1047] <... futex resumed>) = 0 [pid 1048] open("./bus", O_RDONLY [pid 1047] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] <... open resumed>) = 7 [pid 1047] <... futex resumed>) = 0 [pid 1048] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1047] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1048] <... futex resumed>) = 0 [pid 1048] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1047] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1048] sendfile(6, 7, NULL, 140737974943952 [pid 1047] <... futex resumed>) = 0 [ 72.445532][ T1048] loop0: detected capacity change from 0 to 512 [ 72.455084][ T1048] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 72.471293][ T1048] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 72.481785][ T1048] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1047] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1047] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1047] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1047] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1047] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1047] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1047] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1047] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1050]}, 88) = 1050 [pid 1047] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1047] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1047] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1050 attached [pid 1050] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1050] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1050] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1047] <... futex resumed>) = 0 [pid 1047] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1050] sendmsg(-1, 0x20000000, 0 [pid 1047] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1050] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1050] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1047] <... futex resumed>) = 0 [pid 1050] <... futex resumed>) = 1 [pid 1050] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1047] exit_group(0) = ? [pid 1050] <... futex resumed>) = ? [pid 1048] <... sendfile resumed>) = ? [pid 1048] +++ exited with 0 +++ [pid 1050] +++ exited with 0 +++ [pid 1047] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1047, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./172/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./172/binderfs") = 0 umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./172/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./172/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./172/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./172") = 0 mkdir("./173", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1052 ./strace-static-x86_64: Process 1052 attached [pid 1052] set_robust_list(0x555556b826a0, 24) = 0 [pid 1052] chdir("./173") = 0 [pid 1052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1052] setpgid(0, 0) = 0 [pid 1052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1052] write(3, "1000", 4) = 4 [pid 1052] close(3) = 0 [pid 1052] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1052] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1052] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1052] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1052] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1052] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1052] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1053 attached => {parent_tid=[1053]}, 88) = 1053 [pid 1053] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1053] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1053] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1052] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1052] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1053] <... futex resumed>) = 0 [pid 1053] memfd_create("syzkaller", 0 [pid 1052] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1053] <... memfd_create resumed>) = 3 [pid 1053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1053] munmap(0x7f9627d89000, 262144) = 0 [pid 1053] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1053] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1053] close(3) = 0 [pid 1053] mkdir("./file0", 0777) = 0 [pid 1053] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1053] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1053] chdir("./file0") = 0 [pid 1053] ioctl(4, LOOP_CLR_FD) = 0 [pid 1053] close(4) = 0 [pid 1053] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = 0 [pid 1052] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1052] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1053] <... futex resumed>) = 1 [pid 1053] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1053] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = 0 [pid 1052] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1052] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1053] <... futex resumed>) = 1 [pid 1053] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1053] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = 0 [pid 1052] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1052] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1053] <... futex resumed>) = 1 [pid 1053] creat("./bus", 000) = 6 [pid 1053] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = 0 [pid 1052] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1052] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1053] <... futex resumed>) = 1 [pid 1053] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1053] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = 0 [pid 1052] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1052] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1053] <... futex resumed>) = 1 [pid 1053] open("./bus", O_RDONLY) = 7 [pid 1053] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = 0 [pid 1052] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1052] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1053] <... futex resumed>) = 1 [ 72.816983][ T1053] loop0: detected capacity change from 0 to 512 [ 72.825174][ T1053] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 72.838541][ T1053] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 72.848467][ T1053] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1053] sendfile(6, 7, NULL, 140737974943952 [pid 1052] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1052] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1052] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1052] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1052] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1052] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1052] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1055]}, 88) = 1055 [pid 1052] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1052] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1052] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1055 attached [pid 1055] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1055] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1055] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1055] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = 0 [pid 1052] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1052] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1055] <... futex resumed>) = 1 [pid 1055] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1055] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1052] <... futex resumed>) = 0 [pid 1055] <... futex resumed>) = 1 [pid 1055] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1052] exit_group(0 [pid 1055] <... futex resumed>) = ? [pid 1052] <... exit_group resumed>) = ? [pid 1055] +++ exited with 0 +++ [pid 1053] <... sendfile resumed>) = ? [pid 1053] +++ exited with 0 +++ [pid 1052] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1052, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./173/binderfs") = 0 umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./173/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./173/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./173/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./173") = 0 mkdir("./174", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1056 ./strace-static-x86_64: Process 1056 attached [pid 1056] set_robust_list(0x555556b826a0, 24) = 0 [pid 1056] chdir("./174") = 0 [pid 1056] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1056] setpgid(0, 0) = 0 [pid 1056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1056] write(3, "1000", 4) = 4 [pid 1056] close(3) = 0 [pid 1056] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1056] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1056] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1056] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1056] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1056] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1056] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1056] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1057]}, 88) = 1057 [pid 1056] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1056] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1056] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1057 attached [pid 1057] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1057] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1057] memfd_create("syzkaller", 0) = 3 [pid 1057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1057] munmap(0x7f9627d89000, 262144) = 0 [pid 1057] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1057] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1057] close(3) = 0 [pid 1057] mkdir("./file0", 0777) = 0 [pid 1057] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1057] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1057] chdir("./file0") = 0 [pid 1057] ioctl(4, LOOP_CLR_FD) = 0 [pid 1057] close(4) = 0 [pid 1057] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1056] <... futex resumed>) = 0 [pid 1056] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1056] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1057] <... futex resumed>) = 1 [pid 1057] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1057] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1056] <... futex resumed>) = 0 [pid 1056] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1056] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1057] <... futex resumed>) = 1 [pid 1057] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1057] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1056] <... futex resumed>) = 0 [pid 1056] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1056] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1057] <... futex resumed>) = 1 [pid 1057] creat("./bus", 000) = 6 [pid 1057] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1056] <... futex resumed>) = 0 [pid 1056] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1056] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1057] <... futex resumed>) = 1 [pid 1057] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1057] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1056] <... futex resumed>) = 0 [pid 1056] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1056] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1057] <... futex resumed>) = 1 [pid 1057] open("./bus", O_RDONLY) = 7 [pid 1057] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1056] <... futex resumed>) = 0 [pid 1056] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1056] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1057] <... futex resumed>) = 1 [ 73.131579][ T1057] loop0: detected capacity change from 0 to 512 [ 73.139766][ T1057] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 73.154202][ T1057] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 73.164243][ T1057] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1057] sendfile(6, 7, NULL, 140737974943952 [pid 1056] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1056] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1056] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1056] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1056] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1056] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1056] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1056] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1059 attached [pid 1059] set_robust_list(0x7f9627dc89a0, 24 [pid 1056] <... clone3 resumed> => {parent_tid=[1059]}, 88) = 1059 [pid 1059] <... set_robust_list resumed>) = 0 [pid 1059] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1059] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1056] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1056] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1056] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1059] <... futex resumed>) = 0 [pid 1059] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1059] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1056] <... futex resumed>) = 0 [pid 1056] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1056] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1059] <... futex resumed>) = 1 [pid 1059] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1059] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1056] <... futex resumed>) = 0 [pid 1059] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1056] exit_group(0) = ? [pid 1059] <... futex resumed>) = ? [pid 1059] +++ exited with 0 +++ [pid 1057] <... sendfile resumed>) = ? [pid 1057] +++ exited with 0 +++ [pid 1056] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1056, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./174/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./174/binderfs") = 0 umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./174/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./174/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./174/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./174") = 0 mkdir("./175", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1060 ./strace-static-x86_64: Process 1060 attached [pid 1060] set_robust_list(0x555556b826a0, 24) = 0 [pid 1060] chdir("./175") = 0 [pid 1060] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1060] setpgid(0, 0) = 0 [pid 1060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1060] write(3, "1000", 4) = 4 [pid 1060] close(3) = 0 [pid 1060] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1060] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1060] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1060] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1060] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1060] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1060] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1060] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1061]}, 88) = 1061 [pid 1060] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1060] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1060] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1061 attached [pid 1061] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1061] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1061] memfd_create("syzkaller", 0) = 3 [pid 1061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1061] munmap(0x7f9627d89000, 262144) = 0 [pid 1061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1061] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1061] close(3) = 0 [pid 1061] mkdir("./file0", 0777) = 0 [pid 1061] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1061] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1061] chdir("./file0") = 0 [pid 1061] ioctl(4, LOOP_CLR_FD) = 0 [pid 1061] close(4) = 0 [pid 1061] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] <... futex resumed>) = 0 [pid 1060] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1060] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1061] <... futex resumed>) = 1 [pid 1061] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1061] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] <... futex resumed>) = 0 [pid 1060] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1060] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1061] <... futex resumed>) = 1 [pid 1061] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1061] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] <... futex resumed>) = 0 [pid 1060] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1060] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1061] <... futex resumed>) = 1 [pid 1061] creat("./bus", 000) = 6 [pid 1061] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] <... futex resumed>) = 0 [pid 1060] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1060] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1061] <... futex resumed>) = 1 [pid 1061] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1061] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] <... futex resumed>) = 0 [pid 1060] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1060] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1061] <... futex resumed>) = 1 [pid 1061] open("./bus", O_RDONLY) = 7 [pid 1061] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] <... futex resumed>) = 0 [pid 1060] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1060] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1061] <... futex resumed>) = 1 [ 73.452853][ T1061] loop0: detected capacity change from 0 to 512 [ 73.461145][ T1061] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 73.476516][ T1061] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 73.487228][ T1061] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1061] sendfile(6, 7, NULL, 140737974943952 [pid 1060] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1060] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1060] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1060] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1060] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1060] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1063]}, 88) = 1063 ./strace-static-x86_64: Process 1063 attached [pid 1063] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1063] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1063] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1060] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1060] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1063] <... futex resumed>) = 0 [pid 1060] <... futex resumed>) = 1 [pid 1063] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1060] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1063] <... mmap resumed>) = 0x20000000 [pid 1063] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1060] <... futex resumed>) = 0 [pid 1060] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1063] <... futex resumed>) = 1 [pid 1060] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1063] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1063] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1060] <... futex resumed>) = 0 [pid 1063] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1060] exit_group(0 [pid 1063] <... futex resumed>) = ? [pid 1061] <... sendfile resumed>) = 231 [pid 1060] <... exit_group resumed>) = ? [pid 1063] +++ exited with 0 +++ [pid 1061] +++ exited with 0 +++ [pid 1060] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1060, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./175/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./175/binderfs") = 0 umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./175/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./175/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./175/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./175") = 0 mkdir("./176", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1064 ./strace-static-x86_64: Process 1064 attached [pid 1064] set_robust_list(0x555556b826a0, 24) = 0 [pid 1064] chdir("./176") = 0 [pid 1064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1064] setpgid(0, 0) = 0 [pid 1064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1064] write(3, "1000", 4) = 4 [pid 1064] close(3) = 0 [pid 1064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1064] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1064] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1064] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1064] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1064] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1064] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1065]}, 88) = 1065 [pid 1064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1064] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1064] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1065 attached [pid 1065] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1065] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1065] memfd_create("syzkaller", 0) = 3 [pid 1065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1065] munmap(0x7f9627d89000, 262144) = 0 [pid 1065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1065] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1065] close(3) = 0 [pid 1065] mkdir("./file0", 0777) = 0 [pid 1065] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1065] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1065] chdir("./file0") = 0 [pid 1065] ioctl(4, LOOP_CLR_FD) = 0 [pid 1065] close(4) = 0 [pid 1065] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1064] <... futex resumed>) = 0 [pid 1064] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1064] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1065] <... futex resumed>) = 1 [pid 1065] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1065] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1064] <... futex resumed>) = 0 [pid 1064] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1064] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1065] <... futex resumed>) = 1 [pid 1065] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1065] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1064] <... futex resumed>) = 0 [pid 1064] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1064] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1065] <... futex resumed>) = 1 [pid 1065] creat("./bus", 000) = 6 [pid 1065] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1064] <... futex resumed>) = 0 [pid 1064] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1064] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1065] <... futex resumed>) = 1 [pid 1065] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1065] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1064] <... futex resumed>) = 0 [pid 1064] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1064] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1065] <... futex resumed>) = 1 [pid 1065] open("./bus", O_RDONLY) = 7 [pid 1065] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1064] <... futex resumed>) = 0 [pid 1064] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1064] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1065] <... futex resumed>) = 1 [ 73.732927][ T1065] loop0: detected capacity change from 0 to 512 [ 73.741017][ T1065] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 73.760014][ T1065] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 73.770679][ T1065] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1065] sendfile(6, 7, NULL, 140737974943952 [pid 1064] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1064] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1064] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1064] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1064] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1068]}, 88) = 1068 [pid 1064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1064] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1064] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1068 attached [pid 1068] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1068] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1068] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1068] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1064] <... futex resumed>) = 0 [pid 1064] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1064] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1068] <... futex resumed>) = 1 [pid 1068] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1068] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1064] <... futex resumed>) = 0 [pid 1068] <... futex resumed>) = 1 [pid 1068] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1064] exit_group(0 [pid 1068] <... futex resumed>) = ? [pid 1064] <... exit_group resumed>) = ? [pid 1065] <... sendfile resumed>) = ? [pid 1065] +++ exited with 0 +++ [pid 1068] +++ exited with 0 +++ [pid 1064] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1064, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./176/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./176/binderfs") = 0 umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./176/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./176/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./176/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./176") = 0 mkdir("./177", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1069 ./strace-static-x86_64: Process 1069 attached [pid 1069] set_robust_list(0x555556b826a0, 24) = 0 [pid 1069] chdir("./177") = 0 [pid 1069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1069] setpgid(0, 0) = 0 [pid 1069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1069] write(3, "1000", 4) = 4 [pid 1069] close(3) = 0 [pid 1069] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1069] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1069] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1069] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1069] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1069] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1069] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1070]}, 88) = 1070 [pid 1069] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1069] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1069] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1070 attached [pid 1070] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1070] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1070] memfd_create("syzkaller", 0) = 3 [pid 1070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1070] munmap(0x7f9627d89000, 262144) = 0 [pid 1070] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1070] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1070] close(3) = 0 [pid 1070] mkdir("./file0", 0777) = 0 [ 74.048753][ T1070] loop0: detected capacity change from 0 to 512 [ 74.057465][ T1070] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 74.072600][ T1070] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 74.083950][ T1070] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1070] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1070] chdir("./file0") = 0 [pid 1070] ioctl(4, LOOP_CLR_FD) = 0 [pid 1070] close(4) = 0 [pid 1070] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1069] <... futex resumed>) = 0 [pid 1069] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1069] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1070] <... futex resumed>) = 1 [pid 1070] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1070] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1069] <... futex resumed>) = 0 [pid 1069] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1069] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1070] <... futex resumed>) = 1 [pid 1070] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1070] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1069] <... futex resumed>) = 0 [pid 1069] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1069] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1070] <... futex resumed>) = 1 [pid 1070] creat("./bus", 000) = 6 [pid 1070] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1069] <... futex resumed>) = 0 [pid 1069] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1069] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1070] <... futex resumed>) = 1 [pid 1070] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1070] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1069] <... futex resumed>) = 0 [pid 1069] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1069] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1070] <... futex resumed>) = 1 [pid 1070] open("./bus", O_RDONLY) = 7 [pid 1070] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1069] <... futex resumed>) = 0 [pid 1069] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1069] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1070] <... futex resumed>) = 1 [pid 1070] sendfile(6, 7, NULL, 140737974943952 [pid 1069] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1069] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1069] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1069] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1069] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1072]}, 88) = 1072 [pid 1069] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1069] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 74.088912][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 74.088926][ T30] audit: type=1400 audit(1695567764.197:78): avc: denied { remove_name } for pid=81 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [pid 1069] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1072 attached [pid 1072] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1072] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1072] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1072] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1072] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1069] <... futex resumed>) = 0 [pid 1069] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1069] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1072] <... futex resumed>) = 0 [pid 1072] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1072] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1069] <... futex resumed>) = 0 [pid 1072] <... futex resumed>) = 1 [ 74.125879][ T30] audit: type=1400 audit(1695567764.197:79): avc: denied { rename } for pid=81 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [pid 1072] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1069] exit_group(0 [pid 1072] <... futex resumed>) = ? [pid 1069] <... exit_group resumed>) = ? [pid 1072] +++ exited with 0 +++ [pid 1070] <... sendfile resumed>) = ? [pid 1070] +++ exited with 0 +++ [pid 1069] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1069, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./177/binderfs") = 0 umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./177/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./177/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./177/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./177") = 0 mkdir("./178", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1073 ./strace-static-x86_64: Process 1073 attached [pid 1073] set_robust_list(0x555556b826a0, 24) = 0 [pid 1073] chdir("./178") = 0 [pid 1073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1073] setpgid(0, 0) = 0 [pid 1073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1073] write(3, "1000", 4) = 4 [pid 1073] close(3) = 0 [pid 1073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1073] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1073] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1073] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1073] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1073] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1073] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1074 attached => {parent_tid=[1074]}, 88) = 1074 [pid 1074] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1074] rt_sigprocmask(SIG_SETMASK, [], [pid 1073] rt_sigprocmask(SIG_SETMASK, [], [pid 1074] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1074] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1073] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1073] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1074] <... futex resumed>) = 0 [pid 1074] memfd_create("syzkaller", 0 [pid 1073] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1074] <... memfd_create resumed>) = 3 [pid 1074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1074] munmap(0x7f9627d89000, 262144) = 0 [pid 1074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1074] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1074] close(3) = 0 [pid 1074] mkdir("./file0", 0777) = 0 [ 74.344598][ T1074] loop0: detected capacity change from 0 to 512 [ 74.364393][ T1074] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 74.380432][ T1074] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1074] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1074] chdir("./file0") = 0 [pid 1074] ioctl(4, LOOP_CLR_FD) = 0 [pid 1074] close(4) = 0 [pid 1074] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1073] <... futex resumed>) = 0 [pid 1073] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1073] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1074] <... futex resumed>) = 1 [pid 1074] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1074] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1073] <... futex resumed>) = 0 [pid 1073] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1073] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1074] <... futex resumed>) = 1 [pid 1074] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1074] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1073] <... futex resumed>) = 0 [pid 1073] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1073] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1074] <... futex resumed>) = 1 [pid 1074] creat("./bus", 000) = 6 [pid 1074] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1073] <... futex resumed>) = 0 [pid 1073] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1073] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1074] <... futex resumed>) = 1 [pid 1074] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1074] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1073] <... futex resumed>) = 0 [pid 1073] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1073] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1074] <... futex resumed>) = 1 [pid 1074] open("./bus", O_RDONLY) = 7 [pid 1074] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1073] <... futex resumed>) = 0 [pid 1073] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1073] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1074] <... futex resumed>) = 1 [pid 1074] sendfile(6, 7, NULL, 140737974943952 [pid 1073] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1073] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1073] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 74.391645][ T1074] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1073] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1073] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1073] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1076]}, 88) = 1076 [pid 1073] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1073] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1073] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1076 attached [pid 1076] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1076] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1076] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1076] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1073] <... futex resumed>) = 0 [pid 1073] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1076] sendmsg(-1, 0x20000000, 0 [pid 1073] <... futex resumed>) = 0 [pid 1073] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1076] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1076] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1073] <... futex resumed>) = 0 [pid 1076] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1073] exit_group(0 [pid 1076] <... futex resumed>) = ? [pid 1073] <... exit_group resumed>) = ? [pid 1076] +++ exited with 0 +++ [pid 1074] <... sendfile resumed>) = ? [pid 1074] +++ exited with 0 +++ [pid 1073] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1073, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./178/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./178/binderfs") = 0 umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./178/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./178/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./178/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./178") = 0 mkdir("./179", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1077 ./strace-static-x86_64: Process 1077 attached [pid 1077] set_robust_list(0x555556b826a0, 24) = 0 [pid 1077] chdir("./179") = 0 [pid 1077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1077] setpgid(0, 0) = 0 [pid 1077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1077] write(3, "1000", 4) = 4 [pid 1077] close(3) = 0 [pid 1077] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1077] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1077] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1077] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1077] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1077] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1077] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1078]}, 88) = 1078 [pid 1077] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1077] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1077] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1078 attached [pid 1078] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1078] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1078] memfd_create("syzkaller", 0) = 3 [pid 1078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1078] munmap(0x7f9627d89000, 262144) = 0 [pid 1078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1078] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1078] close(3) = 0 [pid 1078] mkdir("./file0", 0777) = 0 [pid 1078] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1078] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1078] chdir("./file0") = 0 [pid 1078] ioctl(4, LOOP_CLR_FD) = 0 [pid 1078] close(4) = 0 [pid 1078] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1077] <... futex resumed>) = 0 [pid 1077] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1077] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1078] <... futex resumed>) = 1 [pid 1078] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1078] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1077] <... futex resumed>) = 0 [pid 1077] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1077] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1078] <... futex resumed>) = 1 [pid 1078] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1078] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1078] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1077] <... futex resumed>) = 0 [pid 1077] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1077] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1078] <... futex resumed>) = 0 [pid 1078] creat("./bus", 000) = 6 [pid 1078] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1078] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1077] <... futex resumed>) = 0 [pid 1077] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1077] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1078] <... futex resumed>) = 0 [pid 1078] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1078] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1077] <... futex resumed>) = 0 [pid 1077] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1077] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1078] open("./bus", O_RDONLY) = 7 [pid 1078] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1077] <... futex resumed>) = 0 [pid 1078] <... futex resumed>) = 1 [pid 1077] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1077] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 74.681490][ T1078] loop0: detected capacity change from 0 to 512 [ 74.691295][ T1078] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 74.704552][ T1078] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 74.714298][ T1078] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1078] sendfile(6, 7, NULL, 140737974943952 [pid 1077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1077] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1077] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1077] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1077] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1077] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1077] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1081 attached [pid 1081] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1081] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1081] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1077] <... clone3 resumed> => {parent_tid=[1081]}, 88) = 1081 [pid 1077] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1077] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1081] <... futex resumed>) = 0 [pid 1077] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1081] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1081] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1081] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1077] <... futex resumed>) = 0 [pid 1077] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1081] <... futex resumed>) = 0 [pid 1077] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1081] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1081] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1077] <... futex resumed>) = 0 [pid 1081] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1077] exit_group(0 [pid 1081] <... futex resumed>) = ? [pid 1077] <... exit_group resumed>) = ? [pid 1081] +++ exited with 0 +++ [pid 1078] <... sendfile resumed>) = ? [pid 1078] +++ exited with 0 +++ [pid 1077] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1077, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./179/binderfs") = 0 umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./179/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./179/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./179/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./179") = 0 mkdir("./180", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1082 ./strace-static-x86_64: Process 1082 attached [pid 1082] set_robust_list(0x555556b826a0, 24) = 0 [pid 1082] chdir("./180") = 0 [pid 1082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1082] setpgid(0, 0) = 0 [pid 1082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1082] write(3, "1000", 4) = 4 [pid 1082] close(3) = 0 [pid 1082] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1082] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1082] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1082] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1082] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1082] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1082] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1083]}, 88) = 1083 [pid 1082] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1082] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1082] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1083 attached [pid 1083] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1083] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1083] memfd_create("syzkaller", 0) = 3 [pid 1083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1083] munmap(0x7f9627d89000, 262144) = 0 [pid 1083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1083] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1083] close(3) = 0 [pid 1083] mkdir("./file0", 0777) = 0 [pid 1083] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1083] chdir("./file0") = 0 [pid 1083] ioctl(4, LOOP_CLR_FD) = 0 [pid 1083] close(4) = 0 [pid 1083] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1083] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1082] <... futex resumed>) = 0 [pid 1082] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1082] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1083] <... futex resumed>) = 0 [pid 1083] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1083] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1082] <... futex resumed>) = 0 [pid 1082] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1082] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1083] <... futex resumed>) = 1 [pid 1083] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1083] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1082] <... futex resumed>) = 0 [pid 1082] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1082] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1083] <... futex resumed>) = 1 [pid 1083] creat("./bus", 000) = 6 [pid 1083] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1082] <... futex resumed>) = 0 [pid 1082] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1082] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1083] <... futex resumed>) = 1 [pid 1083] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1083] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1082] <... futex resumed>) = 0 [pid 1082] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1082] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1083] <... futex resumed>) = 1 [pid 1083] open("./bus", O_RDONLY) = 7 [pid 1083] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1082] <... futex resumed>) = 0 [pid 1082] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1082] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1083] <... futex resumed>) = 1 [ 75.012078][ T1083] loop0: detected capacity change from 0 to 512 [ 75.020126][ T1083] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 75.034127][ T1083] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 75.044881][ T1083] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1083] sendfile(6, 7, NULL, 140737974943952 [pid 1082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1082] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1082] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1082] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1082] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1082] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1082] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1085 attached => {parent_tid=[1085]}, 88) = 1085 [pid 1085] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1085] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1085] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1082] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1082] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1082] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1085] <... futex resumed>) = 0 [pid 1085] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1085] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1085] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1082] <... futex resumed>) = 0 [pid 1082] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1085] <... futex resumed>) = 0 [pid 1082] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1085] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1085] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1085] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1082] <... futex resumed>) = 0 [pid 1082] exit_group(0 [pid 1085] <... futex resumed>) = ? [pid 1082] <... exit_group resumed>) = ? [pid 1083] <... sendfile resumed>) = ? [pid 1083] +++ exited with 0 +++ [pid 1085] +++ exited with 0 +++ [pid 1082] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1082, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./180/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./180/binderfs") = 0 umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./180/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./180/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./180/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./180") = 0 mkdir("./181", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1086 ./strace-static-x86_64: Process 1086 attached [pid 1086] set_robust_list(0x555556b826a0, 24) = 0 [pid 1086] chdir("./181") = 0 [pid 1086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1086] setpgid(0, 0) = 0 [pid 1086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1086] write(3, "1000", 4) = 4 [pid 1086] close(3) = 0 [pid 1086] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1086] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1086] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1086] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1086] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1086] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1086] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1087]}, 88) = 1087 [pid 1086] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1086] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1086] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1087 attached [pid 1087] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1087] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1087] memfd_create("syzkaller", 0) = 3 [pid 1087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1087] munmap(0x7f9627d89000, 262144) = 0 [pid 1087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1087] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1087] close(3) = 0 [pid 1087] mkdir("./file0", 0777) = 0 [pid 1087] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1087] chdir("./file0") = 0 [pid 1087] ioctl(4, LOOP_CLR_FD) = 0 [pid 1087] close(4) = 0 [pid 1087] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1086] <... futex resumed>) = 0 [pid 1086] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1086] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1087] <... futex resumed>) = 1 [pid 1087] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1087] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1086] <... futex resumed>) = 0 [pid 1086] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1086] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1087] <... futex resumed>) = 1 [pid 1087] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1087] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1087] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1086] <... futex resumed>) = 0 [pid 1086] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1086] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1087] <... futex resumed>) = 0 [pid 1087] creat("./bus", 000) = 6 [pid 1087] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1086] <... futex resumed>) = 0 [pid 1087] <... futex resumed>) = 1 [pid 1086] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1086] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1087] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1087] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1086] <... futex resumed>) = 0 [pid 1087] open("./bus", O_RDONLY [pid 1086] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1087] <... open resumed>) = 7 [pid 1086] <... futex resumed>) = 0 [pid 1087] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1086] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1087] <... futex resumed>) = 0 [pid 1087] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1086] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1087] sendfile(6, 7, NULL, 140737974943952 [pid 1086] <... futex resumed>) = 0 [ 75.291690][ T1087] loop0: detected capacity change from 0 to 512 [ 75.299933][ T1087] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 75.313301][ T1087] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 75.324342][ T1087] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1086] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1086] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1086] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1086] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1086] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1089 attached => {parent_tid=[1089]}, 88) = 1089 [pid 1089] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1089] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1089] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1086] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1086] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1089] <... futex resumed>) = 0 [pid 1086] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1089] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1089] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1086] <... futex resumed>) = 0 [pid 1086] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1089] sendmsg(-1, 0x20000000, 0 [pid 1086] <... futex resumed>) = 0 [pid 1089] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1086] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1089] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1086] <... futex resumed>) = 0 [pid 1089] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1086] exit_group(0 [pid 1089] <... futex resumed>) = ? [pid 1086] <... exit_group resumed>) = ? [pid 1089] +++ exited with 0 +++ [pid 1087] <... sendfile resumed>) = ? [pid 1087] +++ exited with 0 +++ [pid 1086] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1086, si_uid=0, si_status=0, si_utime=0, si_stime=19} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./181/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./181/binderfs") = 0 umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./181/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./181/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./181/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./181") = 0 mkdir("./182", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1090 ./strace-static-x86_64: Process 1090 attached [pid 1090] set_robust_list(0x555556b826a0, 24) = 0 [pid 1090] chdir("./182") = 0 [pid 1090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1090] setpgid(0, 0) = 0 [pid 1090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1090] write(3, "1000", 4) = 4 [pid 1090] close(3) = 0 [pid 1090] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1090] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1090] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1090] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1090] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1091]}, 88) = 1091 [pid 1090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1090] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1090] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1091 attached [pid 1091] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1091] memfd_create("syzkaller", 0) = 3 [pid 1091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1091] munmap(0x7f9627d89000, 262144) = 0 [pid 1091] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1091] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1091] close(3) = 0 [pid 1091] mkdir("./file0", 0777) = 0 [pid 1091] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1091] chdir("./file0") = 0 [pid 1091] ioctl(4, LOOP_CLR_FD) = 0 [pid 1091] close(4) = 0 [pid 1091] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1090] <... futex resumed>) = 0 [pid 1090] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1090] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1091] <... futex resumed>) = 1 [pid 1091] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1091] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1090] <... futex resumed>) = 0 [pid 1090] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1090] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1091] <... futex resumed>) = 1 [pid 1091] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1091] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1090] <... futex resumed>) = 0 [pid 1090] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1090] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1091] <... futex resumed>) = 1 [pid 1091] creat("./bus", 000) = 6 [pid 1091] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1090] <... futex resumed>) = 0 [pid 1090] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1090] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1091] <... futex resumed>) = 1 [pid 1091] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1091] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1090] <... futex resumed>) = 0 [pid 1090] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1090] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1091] <... futex resumed>) = 1 [pid 1091] open("./bus", O_RDONLY) = 7 [pid 1091] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1090] <... futex resumed>) = 0 [pid 1090] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1090] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1091] <... futex resumed>) = 1 [ 75.579712][ T1091] loop0: detected capacity change from 0 to 512 [ 75.588411][ T1091] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 75.601998][ T1091] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 75.612727][ T1091] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1091] sendfile(6, 7, NULL, 140737974943952 [pid 1090] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1090] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1090] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1093]}, 88) = 1093 [pid 1090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1090] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1090] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1093 attached [pid 1093] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1093] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1093] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1093] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1090] <... futex resumed>) = 0 [pid 1090] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1090] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1093] <... futex resumed>) = 1 [pid 1093] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1093] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1090] <... futex resumed>) = 0 [pid 1093] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1090] exit_group(0) = ? [pid 1093] <... futex resumed>) = ? [pid 1093] +++ exited with 0 +++ [pid 1091] <... sendfile resumed>) = ? [pid 1091] +++ exited with 0 +++ [pid 1090] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1090, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./182/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./182/binderfs") = 0 umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./182/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./182/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./182/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./182") = 0 mkdir("./183", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1095 ./strace-static-x86_64: Process 1095 attached [pid 1095] set_robust_list(0x555556b826a0, 24) = 0 [pid 1095] chdir("./183") = 0 [pid 1095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1095] setpgid(0, 0) = 0 [pid 1095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1095] write(3, "1000", 4) = 4 [pid 1095] close(3) = 0 [pid 1095] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1095] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1095] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1095] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1095] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1095] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1095] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1096 attached => {parent_tid=[1096]}, 88) = 1096 [pid 1096] set_robust_list(0x7f96301a99a0, 24 [pid 1095] rt_sigprocmask(SIG_SETMASK, [], [pid 1096] <... set_robust_list resumed>) = 0 [pid 1096] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1096] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1095] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1095] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1095] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1096] <... futex resumed>) = 0 [pid 1096] memfd_create("syzkaller", 0) = 3 [pid 1096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1096] munmap(0x7f9627d89000, 262144) = 0 [pid 1096] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1096] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1096] close(3) = 0 [pid 1096] mkdir("./file0", 0777) = 0 [pid 1096] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1096] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1096] chdir("./file0") = 0 [pid 1096] ioctl(4, LOOP_CLR_FD) = 0 [pid 1096] close(4) = 0 [pid 1096] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = 0 [pid 1095] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1095] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1096] <... futex resumed>) = 1 [pid 1096] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1096] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = 0 [pid 1095] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1095] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1096] <... futex resumed>) = 1 [pid 1096] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1096] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1096] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1095] <... futex resumed>) = 0 [pid 1095] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1095] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1096] <... futex resumed>) = 0 [pid 1096] creat("./bus", 000) = 6 [pid 1096] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1096] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1095] <... futex resumed>) = 0 [pid 1095] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1095] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1096] <... futex resumed>) = 0 [pid 1096] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1096] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = 0 [pid 1095] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1095] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1096] <... futex resumed>) = 1 [pid 1096] open("./bus", O_RDONLY) = 7 [pid 1096] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1095] <... futex resumed>) = 0 [pid 1096] sendfile(6, 7, NULL, 140737974943952 [pid 1095] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 75.864656][ T1096] loop0: detected capacity change from 0 to 512 [ 75.873160][ T1096] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 75.888946][ T1096] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 75.898783][ T1096] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1095] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1095] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1095] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1095] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1095] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1095] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1098]}, 88) = 1098 [pid 1095] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1095] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1095] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1098 attached [pid 1098] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1098] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1098] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1098] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = 0 [pid 1095] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1095] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1098] <... futex resumed>) = 1 [pid 1098] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1098] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = 0 [pid 1098] <... futex resumed>) = 1 [pid 1098] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1095] exit_group(0) = ? [pid 1098] <... futex resumed>) = ? [pid 1098] +++ exited with 0 +++ [pid 1096] <... sendfile resumed>) = ? [pid 1096] +++ exited with 0 +++ [pid 1095] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1095, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./183/binderfs") = 0 umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./183/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./183/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./183/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./183") = 0 mkdir("./184", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1099 ./strace-static-x86_64: Process 1099 attached [pid 1099] set_robust_list(0x555556b826a0, 24) = 0 [pid 1099] chdir("./184") = 0 [pid 1099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1099] setpgid(0, 0) = 0 [pid 1099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1099] write(3, "1000", 4) = 4 [pid 1099] close(3) = 0 [pid 1099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1099] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1099] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1099] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1099] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1099] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1100 attached => {parent_tid=[1100]}, 88) = 1100 [pid 1099] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1099] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1100] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1100] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1100] memfd_create("syzkaller", 0) = 3 [pid 1100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1100] munmap(0x7f9627d89000, 262144) = 0 [pid 1100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1100] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1100] close(3) = 0 [pid 1100] mkdir("./file0", 0777) = 0 [pid 1100] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1100] chdir("./file0") = 0 [pid 1100] ioctl(4, LOOP_CLR_FD) = 0 [pid 1100] close(4) = 0 [pid 1100] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1099] <... futex resumed>) = 0 [pid 1099] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1100] <... futex resumed>) = 1 [pid 1100] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1100] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1099] <... futex resumed>) = 0 [pid 1100] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1099] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1099] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1100] <... futex resumed>) = 0 [pid 1100] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1100] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1100] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1099] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1099] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1100] <... futex resumed>) = 0 [pid 1100] creat("./bus", 000) = 6 [pid 1100] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1099] <... futex resumed>) = 0 [pid 1099] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1100] <... futex resumed>) = 1 [pid 1100] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1100] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1099] <... futex resumed>) = 0 [pid 1099] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1100] <... futex resumed>) = 1 [pid 1100] open("./bus", O_RDONLY) = 7 [pid 1100] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1099] <... futex resumed>) = 0 [pid 1099] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1100] <... futex resumed>) = 1 [ 76.195884][ T1100] loop0: detected capacity change from 0 to 512 [ 76.204363][ T1100] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 76.217534][ T1100] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 76.227214][ T1100] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1100] sendfile(6, 7, NULL, 140737974943952 [pid 1099] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1099] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1099] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1099] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1099] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1099] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1102 attached => {parent_tid=[1102]}, 88) = 1102 [pid 1099] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1099] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1102] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1102] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1102] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1102] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1099] <... futex resumed>) = 0 [pid 1099] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1102] <... futex resumed>) = 1 [pid 1099] <... futex resumed>) = 0 [pid 1099] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1102] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1102] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1099] <... futex resumed>) = 0 [pid 1102] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1099] exit_group(0 [pid 1102] <... futex resumed>) = ? [pid 1099] <... exit_group resumed>) = ? [pid 1102] +++ exited with 0 +++ [pid 1100] <... sendfile resumed>) = ? [pid 1100] +++ exited with 0 +++ [pid 1099] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1099, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./184/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./184/binderfs") = 0 umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./184/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./184/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./184/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./184") = 0 mkdir("./185", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1103 ./strace-static-x86_64: Process 1103 attached [pid 1103] set_robust_list(0x555556b826a0, 24) = 0 [pid 1103] chdir("./185") = 0 [pid 1103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1103] setpgid(0, 0) = 0 [pid 1103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1103] write(3, "1000", 4) = 4 [pid 1103] close(3) = 0 [pid 1103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1103] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1103] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1103] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1103] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1103] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1103] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1104 attached [pid 1104] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1104] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1104] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1103] <... clone3 resumed> => {parent_tid=[1104]}, 88) = 1104 [pid 1103] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1103] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1104] <... futex resumed>) = 0 [pid 1104] memfd_create("syzkaller", 0) = 3 [pid 1104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1103] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1104] munmap(0x7f9627d89000, 262144) = 0 [pid 1104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1104] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1104] close(3) = 0 [pid 1104] mkdir("./file0", 0777) = 0 [pid 1104] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1104] chdir("./file0") = 0 [pid 1104] ioctl(4, LOOP_CLR_FD) = 0 [pid 1104] close(4) = 0 [pid 1104] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = 0 [pid 1103] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1103] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1104] <... futex resumed>) = 1 [pid 1104] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1104] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1104] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1103] <... futex resumed>) = 0 [pid 1103] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1103] <... futex resumed>) = 0 [pid 1104] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1103] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1104] <... open resumed>) = 5 [pid 1104] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1104] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1103] <... futex resumed>) = 0 [pid 1104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1103] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1104] creat("./bus", 000) = 6 [pid 1104] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = 0 [pid 1104] <... futex resumed>) = 0 [pid 1104] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1103] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1103] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1103] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1104] <... futex resumed>) = 0 [pid 1104] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1104] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = 0 [pid 1103] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1103] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1104] <... futex resumed>) = 1 [pid 1104] open("./bus", O_RDONLY) = 7 [pid 1104] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1103] <... futex resumed>) = 0 [pid 1103] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1103] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 76.496003][ T1104] loop0: detected capacity change from 0 to 512 [ 76.504033][ T1104] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 76.517170][ T1104] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 76.527001][ T1104] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1104] sendfile(6, 7, NULL, 140737974943952 [pid 1103] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1103] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1103] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1103] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1103] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1103] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1103] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1103] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1106 attached => {parent_tid=[1106]}, 88) = 1106 [pid 1103] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1103] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1103] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1106] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1106] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1106] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1106] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1103] <... futex resumed>) = 0 [pid 1103] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1103] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1106] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1106] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1103] <... futex resumed>) = 0 [pid 1106] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1103] exit_group(0 [pid 1106] <... futex resumed>) = ? [pid 1103] <... exit_group resumed>) = ? [pid 1106] +++ exited with 0 +++ [pid 1104] <... sendfile resumed>) = ? [pid 1104] +++ exited with 0 +++ [pid 1103] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1103, si_uid=0, si_status=0, si_utime=0, si_stime=19} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./185/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./185/binderfs") = 0 umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./185/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./185/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./185/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./185") = 0 mkdir("./186", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1108 ./strace-static-x86_64: Process 1108 attached [pid 1108] set_robust_list(0x555556b826a0, 24) = 0 [pid 1108] chdir("./186") = 0 [pid 1108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1108] setpgid(0, 0) = 0 [pid 1108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1108] write(3, "1000", 4) = 4 [pid 1108] close(3) = 0 [pid 1108] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1108] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1108] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1108] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1108] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1108] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1108] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1109]}, 88) = 1109 [pid 1108] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1108] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1108] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1109 attached [pid 1109] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1109] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1109] memfd_create("syzkaller", 0) = 3 [pid 1109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1109] munmap(0x7f9627d89000, 262144) = 0 [pid 1109] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1109] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1109] close(3) = 0 [pid 1109] mkdir("./file0", 0777) = 0 [pid 1109] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1109] chdir("./file0") = 0 [pid 1109] ioctl(4, LOOP_CLR_FD) = 0 [pid 1109] close(4) = 0 [pid 1109] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1108] <... futex resumed>) = 0 [pid 1108] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1108] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1109] <... futex resumed>) = 1 [pid 1109] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1109] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1108] <... futex resumed>) = 0 [pid 1108] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1108] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1109] <... futex resumed>) = 1 [pid 1109] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1109] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1108] <... futex resumed>) = 0 [pid 1108] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1108] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1109] <... futex resumed>) = 1 [pid 1109] creat("./bus", 000) = 6 [pid 1109] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1108] <... futex resumed>) = 0 [pid 1108] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1108] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1109] <... futex resumed>) = 1 [pid 1109] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1109] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1108] <... futex resumed>) = 0 [pid 1108] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1108] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1109] <... futex resumed>) = 1 [pid 1109] open("./bus", O_RDONLY) = 7 [pid 1109] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1108] <... futex resumed>) = 0 [pid 1109] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1108] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1108] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 76.776372][ T1109] loop0: detected capacity change from 0 to 512 [ 76.785328][ T1109] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 76.800309][ T1109] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 76.810086][ T1109] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1109] sendfile(6, 7, NULL, 140737974943952 [pid 1108] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1108] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1108] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1108] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1108] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1108] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1108] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1108] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1111 attached => {parent_tid=[1111]}, 88) = 1111 [pid 1108] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1108] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1108] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1111] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1111] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1111] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1111] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1108] <... futex resumed>) = 0 [pid 1108] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1108] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1111] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1111] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1108] <... futex resumed>) = 0 [pid 1111] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1108] exit_group(0 [pid 1111] <... futex resumed>) = ? [pid 1108] <... exit_group resumed>) = ? [pid 1111] +++ exited with 0 +++ [pid 1109] <... sendfile resumed>) = ? [pid 1109] +++ exited with 0 +++ [pid 1108] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1108, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./186/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./186/binderfs") = 0 umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./186/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./186/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./186/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./186") = 0 mkdir("./187", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1112 ./strace-static-x86_64: Process 1112 attached [pid 1112] set_robust_list(0x555556b826a0, 24) = 0 [pid 1112] chdir("./187") = 0 [pid 1112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1112] setpgid(0, 0) = 0 [pid 1112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1112] write(3, "1000", 4) = 4 [pid 1112] close(3) = 0 [pid 1112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1112] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1112] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1112] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1112] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1112] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1112] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1113]}, 88) = 1113 [pid 1112] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1112] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1112] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1113 attached [pid 1113] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1113] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1113] memfd_create("syzkaller", 0) = 3 [pid 1113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1113] munmap(0x7f9627d89000, 262144) = 0 [pid 1113] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1113] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1113] close(3) = 0 [pid 1113] mkdir("./file0", 0777) = 0 [pid 1113] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1113] chdir("./file0") = 0 [pid 1113] ioctl(4, LOOP_CLR_FD) = 0 [pid 1113] close(4) = 0 [pid 1113] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1112] <... futex resumed>) = 0 [pid 1112] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1112] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1113] <... futex resumed>) = 1 [pid 1113] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1113] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1112] <... futex resumed>) = 0 [pid 1112] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1112] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1113] <... futex resumed>) = 1 [pid 1113] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1113] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1112] <... futex resumed>) = 0 [pid 1112] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1112] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1113] <... futex resumed>) = 1 [pid 1113] creat("./bus", 000) = 6 [pid 1113] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1112] <... futex resumed>) = 0 [pid 1112] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1112] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1113] <... futex resumed>) = 1 [pid 1113] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1113] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1112] <... futex resumed>) = 0 [pid 1112] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1112] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1113] <... futex resumed>) = 1 [pid 1113] open("./bus", O_RDONLY) = 7 [pid 1113] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1112] <... futex resumed>) = 0 [pid 1112] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1112] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1113] <... futex resumed>) = 1 [ 77.081647][ T1113] loop0: detected capacity change from 0 to 512 [ 77.091112][ T1113] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 77.104101][ T1113] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 77.113784][ T1113] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1113] sendfile(6, 7, NULL, 140737974943952 [pid 1112] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1112] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1112] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1112] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1112] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1112] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1115 attached => {parent_tid=[1115]}, 88) = 1115 [pid 1115] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1115] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1115] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1112] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1112] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1115] <... futex resumed>) = 0 [pid 1112] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1115] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1115] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1112] <... futex resumed>) = 0 [pid 1112] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1112] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1115] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1115] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1112] <... futex resumed>) = 0 [pid 1115] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1112] exit_group(0 [pid 1115] <... futex resumed>) = ? [pid 1112] <... exit_group resumed>) = ? [pid 1115] +++ exited with 0 +++ [pid 1113] <... sendfile resumed>) = ? [pid 1113] +++ exited with 0 +++ [pid 1112] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1112, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./187/binderfs") = 0 umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./187/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./187/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./187") = 0 mkdir("./188", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1116 ./strace-static-x86_64: Process 1116 attached [pid 1116] set_robust_list(0x555556b826a0, 24) = 0 [pid 1116] chdir("./188") = 0 [pid 1116] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1116] setpgid(0, 0) = 0 [pid 1116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1116] write(3, "1000", 4) = 4 [pid 1116] close(3) = 0 [pid 1116] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1116] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1116] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1116] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1116] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1116] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1116] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1117]}, 88) = 1117 [pid 1116] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1116] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1116] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1117 attached [pid 1117] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1117] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1117] memfd_create("syzkaller", 0) = 3 [pid 1117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1117] munmap(0x7f9627d89000, 262144) = 0 [pid 1117] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1117] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1117] close(3) = 0 [pid 1117] mkdir("./file0", 0777) = 0 [pid 1117] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1117] chdir("./file0") = 0 [pid 1117] ioctl(4, LOOP_CLR_FD) = 0 [pid 1117] close(4) = 0 [pid 1117] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1117] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1116] <... futex resumed>) = 0 [pid 1116] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1116] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1117] <... futex resumed>) = 0 [pid 1117] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1117] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1116] <... futex resumed>) = 0 [pid 1116] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1116] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1117] <... futex resumed>) = 1 [pid 1117] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1117] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1116] <... futex resumed>) = 0 [pid 1116] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1116] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1117] <... futex resumed>) = 1 [pid 1117] creat("./bus", 000) = 6 [pid 1117] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1116] <... futex resumed>) = 0 [pid 1116] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1116] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1117] <... futex resumed>) = 1 [pid 1117] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1117] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1116] <... futex resumed>) = 0 [pid 1117] open("./bus", O_RDONLY [pid 1116] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1116] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1117] <... open resumed>) = 7 [pid 1117] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1116] <... futex resumed>) = 0 [pid 1116] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1116] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 77.369807][ T1117] loop0: detected capacity change from 0 to 512 [ 77.379191][ T1117] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 77.392484][ T1117] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 77.402297][ T1117] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1117] sendfile(6, 7, NULL, 140737974943952 [pid 1116] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1116] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1116] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1116] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1116] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1119]}, 88) = 1119 [pid 1116] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1116] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1119 attached [pid 1119] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1119] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1119] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1116] <... futex resumed>) = 0 [pid 1116] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1119] <... mmap resumed>) = 0x20000000 [pid 1119] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1116] <... futex resumed>) = 0 [pid 1116] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1116] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1119] <... futex resumed>) = 1 [pid 1119] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1119] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1116] <... futex resumed>) = 0 [pid 1119] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1116] exit_group(0 [pid 1119] <... futex resumed>) = ? [pid 1116] <... exit_group resumed>) = ? [pid 1119] +++ exited with 0 +++ [pid 1117] <... sendfile resumed>) = ? [pid 1117] +++ exited with 0 +++ [pid 1116] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1116, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./188/binderfs") = 0 umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./188/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./188/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./188") = 0 mkdir("./189", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1120 ./strace-static-x86_64: Process 1120 attached [pid 1120] set_robust_list(0x555556b826a0, 24) = 0 [pid 1120] chdir("./189") = 0 [pid 1120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1120] setpgid(0, 0) = 0 [pid 1120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1120] write(3, "1000", 4) = 4 [pid 1120] close(3) = 0 [pid 1120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1120] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1120] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1120] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1120] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1120] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1121 attached [pid 1121] set_robust_list(0x7f96301a99a0, 24 [pid 1120] <... clone3 resumed> => {parent_tid=[1121]}, 88) = 1121 [pid 1121] <... set_robust_list resumed>) = 0 [pid 1120] rt_sigprocmask(SIG_SETMASK, [], [pid 1121] rt_sigprocmask(SIG_SETMASK, [], [pid 1120] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1121] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1120] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1121] memfd_create("syzkaller", 0) = 3 [pid 1121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1121] munmap(0x7f9627d89000, 262144) = 0 [pid 1121] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1121] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1121] close(3) = 0 [pid 1121] mkdir("./file0", 0777) = 0 [pid 1121] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1121] chdir("./file0") = 0 [pid 1121] ioctl(4, LOOP_CLR_FD) = 0 [pid 1121] close(4) = 0 [pid 1121] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] <... futex resumed>) = 0 [pid 1120] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1121] <... futex resumed>) = 1 [pid 1121] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1121] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] <... futex resumed>) = 0 [pid 1120] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1121] <... futex resumed>) = 1 [pid 1121] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1121] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] <... futex resumed>) = 0 [pid 1120] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1121] <... futex resumed>) = 1 [pid 1121] creat("./bus", 000) = 6 [pid 1121] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] <... futex resumed>) = 0 [pid 1120] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1121] <... futex resumed>) = 1 [pid 1121] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1121] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] <... futex resumed>) = 0 [pid 1120] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1121] <... futex resumed>) = 1 [pid 1121] open("./bus", O_RDONLY) = 7 [pid 1121] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] <... futex resumed>) = 0 [pid 1120] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1121] <... futex resumed>) = 1 [ 77.695233][ T1121] loop0: detected capacity change from 0 to 512 [ 77.703258][ T1121] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 77.716259][ T1121] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 77.726036][ T1121] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1121] sendfile(6, 7, NULL, 140737974943952 [pid 1120] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1120] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1120] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1120] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1120] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1124 attached => {parent_tid=[1124]}, 88) = 1124 [pid 1124] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1124] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1120] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1120] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1120] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1124] <... futex resumed>) = 0 [pid 1124] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1124] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1120] <... futex resumed>) = 0 [pid 1120] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1124] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1124] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1120] <... futex resumed>) = 0 [pid 1124] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1120] exit_group(0) = ? [pid 1124] <... futex resumed>) = ? [pid 1124] +++ exited with 0 +++ [pid 1121] <... sendfile resumed>) = ? [pid 1121] +++ exited with 0 +++ [pid 1120] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1120, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./189/binderfs") = 0 umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./189/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./189/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./189") = 0 mkdir("./190", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1125 ./strace-static-x86_64: Process 1125 attached [pid 1125] set_robust_list(0x555556b826a0, 24) = 0 [pid 1125] chdir("./190") = 0 [pid 1125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1125] setpgid(0, 0) = 0 [pid 1125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1125] write(3, "1000", 4) = 4 [pid 1125] close(3) = 0 [pid 1125] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1125] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1125] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1125] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1125] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1125] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1125] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1126]}, 88) = 1126 [pid 1125] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1125] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1125] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1126 attached [pid 1126] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1126] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1126] memfd_create("syzkaller", 0) = 3 [pid 1126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1126] munmap(0x7f9627d89000, 262144) = 0 [pid 1126] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1126] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1126] close(3) = 0 [pid 1126] mkdir("./file0", 0777) = 0 [pid 1126] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1126] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1126] chdir("./file0") = 0 [pid 1126] ioctl(4, LOOP_CLR_FD) = 0 [pid 1126] close(4) = 0 [pid 1126] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1126] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1125] <... futex resumed>) = 0 [pid 1125] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1125] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1126] <... futex resumed>) = 0 [pid 1126] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1126] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... futex resumed>) = 0 [pid 1125] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1125] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1126] <... futex resumed>) = 1 [pid 1126] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1126] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... futex resumed>) = 0 [pid 1125] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1125] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1126] <... futex resumed>) = 1 [pid 1126] creat("./bus", 000) = 6 [pid 1126] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... futex resumed>) = 0 [pid 1125] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1125] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1126] <... futex resumed>) = 1 [pid 1126] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1126] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... futex resumed>) = 0 [pid 1125] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1125] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1126] <... futex resumed>) = 1 [pid 1126] open("./bus", O_RDONLY) = 7 [pid 1126] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... futex resumed>) = 0 [pid 1125] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1125] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1126] <... futex resumed>) = 1 [ 78.013649][ T1126] loop0: detected capacity change from 0 to 512 [ 78.021634][ T1126] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 78.034797][ T1126] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 78.045010][ T1126] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1126] sendfile(6, 7, NULL, 140737974943952 [pid 1125] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1125] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1125] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1125] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1125] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1125] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1125] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1128 attached [pid 1128] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1128] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1128] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1125] <... clone3 resumed> => {parent_tid=[1128]}, 88) = 1128 [pid 1125] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1125] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1125] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1128] <... futex resumed>) = 0 [pid 1128] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1128] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1125] <... futex resumed>) = 0 [pid 1128] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1125] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1125] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1128] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1128] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1128] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1125] <... futex resumed>) = 0 [pid 1125] exit_group(0 [pid 1128] <... futex resumed>) = ? [pid 1125] <... exit_group resumed>) = ? [pid 1128] +++ exited with 0 +++ [pid 1126] <... sendfile resumed>) = ? [pid 1126] +++ exited with 0 +++ [pid 1125] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1125, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./190/binderfs") = 0 umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./190/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./190/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./190") = 0 mkdir("./191", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1129 ./strace-static-x86_64: Process 1129 attached [pid 1129] set_robust_list(0x555556b826a0, 24) = 0 [pid 1129] chdir("./191") = 0 [pid 1129] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1129] setpgid(0, 0) = 0 [pid 1129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1129] write(3, "1000", 4) = 4 [pid 1129] close(3) = 0 [pid 1129] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1129] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1129] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1129] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1129] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1129] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1129] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1129] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1130 attached [pid 1130] set_robust_list(0x7f96301a99a0, 24 [pid 1129] <... clone3 resumed> => {parent_tid=[1130]}, 88) = 1130 [pid 1130] <... set_robust_list resumed>) = 0 [pid 1129] rt_sigprocmask(SIG_SETMASK, [], [pid 1130] rt_sigprocmask(SIG_SETMASK, [], [pid 1129] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1129] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1129] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1130] memfd_create("syzkaller", 0) = 3 [pid 1130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1130] munmap(0x7f9627d89000, 262144) = 0 [pid 1130] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1130] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1130] close(3) = 0 [pid 1130] mkdir("./file0", 0777) = 0 [ 78.324753][ T1130] loop0: detected capacity change from 0 to 512 [ 78.333049][ T1130] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 78.352174][ T1130] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1130] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1130] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1130] chdir("./file0") = 0 [pid 1130] ioctl(4, LOOP_CLR_FD) = 0 [pid 1130] close(4) = 0 [pid 1130] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1129] <... futex resumed>) = 0 [pid 1129] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1129] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1130] <... futex resumed>) = 1 [pid 1130] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1130] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1129] <... futex resumed>) = 0 [pid 1130] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1129] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1130] <... open resumed>) = 5 [pid 1129] <... futex resumed>) = 0 [pid 1129] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1130] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1129] <... futex resumed>) = 0 [pid 1130] creat("./bus", 000 [pid 1129] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1130] <... creat resumed>) = 6 [pid 1129] <... futex resumed>) = 0 [pid 1130] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1130] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1129] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1129] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1130] <... futex resumed>) = 0 [pid 1129] <... futex resumed>) = 1 [pid 1129] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1130] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1130] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1129] <... futex resumed>) = 0 [pid 1129] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1129] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1130] open("./bus", O_RDONLY) = 7 [pid 1130] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1129] <... futex resumed>) = 0 [pid 1129] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1129] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 78.364967][ T1130] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1130] sendfile(6, 7, NULL, 140737974943952 [pid 1129] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1129] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1129] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1129] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1129] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1129] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1129] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1129] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1132]}, 88) = 1132 ./strace-static-x86_64: Process 1132 attached [pid 1129] rt_sigprocmask(SIG_SETMASK, [], [pid 1132] set_robust_list(0x7f9627dc89a0, 24 [pid 1129] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1129] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1129] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1132] <... set_robust_list resumed>) = 0 [pid 1132] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1132] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1132] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1129] <... futex resumed>) = 0 [pid 1129] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1129] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1132] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1132] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1129] <... futex resumed>) = 0 [pid 1132] <... futex resumed>) = 1 [pid 1132] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1129] exit_group(0) = ? [pid 1132] <... futex resumed>) = ? [pid 1132] +++ exited with 0 +++ [pid 1130] <... sendfile resumed>) = ? [pid 1130] +++ exited with 0 +++ [pid 1129] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1129, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./191/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./191/binderfs") = 0 umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./191/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./191/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./191") = 0 mkdir("./192", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1133 ./strace-static-x86_64: Process 1133 attached [pid 1133] set_robust_list(0x555556b826a0, 24) = 0 [pid 1133] chdir("./192") = 0 [pid 1133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1133] setpgid(0, 0) = 0 [pid 1133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1133] write(3, "1000", 4) = 4 [pid 1133] close(3) = 0 [pid 1133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1133] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1133] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1133] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1133] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1133] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1133] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1134 attached => {parent_tid=[1134]}, 88) = 1134 [pid 1134] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1134] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1134] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1133] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1133] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1134] <... futex resumed>) = 0 [pid 1134] memfd_create("syzkaller", 0) = 3 [pid 1134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1133] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1134] munmap(0x7f9627d89000, 262144) = 0 [pid 1134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1134] close(3) = 0 [pid 1134] mkdir("./file0", 0777) = 0 [pid 1134] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1134] chdir("./file0") = 0 [pid 1134] ioctl(4, LOOP_CLR_FD) = 0 [pid 1134] close(4) = 0 [pid 1134] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1133] <... futex resumed>) = 0 [pid 1134] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1133] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1133] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1134] <... open resumed>) = 4 [pid 1134] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1134] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1133] <... futex resumed>) = 0 [pid 1133] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1133] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1134] <... futex resumed>) = 0 [pid 1134] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1134] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1133] <... futex resumed>) = 0 [pid 1133] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1133] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1134] <... futex resumed>) = 1 [pid 1134] creat("./bus", 000) = 6 [pid 1134] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1133] <... futex resumed>) = 0 [pid 1133] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1133] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1134] <... futex resumed>) = 1 [pid 1134] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1134] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1133] <... futex resumed>) = 0 [pid 1133] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1133] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1134] <... futex resumed>) = 1 [pid 1134] open("./bus", O_RDONLY) = 7 [pid 1134] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1133] <... futex resumed>) = 0 [pid 1133] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1133] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1134] <... futex resumed>) = 1 [ 78.703388][ T1134] loop0: detected capacity change from 0 to 512 [ 78.712180][ T1134] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 78.725203][ T1134] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 78.734845][ T1134] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1134] sendfile(6, 7, NULL, 140737974943952 [pid 1133] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1133] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1133] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1133] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1133] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1137]}, 88) = 1137 ./strace-static-x86_64: Process 1137 attached [pid 1137] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1137] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1137] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1133] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1133] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1133] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1137] <... futex resumed>) = 0 [pid 1137] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1137] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1133] <... futex resumed>) = 0 [pid 1133] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1133] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1137] <... futex resumed>) = 1 [pid 1137] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1137] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1133] <... futex resumed>) = 0 [pid 1137] <... futex resumed>) = 1 [pid 1137] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1133] exit_group(0 [pid 1137] <... futex resumed>) = ? [pid 1133] <... exit_group resumed>) = ? [pid 1137] +++ exited with 0 +++ [pid 1134] <... sendfile resumed>) = ? [pid 1134] +++ exited with 0 +++ [pid 1133] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1133, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./192/binderfs") = 0 umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./192/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./192/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./192") = 0 mkdir("./193", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1138 ./strace-static-x86_64: Process 1138 attached [pid 1138] set_robust_list(0x555556b826a0, 24) = 0 [pid 1138] chdir("./193") = 0 [pid 1138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1138] setpgid(0, 0) = 0 [pid 1138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1138] write(3, "1000", 4) = 4 [pid 1138] close(3) = 0 [pid 1138] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1138] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1138] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1138] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1138] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1138] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1138] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1139]}, 88) = 1139 [pid 1138] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1138] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1138] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1139 attached [pid 1139] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1139] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1139] memfd_create("syzkaller", 0) = 3 [pid 1139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1139] munmap(0x7f9627d89000, 262144) = 0 [pid 1139] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1139] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1139] close(3) = 0 [pid 1139] mkdir("./file0", 0777) = 0 [pid 1139] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1139] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1139] chdir("./file0") = 0 [pid 1139] ioctl(4, LOOP_CLR_FD) = 0 [pid 1139] close(4) = 0 [pid 1139] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1138] <... futex resumed>) = 0 [pid 1138] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1138] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1139] <... futex resumed>) = 1 [pid 1139] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1139] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1138] <... futex resumed>) = 0 [pid 1138] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1138] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1139] <... futex resumed>) = 1 [pid 1139] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1139] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1138] <... futex resumed>) = 0 [pid 1138] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1138] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1139] <... futex resumed>) = 1 [pid 1139] creat("./bus", 000) = 6 [pid 1139] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1138] <... futex resumed>) = 0 [pid 1138] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1138] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1139] <... futex resumed>) = 1 [pid 1139] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1139] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1138] <... futex resumed>) = 0 [pid 1138] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1138] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1139] <... futex resumed>) = 1 [pid 1139] open("./bus", O_RDONLY) = 7 [pid 1139] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1138] <... futex resumed>) = 0 [pid 1138] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1138] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1139] <... futex resumed>) = 1 [ 78.995069][ T1139] loop0: detected capacity change from 0 to 512 [ 79.002747][ T1139] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 79.015649][ T1139] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 79.025363][ T1139] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1139] sendfile(6, 7, NULL, 140737974943952 [pid 1138] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1138] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1138] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1138] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1138] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1141 attached => {parent_tid=[1141]}, 88) = 1141 [pid 1138] rt_sigprocmask(SIG_SETMASK, [], [pid 1141] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1138] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1138] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1141] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1138] <... futex resumed>) = 0 [pid 1138] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1141] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1141] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1138] <... futex resumed>) = 0 [pid 1141] sendmsg(-1, 0x20000000, 0 [pid 1138] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1141] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1138] <... futex resumed>) = 0 [pid 1141] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1138] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1141] <... futex resumed>) = 0 [pid 1138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1141] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1138] exit_group(0 [pid 1141] <... futex resumed>) = ? [pid 1138] <... exit_group resumed>) = ? [pid 1141] +++ exited with 0 +++ [pid 1139] <... sendfile resumed>) = ? [pid 1139] +++ exited with 0 +++ [pid 1138] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1138, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./193/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./193/binderfs") = 0 umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./193/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./193/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./193") = 0 mkdir("./194", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1142 ./strace-static-x86_64: Process 1142 attached [pid 1142] set_robust_list(0x555556b826a0, 24) = 0 [pid 1142] chdir("./194") = 0 [pid 1142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1142] setpgid(0, 0) = 0 [pid 1142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1142] write(3, "1000", 4) = 4 [pid 1142] close(3) = 0 [pid 1142] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1142] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1142] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1142] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1142] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1142] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1143]}, 88) = 1143 ./strace-static-x86_64: Process 1143 attached [pid 1142] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1142] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1142] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1143] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1143] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1143] memfd_create("syzkaller", 0) = 3 [pid 1143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1143] munmap(0x7f9627d89000, 262144) = 0 [pid 1143] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1143] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1143] close(3) = 0 [pid 1143] mkdir("./file0", 0777) = 0 [pid 1143] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1143] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1143] chdir("./file0") = 0 [pid 1143] ioctl(4, LOOP_CLR_FD) = 0 [pid 1143] close(4) = 0 [pid 1143] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1142] <... futex resumed>) = 0 [pid 1142] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1142] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1143] <... futex resumed>) = 1 [pid 1143] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1143] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1142] <... futex resumed>) = 0 [pid 1142] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1142] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1143] <... futex resumed>) = 1 [pid 1143] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1143] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1142] <... futex resumed>) = 0 [pid 1143] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1142] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1142] <... futex resumed>) = 0 [pid 1143] creat("./bus", 000 [pid 1142] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1143] <... creat resumed>) = 6 [pid 1143] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1143] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1142] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1142] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1143] <... futex resumed>) = 0 [pid 1143] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1143] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1142] <... futex resumed>) = 0 [pid 1142] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1142] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1143] <... futex resumed>) = 1 [pid 1143] open("./bus", O_RDONLY) = 7 [pid 1143] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1142] <... futex resumed>) = 0 [pid 1142] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1143] <... futex resumed>) = 1 [pid 1142] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 79.263420][ T1143] loop0: detected capacity change from 0 to 512 [ 79.271527][ T1143] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 79.285562][ T1143] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 79.300185][ T1143] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1143] sendfile(6, 7, NULL, 140737974943952 [pid 1142] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1142] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1142] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1142] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1145]}, 88) = 1145 ./strace-static-x86_64: Process 1145 attached [pid 1142] rt_sigprocmask(SIG_SETMASK, [], [pid 1145] set_robust_list(0x7f9627dc89a0, 24 [pid 1142] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1142] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1142] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1145] <... set_robust_list resumed>) = 0 [pid 1145] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1145] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1145] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1142] <... futex resumed>) = 0 [pid 1142] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1145] sendmsg(-1, 0x20000000, 0 [pid 1142] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1145] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1145] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1142] <... futex resumed>) = 0 [pid 1145] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1142] exit_group(0 [pid 1145] <... futex resumed>) = ? [pid 1142] <... exit_group resumed>) = ? [pid 1143] <... sendfile resumed>) = ? [pid 1145] +++ exited with 0 +++ [pid 1143] +++ exited with 0 +++ [pid 1142] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1142, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./194/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./194/binderfs") = 0 umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./194/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./194/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./194") = 0 mkdir("./195", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1146 ./strace-static-x86_64: Process 1146 attached [pid 1146] set_robust_list(0x555556b826a0, 24) = 0 [pid 1146] chdir("./195") = 0 [pid 1146] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1146] setpgid(0, 0) = 0 [pid 1146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1146] write(3, "1000", 4) = 4 [pid 1146] close(3) = 0 [pid 1146] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1146] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1146] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1146] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1146] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1146] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1146] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1146] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1147]}, 88) = 1147 [pid 1146] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1146] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1146] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1147 attached [pid 1147] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1147] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1147] memfd_create("syzkaller", 0) = 3 [pid 1147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1147] munmap(0x7f9627d89000, 262144) = 0 [pid 1147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1147] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1147] close(3) = 0 [pid 1147] mkdir("./file0", 0777) = 0 [pid 1147] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1147] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1147] chdir("./file0") = 0 [pid 1147] ioctl(4, LOOP_CLR_FD) = 0 [pid 1147] close(4) = 0 [pid 1147] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1146] <... futex resumed>) = 0 [pid 1146] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1146] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1147] <... futex resumed>) = 1 [pid 1147] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1147] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1146] <... futex resumed>) = 0 [pid 1146] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1146] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1147] <... futex resumed>) = 1 [pid 1147] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1147] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1147] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1146] <... futex resumed>) = 0 [pid 1147] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1146] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1147] creat("./bus", 000 [pid 1146] <... futex resumed>) = 0 [pid 1146] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1147] <... creat resumed>) = 6 [pid 1147] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1147] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1146] <... futex resumed>) = 0 [pid 1146] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1146] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1147] <... futex resumed>) = 0 [pid 1147] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1147] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1146] <... futex resumed>) = 0 [pid 1146] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1146] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1147] <... futex resumed>) = 1 [pid 1147] open("./bus", O_RDONLY) = 7 [pid 1147] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1146] <... futex resumed>) = 0 [pid 1146] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1146] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1147] <... futex resumed>) = 1 [ 79.575060][ T1147] loop0: detected capacity change from 0 to 512 [ 79.583552][ T1147] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 79.596924][ T1147] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 79.606523][ T1147] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1147] sendfile(6, 7, NULL, 140737974943952 [pid 1146] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1146] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1146] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1146] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1146] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1146] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1146] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1146] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1149]}, 88) = 1149 ./strace-static-x86_64: Process 1149 attached [pid 1149] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1149] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1149] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1146] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1146] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1149] <... futex resumed>) = 0 [pid 1146] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1149] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1149] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1146] <... futex resumed>) = 0 [pid 1146] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1149] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1146] <... futex resumed>) = 0 [pid 1146] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1149] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1149] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1146] exit_group(0 [pid 1149] <... futex resumed>) = ? [pid 1146] <... exit_group resumed>) = ? [pid 1149] +++ exited with 0 +++ [pid 1147] <... sendfile resumed>) = ? [pid 1147] +++ exited with 0 +++ [pid 1146] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1146, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./195/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./195/binderfs") = 0 umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./195/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./195/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./195") = 0 mkdir("./196", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1151 ./strace-static-x86_64: Process 1151 attached [pid 1151] set_robust_list(0x555556b826a0, 24) = 0 [pid 1151] chdir("./196") = 0 [pid 1151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1151] setpgid(0, 0) = 0 [pid 1151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1151] write(3, "1000", 4) = 4 [pid 1151] close(3) = 0 [pid 1151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1151] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1151] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1151] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1151] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1151] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1152]}, 88) = 1152 [pid 1151] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1151] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1151] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1152 attached [pid 1152] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1152] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1152] memfd_create("syzkaller", 0) = 3 [pid 1152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1152] munmap(0x7f9627d89000, 262144) = 0 [pid 1152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1152] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1152] close(3) = 0 [pid 1152] mkdir("./file0", 0777) = 0 [pid 1152] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1152] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1152] chdir("./file0") = 0 [pid 1152] ioctl(4, LOOP_CLR_FD) = 0 [pid 1152] close(4) = 0 [pid 1152] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1151] <... futex resumed>) = 0 [pid 1151] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1151] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1152] <... futex resumed>) = 1 [pid 1152] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1152] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1151] <... futex resumed>) = 0 [pid 1151] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1151] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1152] <... futex resumed>) = 1 [pid 1152] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1152] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1151] <... futex resumed>) = 0 [pid 1151] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1151] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1152] <... futex resumed>) = 1 [pid 1152] creat("./bus", 000) = 6 [pid 1152] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1151] <... futex resumed>) = 0 [pid 1151] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1151] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1152] <... futex resumed>) = 1 [pid 1152] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1152] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1151] <... futex resumed>) = 0 [pid 1151] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1151] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1152] <... futex resumed>) = 1 [pid 1152] open("./bus", O_RDONLY) = 7 [pid 1152] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1151] <... futex resumed>) = 0 [pid 1151] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1151] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1152] <... futex resumed>) = 1 [ 79.874166][ T1152] loop0: detected capacity change from 0 to 512 [ 79.883406][ T1152] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 79.897522][ T1152] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 79.907349][ T1152] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1152] sendfile(6, 7, NULL, 140737974943952 [pid 1151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1151] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1151] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1151] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1151] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1151] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1151] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1151] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1151] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1154]}, 88) = 1154 [pid 1151] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1151] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1151] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1154 attached [pid 1154] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1154] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1154] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1154] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1151] <... futex resumed>) = 0 [pid 1151] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1151] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1154] <... futex resumed>) = 1 [pid 1154] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1154] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1151] <... futex resumed>) = 0 [pid 1154] <... futex resumed>) = 1 [pid 1154] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1151] exit_group(0 [pid 1154] <... futex resumed>) = ? [pid 1151] <... exit_group resumed>) = ? [pid 1154] +++ exited with 0 +++ [pid 1152] <... sendfile resumed>) = ? [pid 1152] +++ exited with 0 +++ [pid 1151] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1151, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./196/binderfs") = 0 umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./196/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./196/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./196") = 0 mkdir("./197", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1155 ./strace-static-x86_64: Process 1155 attached [pid 1155] set_robust_list(0x555556b826a0, 24) = 0 [pid 1155] chdir("./197") = 0 [pid 1155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1155] setpgid(0, 0) = 0 [pid 1155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1155] write(3, "1000", 4) = 4 [pid 1155] close(3) = 0 [pid 1155] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1155] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1155] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1155] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1155] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1155] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1155] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1156 attached [pid 1156] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1156] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1156] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1155] <... clone3 resumed> => {parent_tid=[1156]}, 88) = 1156 [pid 1155] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1155] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1156] <... futex resumed>) = 0 [pid 1156] memfd_create("syzkaller", 0) = 3 [pid 1155] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1156] munmap(0x7f9627d89000, 262144) = 0 [pid 1156] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1156] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1156] close(3) = 0 [pid 1156] mkdir("./file0", 0777) = 0 [pid 1156] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1156] chdir("./file0") = 0 [pid 1156] ioctl(4, LOOP_CLR_FD) = 0 [pid 1156] close(4) = 0 [pid 1156] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1155] <... futex resumed>) = 0 [pid 1155] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1155] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1156] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1156] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1155] <... futex resumed>) = 0 [pid 1155] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1155] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1156] <... futex resumed>) = 1 [pid 1156] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1156] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1155] <... futex resumed>) = 0 [pid 1155] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1155] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1156] <... futex resumed>) = 1 [pid 1156] creat("./bus", 000) = 6 [pid 1156] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1155] <... futex resumed>) = 0 [pid 1155] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1155] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1156] <... futex resumed>) = 1 [pid 1156] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1156] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1155] <... futex resumed>) = 0 [pid 1155] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1155] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1156] <... futex resumed>) = 1 [pid 1156] open("./bus", O_RDONLY) = 7 [pid 1156] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1155] <... futex resumed>) = 0 [pid 1155] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1155] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1156] <... futex resumed>) = 1 [ 80.145497][ T1156] loop0: detected capacity change from 0 to 512 [ 80.154694][ T1156] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 80.168278][ T1156] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 80.177849][ T1156] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1156] sendfile(6, 7, NULL, 140737974943952 [pid 1155] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1155] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1155] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1155] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1155] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1155] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1158 attached => {parent_tid=[1158]}, 88) = 1158 [pid 1155] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1155] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1155] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1158] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1158] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1158] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1155] <... futex resumed>) = 0 [pid 1155] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1155] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1158] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1158] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1155] <... futex resumed>) = 0 [pid 1158] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1155] exit_group(0 [pid 1158] <... futex resumed>) = ? [pid 1155] <... exit_group resumed>) = ? [pid 1156] <... sendfile resumed>) = ? [pid 1156] +++ exited with 0 +++ [pid 1158] +++ exited with 0 +++ [pid 1155] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1155, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./197/binderfs") = 0 umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./197/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./197/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./197") = 0 mkdir("./198", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 1159 attached [pid 1159] set_robust_list(0x555556b826a0, 24) = 0 [pid 1159] chdir("./198") = 0 [pid 1159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1159] setpgid(0, 0) = 0 [pid 1159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... clone resumed>, child_tidptr=0x555556b82690) = 1159 [pid 1159] <... openat resumed>) = 3 [pid 1159] write(3, "1000", 4) = 4 [pid 1159] close(3) = 0 [pid 1159] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1159] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1159] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1159] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1159] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1159] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1159] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1160]}, 88) = 1160 [pid 1159] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1159] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1159] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1160 attached [pid 1160] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1160] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1160] memfd_create("syzkaller", 0) = 3 [pid 1160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1160] munmap(0x7f9627d89000, 262144) = 0 [pid 1160] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1160] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1160] close(3) = 0 [pid 1160] mkdir("./file0", 0777) = 0 [pid 1160] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1160] chdir("./file0") = 0 [pid 1160] ioctl(4, LOOP_CLR_FD) = 0 [pid 1160] close(4) = 0 [pid 1160] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1159] <... futex resumed>) = 0 [pid 1159] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1159] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1160] <... futex resumed>) = 1 [pid 1160] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1160] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1159] <... futex resumed>) = 0 [pid 1159] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1159] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1160] <... futex resumed>) = 1 [pid 1160] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1160] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1159] <... futex resumed>) = 0 [pid 1159] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1159] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1160] <... futex resumed>) = 1 [pid 1160] creat("./bus", 000) = 6 [pid 1160] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1159] <... futex resumed>) = 0 [pid 1159] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1159] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1160] <... futex resumed>) = 1 [pid 1160] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1160] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1159] <... futex resumed>) = 0 [pid 1159] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1159] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1160] <... futex resumed>) = 1 [pid 1160] open("./bus", O_RDONLY) = 7 [pid 1160] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1159] <... futex resumed>) = 0 [pid 1159] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1159] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1160] <... futex resumed>) = 1 [ 80.488602][ T1160] loop0: detected capacity change from 0 to 512 [ 80.497027][ T1160] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 80.510126][ T1160] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 80.519711][ T1160] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1160] sendfile(6, 7, NULL, 140737974943952 [pid 1159] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1159] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1159] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1159] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1159] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1159] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1159] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1162]}, 88) = 1162 [pid 1159] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1159] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1159] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1162 attached [pid 1162] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1162] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1162] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1162] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1159] <... futex resumed>) = 0 [pid 1159] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1159] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1162] <... futex resumed>) = 1 [pid 1162] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1162] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1159] <... futex resumed>) = 0 [pid 1162] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1159] exit_group(0 [pid 1162] <... futex resumed>) = ? [pid 1159] <... exit_group resumed>) = ? [pid 1162] +++ exited with 0 +++ [pid 1160] <... sendfile resumed>) = ? [pid 1160] +++ exited with 0 +++ [pid 1159] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1159, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./198/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./198/binderfs") = 0 umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./198/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./198/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./198") = 0 mkdir("./199", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1164 ./strace-static-x86_64: Process 1164 attached [pid 1164] set_robust_list(0x555556b826a0, 24) = 0 [pid 1164] chdir("./199") = 0 [pid 1164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1164] setpgid(0, 0) = 0 [pid 1164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1164] write(3, "1000", 4) = 4 [pid 1164] close(3) = 0 [pid 1164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1164] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1164] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1164] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1164] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1164] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1165]}, 88) = 1165 [pid 1164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1164] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1165 attached [pid 1165] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1165] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1165] memfd_create("syzkaller", 0) = 3 [pid 1165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1165] munmap(0x7f9627d89000, 262144) = 0 [pid 1165] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1165] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1165] close(3) = 0 [pid 1165] mkdir("./file0", 0777) = 0 [pid 1165] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1165] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1165] chdir("./file0") = 0 [pid 1165] ioctl(4, LOOP_CLR_FD) = 0 [pid 1165] close(4) = 0 [pid 1165] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1165] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1164] <... futex resumed>) = 0 [pid 1164] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1164] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1165] <... futex resumed>) = 0 [pid 1165] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1165] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1164] <... futex resumed>) = 0 [pid 1164] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1165] <... futex resumed>) = 1 [pid 1165] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1165] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1164] <... futex resumed>) = 0 [pid 1164] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1165] <... futex resumed>) = 1 [pid 1165] creat("./bus", 000) = 6 [pid 1165] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1164] <... futex resumed>) = 0 [pid 1164] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1165] <... futex resumed>) = 1 [pid 1165] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1165] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1164] <... futex resumed>) = 0 [pid 1164] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1165] <... futex resumed>) = 1 [pid 1165] open("./bus", O_RDONLY) = 7 [pid 1165] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1164] <... futex resumed>) = 0 [pid 1164] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1165] <... futex resumed>) = 1 [ 80.763232][ T1165] loop0: detected capacity change from 0 to 512 [ 80.771642][ T1165] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 80.784743][ T1165] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 80.794561][ T1165] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1165] sendfile(6, 7, NULL, 140737974943952 [pid 1164] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1164] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1164] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1164] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1164] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1167 attached => {parent_tid=[1167]}, 88) = 1167 [pid 1164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1164] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1167] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1167] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1167] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1167] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1164] <... futex resumed>) = 0 [pid 1164] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1167] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1167] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1164] <... futex resumed>) = 0 [pid 1167] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1164] exit_group(0 [pid 1167] <... futex resumed>) = ? [pid 1164] <... exit_group resumed>) = ? [pid 1167] +++ exited with 0 +++ [pid 1165] <... sendfile resumed>) = ? [pid 1165] +++ exited with 0 +++ [pid 1164] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1164, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./199/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./199/binderfs") = 0 umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./199/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./199/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./199") = 0 mkdir("./200", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1168 ./strace-static-x86_64: Process 1168 attached [pid 1168] set_robust_list(0x555556b826a0, 24) = 0 [pid 1168] chdir("./200") = 0 [pid 1168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1168] setpgid(0, 0) = 0 [pid 1168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1168] write(3, "1000", 4) = 4 [pid 1168] close(3) = 0 [pid 1168] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1168] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1168] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1168] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1168] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1168] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1169 attached [pid 1169] set_robust_list(0x7f96301a99a0, 24 [pid 1168] <... clone3 resumed> => {parent_tid=[1169]}, 88) = 1169 [pid 1168] rt_sigprocmask(SIG_SETMASK, [], [pid 1169] <... set_robust_list resumed>) = 0 [pid 1169] rt_sigprocmask(SIG_SETMASK, [], [pid 1168] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1169] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1168] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1169] memfd_create("syzkaller", 0) = 3 [pid 1169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1169] munmap(0x7f9627d89000, 262144) = 0 [pid 1169] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1169] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1169] close(3) = 0 [pid 1169] mkdir("./file0", 0777) = 0 [pid 1169] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1169] chdir("./file0") = 0 [pid 1169] ioctl(4, LOOP_CLR_FD) = 0 [pid 1169] close(4) = 0 [pid 1169] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1168] <... futex resumed>) = 0 [pid 1168] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1169] <... futex resumed>) = 1 [pid 1169] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1169] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] <... futex resumed>) = 0 [pid 1169] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1168] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1169] <... futex resumed>) = 0 [pid 1169] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1169] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1168] <... futex resumed>) = 0 [pid 1168] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1169] <... futex resumed>) = 1 [pid 1169] creat("./bus", 000) = 6 [pid 1169] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1168] <... futex resumed>) = 0 [pid 1168] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1169] <... futex resumed>) = 1 [pid 1169] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1169] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] <... futex resumed>) = 0 [pid 1168] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1169] open("./bus", O_RDONLY) = 7 [pid 1169] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] <... futex resumed>) = 0 [pid 1168] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 81.050499][ T1169] loop0: detected capacity change from 0 to 512 [ 81.059055][ T1169] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 81.072302][ T1169] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 81.083311][ T1169] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1169] sendfile(6, 7, NULL, 140737974943952 [pid 1168] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1168] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1168] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1168] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1168] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1171]}, 88) = 1171 [pid 1168] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1168] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1171 attached [pid 1171] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1171] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1171] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1171] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] <... futex resumed>) = 0 [pid 1168] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1171] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1171] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] <... futex resumed>) = 0 [pid 1171] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1168] exit_group(0 [pid 1171] <... futex resumed>) = ? [pid 1168] <... exit_group resumed>) = ? [pid 1171] +++ exited with 0 +++ [pid 1169] <... sendfile resumed>) = ? [pid 1169] +++ exited with 0 +++ [pid 1168] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1168, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./200/binderfs") = 0 umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./200/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./200/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./200/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./200") = 0 mkdir("./201", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1172 ./strace-static-x86_64: Process 1172 attached [pid 1172] set_robust_list(0x555556b826a0, 24) = 0 [pid 1172] chdir("./201") = 0 [pid 1172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1172] setpgid(0, 0) = 0 [pid 1172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1172] write(3, "1000", 4) = 4 [pid 1172] close(3) = 0 [pid 1172] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1172] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1172] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1172] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1172] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1172] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1173 attached => {parent_tid=[1173]}, 88) = 1173 [pid 1173] set_robust_list(0x7f96301a99a0, 24 [pid 1172] rt_sigprocmask(SIG_SETMASK, [], [pid 1173] <... set_robust_list resumed>) = 0 [pid 1172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1173] rt_sigprocmask(SIG_SETMASK, [], [pid 1172] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1173] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1172] <... futex resumed>) = 0 [pid 1172] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1173] memfd_create("syzkaller", 0) = 3 [pid 1173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1173] munmap(0x7f9627d89000, 262144) = 0 [pid 1173] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1173] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1173] close(3) = 0 [pid 1173] mkdir("./file0", 0777) = 0 [pid 1173] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1173] chdir("./file0") = 0 [pid 1173] ioctl(4, LOOP_CLR_FD) = 0 [pid 1173] close(4) = 0 [pid 1173] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = 0 [pid 1172] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1173] <... futex resumed>) = 1 [pid 1173] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1173] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = 0 [pid 1172] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1173] <... futex resumed>) = 1 [pid 1173] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1173] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = 0 [pid 1172] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1173] <... futex resumed>) = 1 [pid 1173] creat("./bus", 000) = 6 [pid 1173] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = 0 [pid 1172] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1173] <... futex resumed>) = 1 [pid 1173] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1173] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = 0 [pid 1172] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1173] <... futex resumed>) = 1 [pid 1173] open("./bus", O_RDONLY) = 7 [pid 1173] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = 0 [pid 1172] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1173] <... futex resumed>) = 1 [ 81.350455][ T1173] loop0: detected capacity change from 0 to 512 [ 81.358847][ T1173] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 81.373978][ T1173] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 81.384288][ T1173] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1173] sendfile(6, 7, NULL, 140737974943952 [pid 1172] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1172] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1172] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1172] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1172] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1175 attached => {parent_tid=[1175]}, 88) = 1175 [pid 1175] set_robust_list(0x7f9627dc89a0, 24 [pid 1172] rt_sigprocmask(SIG_SETMASK, [], [pid 1175] <... set_robust_list resumed>) = 0 [pid 1172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1172] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1175] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1175] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1175] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1172] <... futex resumed>) = 0 [pid 1172] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1175] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1175] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1172] <... futex resumed>) = 0 [pid 1175] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1172] exit_group(0 [pid 1175] <... futex resumed>) = 231 [pid 1172] <... exit_group resumed>) = ? [pid 1173] <... sendfile resumed>) = ? [pid 1173] +++ exited with 0 +++ [pid 1175] +++ exited with 0 +++ [pid 1172] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1172, si_uid=0, si_status=0, si_utime=0, si_stime=19} --- umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./201/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./201/binderfs") = 0 umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./201/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./201/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./201/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./201") = 0 mkdir("./202", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1176 ./strace-static-x86_64: Process 1176 attached [pid 1176] set_robust_list(0x555556b826a0, 24) = 0 [pid 1176] chdir("./202") = 0 [pid 1176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1176] setpgid(0, 0) = 0 [pid 1176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1176] write(3, "1000", 4) = 4 [pid 1176] close(3) = 0 [pid 1176] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1176] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1176] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1176] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1176] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1176] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1177]}, 88) = 1177 [pid 1176] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1176] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1177 attached [pid 1177] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1177] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1177] memfd_create("syzkaller", 0) = 3 [pid 1177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1177] munmap(0x7f9627d89000, 262144) = 0 [pid 1177] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1177] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1177] close(3) = 0 [pid 1177] mkdir("./file0", 0777) = 0 [pid 1177] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1177] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1177] chdir("./file0") = 0 [pid 1177] ioctl(4, LOOP_CLR_FD) = 0 [pid 1177] close(4) = 0 [pid 1177] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1176] <... futex resumed>) = 0 [pid 1176] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1177] <... futex resumed>) = 1 [pid 1177] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1177] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1177] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1176] <... futex resumed>) = 0 [pid 1176] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1176] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1177] <... futex resumed>) = 0 [pid 1177] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1177] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1176] <... futex resumed>) = 0 [pid 1176] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1177] <... futex resumed>) = 1 [pid 1177] creat("./bus", 000) = 6 [pid 1177] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1176] <... futex resumed>) = 0 [pid 1176] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1177] <... futex resumed>) = 1 [pid 1177] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1177] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1176] <... futex resumed>) = 0 [pid 1176] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1177] <... futex resumed>) = 1 [pid 1177] open("./bus", O_RDONLY) = 7 [pid 1177] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1176] <... futex resumed>) = 0 [pid 1176] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1177] <... futex resumed>) = 1 [ 81.647645][ T1177] loop0: detected capacity change from 0 to 512 [ 81.657003][ T1177] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 81.670505][ T1177] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 81.680511][ T1177] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1177] sendfile(6, 7, NULL, 140737974943952 [pid 1176] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1176] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1176] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1176] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1176] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1179]}, 88) = 1179 [pid 1176] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1176] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1179 attached [pid 1179] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1179] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1179] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1179] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1176] <... futex resumed>) = 0 [pid 1176] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1179] <... futex resumed>) = 1 [pid 1179] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1179] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1176] <... futex resumed>) = 0 [pid 1179] <... futex resumed>) = 1 [pid 1179] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1176] exit_group(0 [pid 1179] <... futex resumed>) = ? [pid 1176] <... exit_group resumed>) = ? [pid 1179] +++ exited with 0 +++ [pid 1177] <... sendfile resumed>) = ? [pid 1177] +++ exited with 0 +++ [pid 1176] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1176, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./202/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./202/binderfs") = 0 umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./202/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./202/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./202") = 0 mkdir("./203", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1181 ./strace-static-x86_64: Process 1181 attached [pid 1181] set_robust_list(0x555556b826a0, 24) = 0 [pid 1181] chdir("./203") = 0 [pid 1181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1181] setpgid(0, 0) = 0 [pid 1181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1181] write(3, "1000", 4) = 4 [pid 1181] close(3) = 0 [pid 1181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1181] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1181] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1181] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1181] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1181] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1181] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1182]}, 88) = 1182 [pid 1181] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1181] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1181] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1182 attached [pid 1182] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1182] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1182] memfd_create("syzkaller", 0) = 3 [pid 1182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1182] munmap(0x7f9627d89000, 262144) = 0 [pid 1182] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1182] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1182] close(3) = 0 [pid 1182] mkdir("./file0", 0777) = 0 [pid 1182] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1182] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1182] chdir("./file0") = 0 [pid 1182] ioctl(4, LOOP_CLR_FD) = 0 [pid 1182] close(4) = 0 [pid 1182] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1181] <... futex resumed>) = 0 [pid 1181] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1181] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1182] <... futex resumed>) = 1 [pid 1182] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1182] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1181] <... futex resumed>) = 0 [pid 1181] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1181] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1182] <... futex resumed>) = 1 [pid 1182] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1182] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1181] <... futex resumed>) = 0 [pid 1182] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1181] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1181] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1182] <... futex resumed>) = 0 [pid 1182] creat("./bus", 000) = 6 [pid 1182] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1182] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1181] <... futex resumed>) = 0 [pid 1181] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1181] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1182] <... futex resumed>) = 0 [pid 1182] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1182] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1181] <... futex resumed>) = 0 [pid 1181] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1181] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1182] <... futex resumed>) = 1 [pid 1182] open("./bus", O_RDONLY) = 7 [pid 1182] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1181] <... futex resumed>) = 0 [pid 1181] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1181] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1182] <... futex resumed>) = 1 [ 81.961311][ T1182] loop0: detected capacity change from 0 to 512 [ 81.969883][ T1182] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 81.983387][ T1182] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 81.993618][ T1182] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1182] sendfile(6, 7, NULL, 140737974943952 [pid 1181] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1181] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1181] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1181] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1181] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1181] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1181] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1181] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1184 attached => {parent_tid=[1184]}, 88) = 1184 [pid 1181] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1181] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1181] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1184] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1184] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1184] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1184] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1181] <... futex resumed>) = 0 [pid 1181] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1181] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1184] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1184] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1181] <... futex resumed>) = 0 [pid 1184] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1181] exit_group(0) = ? [pid 1184] <... futex resumed>) = ? [pid 1184] +++ exited with 0 +++ [pid 1182] <... sendfile resumed>) = ? [pid 1182] +++ exited with 0 +++ [pid 1181] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1181, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./203/binderfs") = 0 umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./203/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./203/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./203") = 0 mkdir("./204", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1185 ./strace-static-x86_64: Process 1185 attached [pid 1185] set_robust_list(0x555556b826a0, 24) = 0 [pid 1185] chdir("./204") = 0 [pid 1185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1185] setpgid(0, 0) = 0 [pid 1185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1185] write(3, "1000", 4) = 4 [pid 1185] close(3) = 0 [pid 1185] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1185] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1185] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1185] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1185] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1186]}, 88) = 1186 ./strace-static-x86_64: Process 1186 attached [pid 1185] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1185] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1186] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1186] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1186] memfd_create("syzkaller", 0) = 3 [pid 1186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1186] munmap(0x7f9627d89000, 262144) = 0 [pid 1186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1186] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1186] close(3) = 0 [pid 1186] mkdir("./file0", 0777) = 0 [pid 1186] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1186] chdir("./file0") = 0 [pid 1186] ioctl(4, LOOP_CLR_FD) = 0 [pid 1186] close(4) = 0 [pid 1186] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] <... futex resumed>) = 0 [pid 1185] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1186] <... futex resumed>) = 1 [pid 1186] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1186] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] <... futex resumed>) = 0 [pid 1185] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1186] <... futex resumed>) = 1 [pid 1186] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1186] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1185] <... futex resumed>) = 0 [pid 1185] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1186] creat("./bus", 000) = 6 [pid 1186] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] <... futex resumed>) = 0 [pid 1185] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1186] <... futex resumed>) = 1 [pid 1186] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1186] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] <... futex resumed>) = 0 [pid 1186] <... futex resumed>) = 1 [pid 1185] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1186] open("./bus", O_RDONLY) = 7 [pid 1186] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] <... futex resumed>) = 0 [pid 1185] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1186] <... futex resumed>) = 1 [ 82.274871][ T1186] loop0: detected capacity change from 0 to 512 [ 82.284110][ T1186] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 82.298479][ T1186] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 82.308596][ T1186] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1186] sendfile(6, 7, NULL, 140737974943952 [pid 1185] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1185] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1185] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1185] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1185] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1185] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1188 attached => {parent_tid=[1188]}, 88) = 1188 [pid 1185] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1185] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1188] set_robust_list(0x7f9627dc89a0, 24 [pid 1185] <... futex resumed>) = 0 [pid 1188] <... set_robust_list resumed>) = 0 [pid 1185] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1188] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1188] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1188] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1185] <... futex resumed>) = 0 [pid 1185] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1188] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1188] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] <... futex resumed>) = 0 [pid 1188] <... futex resumed>) = 1 [pid 1188] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1185] exit_group(0 [pid 1188] <... futex resumed>) = ? [pid 1185] <... exit_group resumed>) = ? [pid 1188] +++ exited with 0 +++ [pid 1186] <... sendfile resumed>) = ? [pid 1186] +++ exited with 0 +++ [pid 1185] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1185, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./204/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./204/binderfs") = 0 umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./204/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./204/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./204") = 0 mkdir("./205", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1189 ./strace-static-x86_64: Process 1189 attached [pid 1189] set_robust_list(0x555556b826a0, 24) = 0 [pid 1189] chdir("./205") = 0 [pid 1189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1189] setpgid(0, 0) = 0 [pid 1189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1189] write(3, "1000", 4) = 4 [pid 1189] close(3) = 0 [pid 1189] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1189] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1189] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1189] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1189] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1189] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1190]}, 88) = 1190 [pid 1189] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1189] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1190 attached [pid 1190] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1190] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1190] memfd_create("syzkaller", 0) = 3 [pid 1190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1190] munmap(0x7f9627d89000, 262144) = 0 [pid 1190] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1190] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1190] close(3) = 0 [pid 1190] mkdir("./file0", 0777) = 0 [pid 1190] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1190] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1190] chdir("./file0") = 0 [pid 1190] ioctl(4, LOOP_CLR_FD) = 0 [pid 1190] close(4) = 0 [pid 1190] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] <... futex resumed>) = 0 [pid 1189] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... futex resumed>) = 1 [pid 1190] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1190] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] <... futex resumed>) = 0 [pid 1189] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... futex resumed>) = 1 [pid 1190] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1190] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] <... futex resumed>) = 0 [pid 1189] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... futex resumed>) = 1 [pid 1190] creat("./bus", 000) = 6 [pid 1190] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] <... futex resumed>) = 0 [pid 1189] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... futex resumed>) = 1 [pid 1190] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1190] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] <... futex resumed>) = 0 [pid 1189] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... futex resumed>) = 1 [pid 1190] open("./bus", O_RDONLY) = 7 [pid 1190] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] <... futex resumed>) = 0 [pid 1189] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... futex resumed>) = 1 [ 82.553330][ T1190] loop0: detected capacity change from 0 to 512 [ 82.563409][ T1190] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 82.576592][ T1190] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1190] sendfile(6, 7, NULL, 140737974943952 [pid 1189] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1189] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1189] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1189] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1189] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1189] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1189] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1193]}, 88) = 1193 [pid 1189] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 1193 attached [pid 1193] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1193] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1193] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1189] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1193] <... futex resumed>) = 0 [pid 1193] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1189] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1193] <... mmap resumed>) = 0x20000000 [pid 1193] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1189] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1193] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1193] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1193] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] exit_group(0 [pid 1193] <... futex resumed>) = ? [pid 1189] <... exit_group resumed>) = ? [pid 1193] +++ exited with 0 +++ [pid 1190] <... sendfile resumed>) = ? [pid 1190] +++ exited with 0 +++ [pid 1189] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1189, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./205/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./205/binderfs") = 0 umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./205/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./205/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./205") = 0 mkdir("./206", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1195 ./strace-static-x86_64: Process 1195 attached [pid 1195] set_robust_list(0x555556b826a0, 24) = 0 [pid 1195] chdir("./206") = 0 [pid 1195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1195] setpgid(0, 0) = 0 [pid 1195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1195] write(3, "1000", 4) = 4 [pid 1195] close(3) = 0 [pid 1195] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1195] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1195] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1195] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1195] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1195] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1195] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1196 attached => {parent_tid=[1196]}, 88) = 1196 [pid 1195] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1195] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1195] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1196] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1196] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1196] memfd_create("syzkaller", 0) = 3 [pid 1196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1196] munmap(0x7f9627d89000, 262144) = 0 [pid 1196] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1196] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1196] close(3) = 0 [pid 1196] mkdir("./file0", 0777) = 0 [pid 1196] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1196] chdir("./file0") = 0 [pid 1196] ioctl(4, LOOP_CLR_FD) = 0 [pid 1196] close(4) = 0 [pid 1196] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1195] <... futex resumed>) = 0 [pid 1196] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1195] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1195] <... futex resumed>) = 0 [pid 1196] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1195] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1196] <... open resumed>) = 4 [pid 1196] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1195] <... futex resumed>) = 0 [pid 1196] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1195] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1195] <... futex resumed>) = 0 [pid 1196] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1195] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1196] <... open resumed>) = 5 [pid 1196] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1196] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1195] <... futex resumed>) = 0 [pid 1196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1195] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1196] creat("./bus", 000 [pid 1195] <... futex resumed>) = 0 [pid 1196] <... creat resumed>) = 6 [pid 1195] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1196] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1196] <... futex resumed>) = 0 [pid 1195] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1196] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 1195] <... futex resumed>) = 0 [pid 1196] <... writev resumed>) = 1 [pid 1195] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1196] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1196] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1195] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1196] <... futex resumed>) = 0 [pid 1195] <... futex resumed>) = 1 [pid 1196] open("./bus", O_RDONLY [pid 1195] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1196] <... open resumed>) = 7 [pid 1196] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1195] <... futex resumed>) = 0 [pid 1196] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1195] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1195] <... futex resumed>) = 0 [pid 1196] sendfile(6, 7, NULL, 140737974943952 [ 82.849226][ T1196] loop0: detected capacity change from 0 to 512 [ 82.858442][ T1196] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 82.876455][ T1196] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1195] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1195] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1195] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1195] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1195] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1195] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1198]}, 88) = 1198 [pid 1195] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1195] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1195] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1198 attached [pid 1198] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1198] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1198] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1198] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1195] <... futex resumed>) = 0 [pid 1195] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1195] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1198] <... futex resumed>) = 1 [pid 1198] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1198] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1195] <... futex resumed>) = 0 [pid 1198] <... futex resumed>) = 1 [pid 1198] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1195] exit_group(0 [pid 1198] <... futex resumed>) = ? [pid 1195] <... exit_group resumed>) = ? [pid 1198] +++ exited with 0 +++ [pid 1196] <... sendfile resumed>) = ? [pid 1196] +++ exited with 0 +++ [pid 1195] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1195, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./206/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./206/binderfs") = 0 umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./206/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./206/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./206") = 0 mkdir("./207", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1199 ./strace-static-x86_64: Process 1199 attached [pid 1199] set_robust_list(0x555556b826a0, 24) = 0 [pid 1199] chdir("./207") = 0 [pid 1199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1199] setpgid(0, 0) = 0 [pid 1199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1199] write(3, "1000", 4) = 4 [pid 1199] close(3) = 0 [pid 1199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1199] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1199] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1199] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1199] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1199] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1199] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1200]}, 88) = 1200 [pid 1199] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1199] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1199] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1200 attached [pid 1200] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1200] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1200] memfd_create("syzkaller", 0) = 3 [pid 1200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1200] munmap(0x7f9627d89000, 262144) = 0 [pid 1200] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1200] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1200] close(3) = 0 [pid 1200] mkdir("./file0", 0777) = 0 [pid 1200] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1200] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1200] chdir("./file0") = 0 [pid 1200] ioctl(4, LOOP_CLR_FD) = 0 [pid 1200] close(4) = 0 [pid 1200] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1200] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1199] <... futex resumed>) = 0 [pid 1199] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1199] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1200] <... futex resumed>) = 0 [pid 1200] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1200] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1199] <... futex resumed>) = 0 [pid 1199] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1199] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1200] <... futex resumed>) = 1 [pid 1200] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1200] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1199] <... futex resumed>) = 0 [pid 1199] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1199] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1200] <... futex resumed>) = 1 [pid 1200] creat("./bus", 000) = 6 [pid 1200] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1199] <... futex resumed>) = 0 [pid 1199] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1199] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1200] <... futex resumed>) = 1 [pid 1200] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1200] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1199] <... futex resumed>) = 0 [pid 1199] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1199] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1200] <... futex resumed>) = 1 [pid 1200] open("./bus", O_RDONLY) = 7 [pid 1200] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1199] <... futex resumed>) = 0 [pid 1199] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1199] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1200] <... futex resumed>) = 1 [ 83.169998][ T1200] loop0: detected capacity change from 0 to 512 [ 83.178809][ T1200] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 83.192139][ T1200] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1200] sendfile(6, 7, NULL, 140737974943952 [pid 1199] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1199] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1199] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1199] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1199] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1202]}, 88) = 1202 [pid 1199] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1199] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1199] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1202 attached [pid 1202] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1202] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1202] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1202] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1199] <... futex resumed>) = 0 [pid 1199] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1199] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1202] <... futex resumed>) = 1 [pid 1202] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1202] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1199] <... futex resumed>) = 0 [pid 1202] <... futex resumed>) = 1 [pid 1202] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1199] exit_group(0) = ? [pid 1202] <... futex resumed>) = ? [pid 1200] <... sendfile resumed>) = ? [pid 1202] +++ exited with 0 +++ [pid 1200] +++ exited with 0 +++ [pid 1199] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1199, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./207/binderfs") = 0 umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./207/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./207/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./207") = 0 mkdir("./208", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1203 ./strace-static-x86_64: Process 1203 attached [pid 1203] set_robust_list(0x555556b826a0, 24) = 0 [pid 1203] chdir("./208") = 0 [pid 1203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1203] setpgid(0, 0) = 0 [pid 1203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1203] write(3, "1000", 4) = 4 [pid 1203] close(3) = 0 [pid 1203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1203] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1203] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1203] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1203] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1203] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1204]}, 88) = 1204 [pid 1203] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1203] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1203] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1204 attached [pid 1204] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1204] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1204] memfd_create("syzkaller", 0) = 3 [pid 1204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1204] munmap(0x7f9627d89000, 262144) = 0 [pid 1204] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1204] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1204] close(3) = 0 [pid 1204] mkdir("./file0", 0777) = 0 [pid 1204] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1204] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1204] chdir("./file0") = 0 [pid 1204] ioctl(4, LOOP_CLR_FD) = 0 [pid 1204] close(4) = 0 [pid 1204] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1203] <... futex resumed>) = 0 [pid 1203] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1203] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1204] <... futex resumed>) = 1 [pid 1204] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1204] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1203] <... futex resumed>) = 0 [pid 1203] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1203] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1204] <... futex resumed>) = 1 [pid 1204] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1204] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1203] <... futex resumed>) = 0 [pid 1203] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1203] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1204] <... futex resumed>) = 1 [pid 1204] creat("./bus", 000) = 6 [pid 1204] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1203] <... futex resumed>) = 0 [pid 1203] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1203] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1204] <... futex resumed>) = 1 [pid 1204] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1204] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1203] <... futex resumed>) = 0 [pid 1203] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1203] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1204] <... futex resumed>) = 1 [pid 1204] open("./bus", O_RDONLY) = 7 [pid 1204] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1203] <... futex resumed>) = 0 [pid 1203] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1203] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1204] <... futex resumed>) = 1 [ 83.481674][ T1204] loop0: detected capacity change from 0 to 512 [ 83.490211][ T1204] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 83.503133][ T1204] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1204] sendfile(6, 7, NULL, 140737974943952 [pid 1203] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1203] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1203] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1203] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1206 attached => {parent_tid=[1206]}, 88) = 1206 [pid 1203] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1203] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1203] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1206] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1206] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1206] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1206] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1203] <... futex resumed>) = 0 [pid 1203] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1203] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1206] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1206] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1203] <... futex resumed>) = 0 [pid 1206] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1203] exit_group(0) = ? [pid 1206] <... futex resumed>) = ? [pid 1204] <... sendfile resumed>) = ? [pid 1206] +++ exited with 0 +++ [pid 1204] +++ exited with 0 +++ [pid 1203] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1203, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./208/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./208/binderfs") = 0 umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./208/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./208/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./208") = 0 mkdir("./209", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1207 ./strace-static-x86_64: Process 1207 attached [pid 1207] set_robust_list(0x555556b826a0, 24) = 0 [pid 1207] chdir("./209") = 0 [pid 1207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1207] setpgid(0, 0) = 0 [pid 1207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1207] write(3, "1000", 4) = 4 [pid 1207] close(3) = 0 [pid 1207] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1207] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1207] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1207] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1207] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1207] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1207] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1208 attached => {parent_tid=[1208]}, 88) = 1208 [pid 1208] set_robust_list(0x7f96301a99a0, 24 [pid 1207] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1207] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1207] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1208] <... set_robust_list resumed>) = 0 [pid 1208] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1208] memfd_create("syzkaller", 0) = 3 [pid 1208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1208] munmap(0x7f9627d89000, 262144) = 0 [pid 1208] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1208] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1208] close(3) = 0 [pid 1208] mkdir("./file0", 0777) = 0 [pid 1208] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1208] chdir("./file0") = 0 [pid 1208] ioctl(4, LOOP_CLR_FD) = 0 [pid 1208] close(4) = 0 [pid 1208] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1208] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1207] <... futex resumed>) = 0 [pid 1207] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1207] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] <... futex resumed>) = 0 [pid 1208] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1208] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1207] <... futex resumed>) = 0 [pid 1208] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1207] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1208] <... open resumed>) = 5 [pid 1207] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1207] <... futex resumed>) = 0 [pid 1207] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1207] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] <... futex resumed>) = 1 [pid 1208] creat("./bus", 000) = 6 [pid 1208] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1207] <... futex resumed>) = 0 [pid 1207] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1207] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] <... futex resumed>) = 1 [pid 1208] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1208] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1207] <... futex resumed>) = 0 [pid 1207] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1207] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] <... futex resumed>) = 1 [pid 1208] open("./bus", O_RDONLY) = 7 [pid 1208] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1207] <... futex resumed>) = 0 [pid 1207] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1207] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] <... futex resumed>) = 1 [ 83.756124][ T1208] loop0: detected capacity change from 0 to 512 [ 83.765120][ T1208] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 83.779253][ T1208] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1208] sendfile(6, 7, NULL, 140737974943952 [pid 1207] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1207] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1207] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1207] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1207] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1207] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1207] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1207] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1211]}, 88) = 1211 [pid 1207] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1207] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1207] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1211 attached [pid 1211] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1211] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1211] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1211] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1207] <... futex resumed>) = 0 [pid 1207] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1211] sendmsg(-1, 0x20000000, 0 [pid 1207] <... futex resumed>) = 0 [pid 1211] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1207] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1211] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1207] <... futex resumed>) = 0 [pid 1211] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1207] exit_group(0) = ? [pid 1211] <... futex resumed>) = ? [pid 1211] +++ exited with 0 +++ [pid 1208] <... sendfile resumed>) = ? [pid 1208] +++ exited with 0 +++ [pid 1207] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1207, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./209/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./209/binderfs") = 0 umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./209/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./209/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./209") = 0 mkdir("./210", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1212 ./strace-static-x86_64: Process 1212 attached [pid 1212] set_robust_list(0x555556b826a0, 24) = 0 [pid 1212] chdir("./210") = 0 [pid 1212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1212] setpgid(0, 0) = 0 [pid 1212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1212] write(3, "1000", 4) = 4 [pid 1212] close(3) = 0 [pid 1212] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1212] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1212] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1212] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1212] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1212] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1212] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1213]}, 88) = 1213 [pid 1212] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1212] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1212] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1213 attached [pid 1213] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1213] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1213] memfd_create("syzkaller", 0) = 3 [pid 1213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1213] munmap(0x7f9627d89000, 262144) = 0 [pid 1213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1213] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1213] close(3) = 0 [pid 1213] mkdir("./file0", 0777) = 0 [pid 1213] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1213] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1213] chdir("./file0") = 0 [pid 1213] ioctl(4, LOOP_CLR_FD) = 0 [pid 1213] close(4) = 0 [pid 1213] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] <... futex resumed>) = 0 [pid 1212] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1212] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1213] <... futex resumed>) = 1 [pid 1213] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1213] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] <... futex resumed>) = 0 [pid 1212] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1212] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1213] <... futex resumed>) = 1 [pid 1213] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1213] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] <... futex resumed>) = 0 [pid 1212] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1212] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1213] <... futex resumed>) = 1 [pid 1213] creat("./bus", 000) = 6 [pid 1213] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] <... futex resumed>) = 0 [pid 1212] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1212] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1213] <... futex resumed>) = 1 [pid 1213] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1213] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] <... futex resumed>) = 0 [pid 1212] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1213] <... futex resumed>) = 1 [pid 1212] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1213] open("./bus", O_RDONLY) = 7 [pid 1213] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1212] <... futex resumed>) = 0 [pid 1212] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1213] sendfile(6, 7, NULL, 140737974943952 [pid 1212] <... futex resumed>) = 0 [ 84.047568][ T1213] loop0: detected capacity change from 0 to 512 [ 84.056373][ T1213] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 84.069580][ T1213] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1212] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1212] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1212] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1212] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1212] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1215]}, 88) = 1215 [pid 1212] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1212] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1212] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1215 attached [pid 1215] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1215] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1215] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1215] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1212] <... futex resumed>) = 0 [pid 1212] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1215] sendmsg(-1, 0x20000000, 0 [pid 1212] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1215] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1215] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1212] <... futex resumed>) = 0 [pid 1215] <... futex resumed>) = 1 [pid 1215] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1212] exit_group(0 [pid 1215] <... futex resumed>) = ? [pid 1212] <... exit_group resumed>) = ? [pid 1215] +++ exited with 0 +++ [pid 1213] <... sendfile resumed>) = ? [pid 1213] +++ exited with 0 +++ [pid 1212] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1212, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./210/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./210/binderfs") = 0 umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./210/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./210/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./210") = 0 mkdir("./211", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1216 ./strace-static-x86_64: Process 1216 attached [pid 1216] set_robust_list(0x555556b826a0, 24) = 0 [pid 1216] chdir("./211") = 0 [pid 1216] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1216] setpgid(0, 0) = 0 [pid 1216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1216] write(3, "1000", 4) = 4 [pid 1216] close(3) = 0 [pid 1216] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1216] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1216] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1216] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1216] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1216] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1216] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1216] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1217]}, 88) = 1217 [pid 1216] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1216] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1216] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1217 attached [pid 1217] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1217] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1217] memfd_create("syzkaller", 0) = 3 [pid 1217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1217] munmap(0x7f9627d89000, 262144) = 0 [pid 1217] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1217] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1217] close(3) = 0 [pid 1217] mkdir("./file0", 0777) = 0 [ 84.339856][ T1217] loop0: detected capacity change from 0 to 512 [ 84.357679][ T1217] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [pid 1217] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1217] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1217] chdir("./file0") = 0 [pid 1217] ioctl(4, LOOP_CLR_FD) = 0 [pid 1217] close(4) = 0 [pid 1217] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1216] <... futex resumed>) = 0 [pid 1216] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1217] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1216] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1217] <... open resumed>) = 4 [pid 1217] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1216] <... futex resumed>) = 0 [pid 1216] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1216] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1217] <... futex resumed>) = 1 [pid 1217] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1217] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1216] <... futex resumed>) = 0 [pid 1216] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1216] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1217] <... futex resumed>) = 1 [pid 1217] creat("./bus", 000) = 6 [pid 1217] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1216] <... futex resumed>) = 0 [pid 1216] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1216] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1217] <... futex resumed>) = 1 [pid 1217] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1217] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1216] <... futex resumed>) = 0 [pid 1216] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1216] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1217] <... futex resumed>) = 1 [pid 1217] open("./bus", O_RDONLY) = 7 [pid 1217] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1216] <... futex resumed>) = 0 [pid 1217] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1216] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1216] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1217] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 84.379541][ T1217] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1217] sendfile(6, 7, NULL, 140737974943952 [pid 1216] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1216] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1216] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1216] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1216] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1216] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1216] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1219]}, 88) = 1219 [pid 1216] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1216] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1216] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1219 attached [pid 1219] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1219] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1219] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1219] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1216] <... futex resumed>) = 0 [pid 1216] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1216] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1219] <... futex resumed>) = 1 [pid 1219] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1219] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1216] <... futex resumed>) = 0 [pid 1219] <... futex resumed>) = 1 [pid 1219] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1216] exit_group(0) = ? [pid 1219] <... futex resumed>) = ? [pid 1219] +++ exited with 0 +++ [pid 1217] <... sendfile resumed>) = ? [pid 1217] +++ exited with 0 +++ [pid 1216] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1216, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./211/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./211/binderfs") = 0 umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./211/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./211/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./211") = 0 mkdir("./212", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1220 ./strace-static-x86_64: Process 1220 attached [pid 1220] set_robust_list(0x555556b826a0, 24) = 0 [pid 1220] chdir("./212") = 0 [pid 1220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1220] setpgid(0, 0) = 0 [pid 1220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1220] write(3, "1000", 4) = 4 [pid 1220] close(3) = 0 [pid 1220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1220] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1220] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1220] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1220] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1220] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1220] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1221]}, 88) = 1221 [pid 1220] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1220] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1220] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1221 attached [pid 1221] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1221] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1221] memfd_create("syzkaller", 0) = 3 [pid 1221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1221] munmap(0x7f9627d89000, 262144) = 0 [pid 1221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1221] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1221] close(3) = 0 [pid 1221] mkdir("./file0", 0777) = 0 [pid 1221] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1221] chdir("./file0") = 0 [pid 1221] ioctl(4, LOOP_CLR_FD) = 0 [pid 1221] close(4) = 0 [pid 1221] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1220] <... futex resumed>) = 0 [pid 1220] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1220] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1221] <... futex resumed>) = 1 [pid 1221] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1221] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1220] <... futex resumed>) = 0 [pid 1220] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1220] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1221] <... futex resumed>) = 1 [pid 1221] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1221] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1220] <... futex resumed>) = 0 [pid 1220] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1220] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1221] <... futex resumed>) = 1 [pid 1221] creat("./bus", 000) = 6 [pid 1221] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1220] <... futex resumed>) = 0 [pid 1220] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1220] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1221] <... futex resumed>) = 1 [pid 1221] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1221] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1220] <... futex resumed>) = 0 [pid 1220] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1220] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1221] open("./bus", O_RDONLY) = 7 [pid 1221] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1220] <... futex resumed>) = 0 [pid 1220] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1220] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 84.683947][ T1221] loop0: detected capacity change from 0 to 512 [ 84.693262][ T1221] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 84.706870][ T1221] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1221] sendfile(6, 7, NULL, 140737974943952 [pid 1220] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1220] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1220] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1220] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1220] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1220] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1220] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1224]}, 88) = 1224 [pid 1220] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1220] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1220] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1224 attached [pid 1224] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1224] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1224] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1224] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1220] <... futex resumed>) = 0 [pid 1220] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1224] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1224] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1220] <... futex resumed>) = 0 [pid 1224] <... futex resumed>) = 0 [pid 1224] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1220] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1220] exit_group(0 [pid 1224] <... futex resumed>) = ? [pid 1220] <... exit_group resumed>) = ? [pid 1221] <... sendfile resumed>) = ? [pid 1224] +++ exited with 0 +++ [pid 1221] +++ exited with 0 +++ [pid 1220] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1220, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./212/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./212/binderfs") = 0 umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./212/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./212/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./212/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./212") = 0 mkdir("./213", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1225 ./strace-static-x86_64: Process 1225 attached [pid 1225] set_robust_list(0x555556b826a0, 24) = 0 [pid 1225] chdir("./213") = 0 [pid 1225] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1225] setpgid(0, 0) = 0 [pid 1225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1225] write(3, "1000", 4) = 4 [pid 1225] close(3) = 0 [pid 1225] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1225] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1225] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1225] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1225] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1225] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1225] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1226]}, 88) = 1226 ./strace-static-x86_64: Process 1226 attached [pid 1226] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1226] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1226] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1225] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1225] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1226] <... futex resumed>) = 0 [pid 1226] memfd_create("syzkaller", 0) = 3 [pid 1226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1225] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1226] <... mmap resumed>) = 0x7f9627d89000 [pid 1226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1226] munmap(0x7f9627d89000, 262144) = 0 [pid 1226] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1226] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1226] close(3) = 0 [pid 1226] mkdir("./file0", 0777) = 0 [pid 1226] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1226] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1226] chdir("./file0") = 0 [pid 1226] ioctl(4, LOOP_CLR_FD) = 0 [pid 1226] close(4) = 0 [pid 1226] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1226] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1225] <... futex resumed>) = 0 [pid 1225] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1225] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1226] <... futex resumed>) = 0 [pid 1226] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1226] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1225] <... futex resumed>) = 0 [pid 1226] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1225] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1226] <... open resumed>) = 5 [pid 1225] <... futex resumed>) = 0 [pid 1226] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1225] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1226] <... futex resumed>) = 0 [pid 1225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1226] creat("./bus", 000 [pid 1225] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1225] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1226] <... creat resumed>) = 6 [pid 1226] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1225] <... futex resumed>) = 0 [pid 1225] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1225] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1226] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1226] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1225] <... futex resumed>) = 0 [pid 1225] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1225] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1226] open("./bus", O_RDONLY) = 7 [pid 1226] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1225] <... futex resumed>) = 0 [pid 1225] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1225] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 84.995549][ T1226] loop0: detected capacity change from 0 to 512 [ 85.004019][ T1226] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 85.017438][ T1226] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1226] sendfile(6, 7, NULL, 140737974943952 [pid 1225] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1225] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1225] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1225] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1225] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1225] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1228]}, 88) = 1228 [pid 1225] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1225] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1225] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1228 attached [pid 1228] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1228] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1228] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1228] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1225] <... futex resumed>) = 0 [pid 1225] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1225] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1228] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1228] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1225] <... futex resumed>) = 0 [pid 1228] <... futex resumed>) = 1 [pid 1228] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1225] exit_group(0 [pid 1228] <... futex resumed>) = ? [pid 1225] <... exit_group resumed>) = ? [pid 1228] +++ exited with 0 +++ [pid 1226] <... sendfile resumed>) = ? [pid 1226] +++ exited with 0 +++ [pid 1225] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1225, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./213/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./213/binderfs") = 0 umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./213/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./213/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./213") = 0 mkdir("./214", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1229 ./strace-static-x86_64: Process 1229 attached [pid 1229] set_robust_list(0x555556b826a0, 24) = 0 [pid 1229] chdir("./214") = 0 [pid 1229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1229] setpgid(0, 0) = 0 [pid 1229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1229] write(3, "1000", 4) = 4 [pid 1229] close(3) = 0 [pid 1229] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1229] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1229] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1229] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1229] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1229] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1229] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1230]}, 88) = 1230 [pid 1229] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 1230 attached [pid 1229] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1230] set_robust_list(0x7f96301a99a0, 24 [pid 1229] <... futex resumed>) = 0 [pid 1230] <... set_robust_list resumed>) = 0 [pid 1230] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1230] memfd_create("syzkaller", 0 [pid 1229] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1230] <... memfd_create resumed>) = 3 [pid 1230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1230] munmap(0x7f9627d89000, 262144) = 0 [pid 1230] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1230] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1230] close(3) = 0 [pid 1230] mkdir("./file0", 0777) = 0 [pid 1230] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1230] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1230] chdir("./file0") = 0 [pid 1230] ioctl(4, LOOP_CLR_FD) = 0 [pid 1230] close(4) = 0 [pid 1230] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1230] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1229] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1229] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1230] <... open resumed>) = 4 [pid 1230] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1230] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1229] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1230] <... open resumed>) = 5 [pid 1229] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1230] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1230] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1229] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1230] <... futex resumed>) = 0 [pid 1229] <... futex resumed>) = 1 [pid 1229] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1230] creat("./bus", 000) = 6 [pid 1230] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1230] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 1229] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1229] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1230] <... writev resumed>) = 1 [pid 1230] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1229] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1230] open("./bus", O_RDONLY [pid 1229] <... futex resumed>) = 0 [pid 1230] <... open resumed>) = 7 [pid 1229] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1230] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1230] sendfile(6, 7, NULL, 140737974943952 [pid 1229] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 85.268782][ T1230] loop0: detected capacity change from 0 to 512 [ 85.276834][ T1230] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 85.290197][ T1230] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1229] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1229] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1229] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1229] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1229] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1232 attached [pid 1232] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1232] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1232] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1229] <... clone3 resumed> => {parent_tid=[1232]}, 88) = 1232 [pid 1229] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1229] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1229] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1232] <... futex resumed>) = 0 [pid 1232] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1232] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1229] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1232] sendmsg(-1, 0x20000000, 0 [pid 1229] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1232] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1232] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1232] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1229] exit_group(0 [pid 1232] <... futex resumed>) = ? [pid 1229] <... exit_group resumed>) = ? [pid 1232] +++ exited with 0 +++ [pid 1230] <... sendfile resumed>) = ? [pid 1230] +++ exited with 0 +++ [pid 1229] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1229, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./214/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./214/binderfs") = 0 umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./214/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./214/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./214/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./214") = 0 mkdir("./215", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1233 ./strace-static-x86_64: Process 1233 attached [pid 1233] set_robust_list(0x555556b826a0, 24) = 0 [pid 1233] chdir("./215") = 0 [pid 1233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1233] setpgid(0, 0) = 0 [pid 1233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1233] write(3, "1000", 4) = 4 [pid 1233] close(3) = 0 [pid 1233] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1233] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1233] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1233] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1233] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1233] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1234 attached [pid 1234] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1234] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1234] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1233] <... clone3 resumed> => {parent_tid=[1234]}, 88) = 1234 [pid 1233] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1233] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1234] <... futex resumed>) = 0 [pid 1234] memfd_create("syzkaller", 0 [pid 1233] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1234] <... memfd_create resumed>) = 3 [pid 1234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1234] munmap(0x7f9627d89000, 262144) = 0 [pid 1234] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1234] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1234] close(3) = 0 [pid 1234] mkdir("./file0", 0777) = 0 [pid 1234] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1234] chdir("./file0") = 0 [pid 1234] ioctl(4, LOOP_CLR_FD) = 0 [pid 1234] close(4) = 0 [pid 1234] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1233] <... futex resumed>) = 0 [pid 1234] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1233] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1233] <... futex resumed>) = 0 [pid 1234] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1233] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1234] <... open resumed>) = 4 [pid 1234] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1233] <... futex resumed>) = 0 [pid 1234] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1233] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1234] <... open resumed>) = 5 [pid 1233] <... futex resumed>) = 0 [pid 1234] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1233] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1234] <... futex resumed>) = 0 [pid 1233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1234] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1233] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1233] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1234] <... futex resumed>) = 0 [pid 1234] creat("./bus", 000) = 6 [pid 1234] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1233] <... futex resumed>) = 0 [pid 1233] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1233] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1234] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1234] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1233] <... futex resumed>) = 0 [pid 1233] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1233] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1234] <... futex resumed>) = 1 [pid 1234] open("./bus", O_RDONLY) = 7 [pid 1234] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1233] <... futex resumed>) = 0 [pid 1233] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1233] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1234] <... futex resumed>) = 1 [ 85.585207][ T1234] loop0: detected capacity change from 0 to 512 [ 85.593431][ T1234] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 85.606532][ T1234] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1234] sendfile(6, 7, NULL, 140737974943952 [pid 1233] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1233] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1233] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1233] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1233] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1233] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1233] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1233] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1236]}, 88) = 1236 [pid 1233] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1233] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1233] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1236 attached [pid 1236] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1236] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1236] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1236] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1233] <... futex resumed>) = 0 [pid 1233] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1233] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1236] <... futex resumed>) = 1 [pid 1236] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1236] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1233] <... futex resumed>) = 0 [pid 1236] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1233] exit_group(0 [pid 1236] <... futex resumed>) = ? [pid 1233] <... exit_group resumed>) = ? [pid 1236] +++ exited with 0 +++ [pid 1234] <... sendfile resumed>) = ? [pid 1234] +++ exited with 0 +++ [pid 1233] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1233, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./215/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./215/binderfs") = 0 umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./215/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./215/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./215/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./215") = 0 mkdir("./216", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1238 ./strace-static-x86_64: Process 1238 attached [pid 1238] set_robust_list(0x555556b826a0, 24) = 0 [pid 1238] chdir("./216") = 0 [pid 1238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1238] setpgid(0, 0) = 0 [pid 1238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1238] write(3, "1000", 4) = 4 [pid 1238] close(3) = 0 [pid 1238] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1238] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1238] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1238] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1238] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1238] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1238] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1239]}, 88) = 1239 [pid 1238] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1238] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1238] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1239 attached [pid 1239] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1239] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1239] memfd_create("syzkaller", 0) = 3 [pid 1239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1239] munmap(0x7f9627d89000, 262144) = 0 [pid 1239] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1239] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1239] close(3) = 0 [pid 1239] mkdir("./file0", 0777) = 0 [pid 1239] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1239] chdir("./file0") = 0 [pid 1239] ioctl(4, LOOP_CLR_FD) = 0 [pid 1239] close(4) = 0 [pid 1239] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... futex resumed>) = 0 [pid 1238] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1238] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1239] <... futex resumed>) = 1 [pid 1239] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1239] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... futex resumed>) = 0 [pid 1238] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1238] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1239] <... futex resumed>) = 1 [pid 1239] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1239] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... futex resumed>) = 0 [pid 1238] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1238] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1239] <... futex resumed>) = 1 [pid 1239] creat("./bus", 000) = 6 [pid 1239] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... futex resumed>) = 0 [pid 1238] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1238] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1239] <... futex resumed>) = 1 [pid 1239] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1239] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... futex resumed>) = 0 [pid 1238] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1238] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1239] <... futex resumed>) = 1 [pid 1239] open("./bus", O_RDONLY) = 7 [pid 1239] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... futex resumed>) = 0 [pid 1238] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1238] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1239] <... futex resumed>) = 1 [ 85.849503][ T1239] loop0: detected capacity change from 0 to 512 [ 85.857474][ T1239] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 85.870887][ T1239] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1239] sendfile(6, 7, NULL, 140737974943952 [pid 1238] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1238] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1238] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1238] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1238] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1238] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1241 attached => {parent_tid=[1241]}, 88) = 1241 [pid 1238] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1238] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1238] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1241] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1241] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1241] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1241] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1238] <... futex resumed>) = 0 [pid 1238] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1238] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1241] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1241] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1238] <... futex resumed>) = 0 [pid 1241] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1238] exit_group(0 [pid 1241] <... futex resumed>) = ? [pid 1238] <... exit_group resumed>) = ? [pid 1241] +++ exited with 0 +++ [pid 1239] <... sendfile resumed>) = ? [pid 1239] +++ exited with 0 +++ [pid 1238] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1238, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./216/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./216/binderfs") = 0 umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./216/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./216/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./216") = 0 mkdir("./217", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1242 ./strace-static-x86_64: Process 1242 attached [pid 1242] set_robust_list(0x555556b826a0, 24) = 0 [pid 1242] chdir("./217") = 0 [pid 1242] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1242] setpgid(0, 0) = 0 [pid 1242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1242] write(3, "1000", 4) = 4 [pid 1242] close(3) = 0 [pid 1242] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1242] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1242] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1242] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1242] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1242] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1242] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1243]}, 88) = 1243 [pid 1242] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1242] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1242] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1243 attached [pid 1243] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1243] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1243] memfd_create("syzkaller", 0) = 3 [pid 1243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1243] munmap(0x7f9627d89000, 262144) = 0 [pid 1243] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1243] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1243] close(3) = 0 [pid 1243] mkdir("./file0", 0777) = 0 [pid 1243] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1243] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1243] chdir("./file0") = 0 [pid 1243] ioctl(4, LOOP_CLR_FD) = 0 [pid 1243] close(4) = 0 [pid 1243] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1242] <... futex resumed>) = 0 [pid 1242] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1242] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1243] <... futex resumed>) = 1 [pid 1243] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1243] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1242] <... futex resumed>) = 0 [pid 1242] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1242] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1243] <... futex resumed>) = 1 [pid 1243] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1243] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1242] <... futex resumed>) = 0 [pid 1242] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1242] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1243] <... futex resumed>) = 1 [pid 1243] creat("./bus", 000) = 6 [pid 1243] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1242] <... futex resumed>) = 0 [pid 1242] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1242] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1243] <... futex resumed>) = 1 [pid 1243] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1243] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1242] <... futex resumed>) = 0 [pid 1242] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1242] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1243] <... futex resumed>) = 1 [pid 1243] open("./bus", O_RDONLY) = 7 [pid 1243] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1242] <... futex resumed>) = 0 [pid 1242] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1242] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 86.171695][ T1243] loop0: detected capacity change from 0 to 512 [ 86.181597][ T1243] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 86.194780][ T1243] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1243] sendfile(6, 7, NULL, 140737974943952 [pid 1242] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1242] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1242] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1242] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1242] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1242] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1245 attached => {parent_tid=[1245]}, 88) = 1245 [pid 1245] set_robust_list(0x7f9627dc89a0, 24 [pid 1242] rt_sigprocmask(SIG_SETMASK, [], [pid 1245] <... set_robust_list resumed>) = 0 [pid 1242] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1245] rt_sigprocmask(SIG_SETMASK, [], [pid 1242] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1242] <... futex resumed>) = 0 [pid 1245] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1242] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1245] <... mmap resumed>) = 0x20000000 [pid 1245] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1245] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1242] <... futex resumed>) = 0 [pid 1242] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1242] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1245] <... futex resumed>) = 0 [pid 1245] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1245] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1242] <... futex resumed>) = 0 [pid 1245] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1242] exit_group(0 [pid 1245] <... futex resumed>) = ? [pid 1242] <... exit_group resumed>) = ? [pid 1245] +++ exited with 0 +++ [pid 1243] <... sendfile resumed>) = ? [pid 1243] +++ exited with 0 +++ [pid 1242] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1242, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./217/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./217/binderfs") = 0 umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./217/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./217/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./217/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./217") = 0 mkdir("./218", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1246 ./strace-static-x86_64: Process 1246 attached [pid 1246] set_robust_list(0x555556b826a0, 24) = 0 [pid 1246] chdir("./218") = 0 [pid 1246] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1246] setpgid(0, 0) = 0 [pid 1246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1246] write(3, "1000", 4) = 4 [pid 1246] close(3) = 0 [pid 1246] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1246] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1246] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1246] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1246] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1246] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1246] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1246] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1247]}, 88) = 1247 [pid 1246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1246] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1246] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1247 attached [pid 1247] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1247] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1247] memfd_create("syzkaller", 0) = 3 [pid 1247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1247] munmap(0x7f9627d89000, 262144) = 0 [pid 1247] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1247] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1247] close(3) = 0 [pid 1247] mkdir("./file0", 0777) = 0 [pid 1247] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1247] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1247] chdir("./file0") = 0 [pid 1247] ioctl(4, LOOP_CLR_FD) = 0 [pid 1247] close(4) = 0 [pid 1247] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1247] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1246] <... futex resumed>) = 0 [pid 1246] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1246] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1247] <... futex resumed>) = 0 [pid 1247] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1247] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1246] <... futex resumed>) = 0 [pid 1246] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1247] <... futex resumed>) = 1 [pid 1246] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1247] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1247] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1247] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1246] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1246] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1247] <... futex resumed>) = 0 [pid 1247] creat("./bus", 000) = 6 [pid 1247] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1246] <... futex resumed>) = 0 [pid 1246] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1246] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1247] <... futex resumed>) = 1 [pid 1247] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1247] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1246] <... futex resumed>) = 0 [pid 1246] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1246] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1247] <... futex resumed>) = 1 [pid 1247] open("./bus", O_RDONLY) = 7 [pid 1247] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1246] <... futex resumed>) = 0 [pid 1246] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1246] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1247] <... futex resumed>) = 1 [ 86.484119][ T1247] loop0: detected capacity change from 0 to 512 [ 86.492754][ T1247] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 86.505947][ T1247] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1247] sendfile(6, 7, NULL, 140737974943952 [pid 1246] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1246] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1246] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1246] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1246] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1246] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1246] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1246] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1249 attached [pid 1249] set_robust_list(0x7f9627dc89a0, 24 [pid 1246] <... clone3 resumed> => {parent_tid=[1249]}, 88) = 1249 [pid 1249] <... set_robust_list resumed>) = 0 [pid 1246] rt_sigprocmask(SIG_SETMASK, [], [pid 1249] rt_sigprocmask(SIG_SETMASK, [], [pid 1246] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1249] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1246] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1249] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1246] <... futex resumed>) = 0 [pid 1249] <... mmap resumed>) = 0x20000000 [pid 1246] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1249] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1246] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1249] <... futex resumed>) = 0 [pid 1246] <... futex resumed>) = 0 [pid 1249] sendmsg(-1, 0x20000000, 0 [pid 1246] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1249] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1249] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1246] <... futex resumed>) = 0 [pid 1249] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1246] exit_group(0) = ? [pid 1249] <... futex resumed>) = ? [pid 1249] +++ exited with 0 +++ [pid 1247] <... sendfile resumed>) = ? [pid 1247] +++ exited with 0 +++ [pid 1246] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1246, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./218/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./218/binderfs") = 0 umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./218/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./218/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./218/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./218") = 0 mkdir("./219", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1250 ./strace-static-x86_64: Process 1250 attached [pid 1250] set_robust_list(0x555556b826a0, 24) = 0 [pid 1250] chdir("./219") = 0 [pid 1250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1250] setpgid(0, 0) = 0 [pid 1250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1250] write(3, "1000", 4) = 4 [pid 1250] close(3) = 0 [pid 1250] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1250] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1250] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1250] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1250] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1250] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1250] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1251]}, 88) = 1251 [pid 1250] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1250] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1250] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1251 attached [pid 1251] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1251] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1251] memfd_create("syzkaller", 0) = 3 [pid 1251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1251] munmap(0x7f9627d89000, 262144) = 0 [pid 1251] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1251] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1251] close(3) = 0 [pid 1251] mkdir("./file0", 0777) = 0 [pid 1251] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1251] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1251] chdir("./file0") = 0 [pid 1251] ioctl(4, LOOP_CLR_FD) = 0 [pid 1251] close(4) = 0 [pid 1251] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1251] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1250] <... futex resumed>) = 0 [pid 1250] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1250] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1251] <... futex resumed>) = 0 [pid 1251] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1251] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1250] <... futex resumed>) = 0 [pid 1250] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1250] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1251] <... futex resumed>) = 1 [pid 1251] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1251] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1250] <... futex resumed>) = 0 [pid 1250] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1250] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1251] <... futex resumed>) = 1 [pid 1251] creat("./bus", 000) = 6 [pid 1251] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1250] <... futex resumed>) = 0 [pid 1250] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1250] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1251] <... futex resumed>) = 1 [pid 1251] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1251] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1251] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1250] <... futex resumed>) = 0 [pid 1250] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1250] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1251] <... futex resumed>) = 0 [pid 1251] open("./bus", O_RDONLY) = 7 [pid 1251] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1250] <... futex resumed>) = 0 [pid 1251] <... futex resumed>) = 1 [pid 1250] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1250] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 86.771993][ T1251] loop0: detected capacity change from 0 to 512 [ 86.781644][ T1251] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 86.796216][ T1251] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1251] sendfile(6, 7, NULL, 140737974943952 [pid 1250] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1250] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1250] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1250] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1250] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1250] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1250] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1254]}, 88) = 1254 ./strace-static-x86_64: Process 1254 attached [pid 1254] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1254] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1254] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1250] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1250] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1250] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1254] <... futex resumed>) = 0 [pid 1254] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1254] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1250] <... futex resumed>) = 0 [pid 1250] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1250] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1254] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1254] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1250] <... futex resumed>) = 0 [pid 1254] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1250] exit_group(0 [pid 1254] <... futex resumed>) = ? [pid 1250] <... exit_group resumed>) = ? [pid 1251] <... sendfile resumed>) = ? [pid 1254] +++ exited with 0 +++ [pid 1251] +++ exited with 0 +++ [pid 1250] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1250, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./219", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./219/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./219/binderfs") = 0 umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./219/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./219/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./219/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./219") = 0 mkdir("./220", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1255 ./strace-static-x86_64: Process 1255 attached [pid 1255] set_robust_list(0x555556b826a0, 24) = 0 [pid 1255] chdir("./220") = 0 [pid 1255] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1255] setpgid(0, 0) = 0 [pid 1255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1255] write(3, "1000", 4) = 4 [pid 1255] close(3) = 0 [pid 1255] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1255] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1255] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1255] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1255] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1255] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1255] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1255] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1256]}, 88) = 1256 [pid 1255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1255] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1255] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1256 attached [pid 1256] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1256] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1256] memfd_create("syzkaller", 0) = 3 [pid 1256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1256] munmap(0x7f9627d89000, 262144) = 0 [pid 1256] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1256] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1256] close(3) = 0 [pid 1256] mkdir("./file0", 0777) = 0 [pid 1256] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1256] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1256] chdir("./file0") = 0 [pid 1256] ioctl(4, LOOP_CLR_FD) = 0 [pid 1256] close(4) = 0 [pid 1256] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] <... futex resumed>) = 0 [pid 1255] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1255] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1256] <... futex resumed>) = 1 [pid 1256] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1256] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] <... futex resumed>) = 0 [pid 1255] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1255] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1256] <... futex resumed>) = 1 [pid 1256] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1256] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] <... futex resumed>) = 0 [pid 1255] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1255] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1256] <... futex resumed>) = 1 [pid 1256] creat("./bus", 000) = 6 [pid 1256] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] <... futex resumed>) = 0 [pid 1255] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1255] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1256] <... futex resumed>) = 1 [pid 1256] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1256] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] <... futex resumed>) = 0 [pid 1255] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1255] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1256] <... futex resumed>) = 1 [pid 1256] open("./bus", O_RDONLY) = 7 [pid 1256] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] <... futex resumed>) = 0 [pid 1255] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1255] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1256] <... futex resumed>) = 1 [ 87.081362][ T1256] loop0: detected capacity change from 0 to 512 [ 87.090885][ T1256] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 87.106679][ T1256] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1256] sendfile(6, 7, NULL, 140737974943952 [pid 1255] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1255] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1255] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1255] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1255] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1255] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1258]}, 88) = 1258 [pid 1255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1255] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1255] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1258 attached [pid 1258] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1258] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1258] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1258] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] <... futex resumed>) = 0 [pid 1255] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1255] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1258] <... futex resumed>) = 1 [pid 1258] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1258] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1255] <... futex resumed>) = 0 [pid 1258] <... futex resumed>) = 1 [pid 1258] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1255] exit_group(0) = ? [pid 1258] <... futex resumed>) = ? [pid 1256] <... sendfile resumed>) = ? [pid 1256] +++ exited with 0 +++ [pid 1258] +++ exited with 0 +++ [pid 1255] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1255, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./220", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./220/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./220/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./220/binderfs") = 0 umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./220/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./220/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./220/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./220") = 0 mkdir("./221", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1259 ./strace-static-x86_64: Process 1259 attached [pid 1259] set_robust_list(0x555556b826a0, 24) = 0 [pid 1259] chdir("./221") = 0 [pid 1259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1259] setpgid(0, 0) = 0 [pid 1259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1259] write(3, "1000", 4) = 4 [pid 1259] close(3) = 0 [pid 1259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1259] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1259] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1259] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1259] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1259] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1260 attached [pid 1260] set_robust_list(0x7f96301a99a0, 24 [pid 1259] <... clone3 resumed> => {parent_tid=[1260]}, 88) = 1260 [pid 1259] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1260] <... set_robust_list resumed>) = 0 [pid 1260] rt_sigprocmask(SIG_SETMASK, [], [pid 1259] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1260] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1259] <... futex resumed>) = 0 [pid 1260] memfd_create("syzkaller", 0 [pid 1259] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1260] <... memfd_create resumed>) = 3 [pid 1260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1260] munmap(0x7f9627d89000, 262144) = 0 [pid 1260] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1260] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1260] close(3) = 0 [pid 1260] mkdir("./file0", 0777) = 0 [pid 1260] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1260] chdir("./file0") = 0 [pid 1260] ioctl(4, LOOP_CLR_FD) = 0 [pid 1260] close(4) = 0 [pid 1260] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1260] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1259] <... futex resumed>) = 0 [pid 1259] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1259] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1260] <... futex resumed>) = 0 [pid 1260] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1260] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1259] <... futex resumed>) = 0 [pid 1259] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1259] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1260] <... futex resumed>) = 1 [pid 1260] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1260] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1259] <... futex resumed>) = 0 [pid 1259] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1259] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1260] <... futex resumed>) = 1 [pid 1260] creat("./bus", 000) = 6 [pid 1260] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1259] <... futex resumed>) = 0 [pid 1259] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1259] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1260] <... futex resumed>) = 1 [pid 1260] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1260] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1259] <... futex resumed>) = 0 [pid 1259] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1259] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1260] <... futex resumed>) = 1 [pid 1260] open("./bus", O_RDONLY) = 7 [pid 1260] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1259] <... futex resumed>) = 0 [pid 1259] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1259] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1260] <... futex resumed>) = 1 [ 87.414822][ T1260] loop0: detected capacity change from 0 to 512 [ 87.422737][ T1260] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 87.435878][ T1260] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1260] sendfile(6, 7, NULL, 140737974943952 [pid 1259] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1259] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1259] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1259] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1262 attached [pid 1262] set_robust_list(0x7f9627dc89a0, 24 [pid 1259] <... clone3 resumed> => {parent_tid=[1262]}, 88) = 1262 [pid 1259] rt_sigprocmask(SIG_SETMASK, [], [pid 1262] <... set_robust_list resumed>) = 0 [pid 1259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1262] rt_sigprocmask(SIG_SETMASK, [], [pid 1259] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1262] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1259] <... futex resumed>) = 0 [pid 1262] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1259] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1262] <... mmap resumed>) = 0x20000000 [pid 1262] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1259] <... futex resumed>) = 0 [pid 1259] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1262] sendmsg(-1, 0x20000000, 0 [pid 1259] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1262] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1262] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1259] <... futex resumed>) = 0 [pid 1262] <... futex resumed>) = 1 [pid 1262] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1259] exit_group(0 [pid 1262] <... futex resumed>) = ? [pid 1259] <... exit_group resumed>) = ? [pid 1260] <... sendfile resumed>) = ? [pid 1260] +++ exited with 0 +++ [pid 1262] +++ exited with 0 +++ [pid 1259] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1259, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./221", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./221/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./221/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./221/binderfs") = 0 umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./221/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./221/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./221/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./221") = 0 mkdir("./222", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1263 ./strace-static-x86_64: Process 1263 attached [pid 1263] set_robust_list(0x555556b826a0, 24) = 0 [pid 1263] chdir("./222") = 0 [pid 1263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1263] setpgid(0, 0) = 0 [pid 1263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1263] write(3, "1000", 4) = 4 [pid 1263] close(3) = 0 [pid 1263] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1263] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1263] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1263] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1263] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1263] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1263] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1264]}, 88) = 1264 [pid 1263] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1263] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1263] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1264 attached [pid 1264] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1264] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1264] memfd_create("syzkaller", 0) = 3 [pid 1264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1264] munmap(0x7f9627d89000, 262144) = 0 [pid 1264] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1264] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1264] close(3) = 0 [pid 1264] mkdir("./file0", 0777) = 0 [pid 1264] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1264] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1264] chdir("./file0") = 0 [pid 1264] ioctl(4, LOOP_CLR_FD) = 0 [pid 1264] close(4) = 0 [pid 1264] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1263] <... futex resumed>) = 0 [pid 1263] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1263] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1264] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1264] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1263] <... futex resumed>) = 0 [pid 1263] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1263] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1264] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1264] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1263] <... futex resumed>) = 0 [pid 1263] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1263] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1264] creat("./bus", 000) = 6 [pid 1264] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1263] <... futex resumed>) = 0 [pid 1263] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1263] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1264] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1264] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1263] <... futex resumed>) = 0 [pid 1263] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1263] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1264] open("./bus", O_RDONLY) = 7 [pid 1264] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1263] <... futex resumed>) = 0 [pid 1263] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1263] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 87.769234][ T1264] loop0: detected capacity change from 0 to 512 [ 87.779320][ T1264] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 87.793264][ T1264] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1264] sendfile(6, 7, NULL, 140737974943952 [pid 1263] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1263] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1263] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1263] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1263] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1263] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1267]}, 88) = 1267 ./strace-static-x86_64: Process 1267 attached [pid 1267] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1267] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1267] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1263] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1263] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1263] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1267] <... futex resumed>) = 0 [pid 1267] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1267] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1263] <... futex resumed>) = 0 [pid 1267] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1263] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1263] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1267] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1267] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1263] <... futex resumed>) = 0 [pid 1267] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1263] exit_group(0 [pid 1267] <... futex resumed>) = ? [pid 1263] <... exit_group resumed>) = ? [pid 1267] +++ exited with 0 +++ [pid 1264] <... sendfile resumed>) = 230 [pid 1264] +++ exited with 0 +++ [pid 1263] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1263, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./222", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./222/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./222/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./222/binderfs") = 0 umount2("./222/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./222/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./222/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./222/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./222/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./222/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./222") = 0 mkdir("./223", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1268 ./strace-static-x86_64: Process 1268 attached [pid 1268] set_robust_list(0x555556b826a0, 24) = 0 [pid 1268] chdir("./223") = 0 [pid 1268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1268] setpgid(0, 0) = 0 [pid 1268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1268] write(3, "1000", 4) = 4 [pid 1268] close(3) = 0 [pid 1268] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1268] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1268] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1268] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1268] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1268] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1268] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1269]}, 88) = 1269 [pid 1268] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1268] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1268] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1269 attached [pid 1269] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1269] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1269] memfd_create("syzkaller", 0) = 3 [pid 1269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1269] munmap(0x7f9627d89000, 262144) = 0 [pid 1269] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1269] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1269] close(3) = 0 [pid 1269] mkdir("./file0", 0777) = 0 [pid 1269] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1269] chdir("./file0") = 0 [pid 1269] ioctl(4, LOOP_CLR_FD) = 0 [pid 1269] close(4) = 0 [pid 1269] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1269] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1268] <... futex resumed>) = 0 [pid 1268] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1268] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1269] <... futex resumed>) = 0 [pid 1269] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1269] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1268] <... futex resumed>) = 0 [pid 1268] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1268] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1269] <... futex resumed>) = 1 [pid 1269] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1269] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1268] <... futex resumed>) = 0 [pid 1268] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1268] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1269] <... futex resumed>) = 1 [pid 1269] creat("./bus", 000) = 6 [pid 1269] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1268] <... futex resumed>) = 0 [pid 1268] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1268] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1269] <... futex resumed>) = 1 [pid 1269] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1269] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1268] <... futex resumed>) = 0 [pid 1268] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1268] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1269] <... futex resumed>) = 1 [pid 1269] open("./bus", O_RDONLY) = 7 [pid 1269] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1268] <... futex resumed>) = 0 [pid 1268] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1268] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1269] <... futex resumed>) = 1 [ 88.070106][ T1269] loop0: detected capacity change from 0 to 512 [ 88.079919][ T1269] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 88.093379][ T1269] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1269] sendfile(6, 7, NULL, 140737974943952 [pid 1268] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1268] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1268] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1268] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1268] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1268] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1271 attached [pid 1271] set_robust_list(0x7f9627dc89a0, 24 [pid 1268] <... clone3 resumed> => {parent_tid=[1271]}, 88) = 1271 [pid 1271] <... set_robust_list resumed>) = 0 [pid 1271] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1271] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1268] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1268] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1271] <... futex resumed>) = 0 [pid 1268] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1271] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1271] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1268] <... futex resumed>) = 0 [pid 1268] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1268] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1271] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1271] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1268] <... futex resumed>) = 0 [pid 1271] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1268] exit_group(0 [pid 1271] <... futex resumed>) = ? [pid 1268] <... exit_group resumed>) = ? [pid 1271] +++ exited with 0 +++ [pid 1269] <... sendfile resumed>) = ? [pid 1269] +++ exited with 0 +++ [pid 1268] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1268, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./223", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./223/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./223/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./223/binderfs") = 0 umount2("./223/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./223/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./223/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./223/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./223/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./223/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./223") = 0 mkdir("./224", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1272 ./strace-static-x86_64: Process 1272 attached [pid 1272] set_robust_list(0x555556b826a0, 24) = 0 [pid 1272] chdir("./224") = 0 [pid 1272] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1272] setpgid(0, 0) = 0 [pid 1272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1272] write(3, "1000", 4) = 4 [pid 1272] close(3) = 0 [pid 1272] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1272] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1272] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1272] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1272] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1272] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1272] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1273 attached => {parent_tid=[1273]}, 88) = 1273 [pid 1273] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1273] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1273] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1272] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1272] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1273] <... futex resumed>) = 0 [pid 1273] memfd_create("syzkaller", 0 [pid 1272] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1273] <... memfd_create resumed>) = 3 [pid 1273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1273] munmap(0x7f9627d89000, 262144) = 0 [pid 1273] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1273] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1273] close(3) = 0 [pid 1273] mkdir("./file0", 0777) = 0 [pid 1273] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1273] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1273] chdir("./file0") = 0 [pid 1273] ioctl(4, LOOP_CLR_FD) = 0 [pid 1273] close(4) = 0 [pid 1273] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1272] <... futex resumed>) = 0 [pid 1272] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1272] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1273] <... futex resumed>) = 1 [pid 1273] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1273] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1272] <... futex resumed>) = 0 [pid 1273] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1272] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1273] <... open resumed>) = 5 [pid 1272] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1273] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1273] <... futex resumed>) = 0 [pid 1272] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1273] creat("./bus", 000 [pid 1272] <... futex resumed>) = 0 [pid 1273] <... creat resumed>) = 6 [pid 1272] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1273] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1273] <... futex resumed>) = 0 [pid 1272] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1273] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1272] <... futex resumed>) = 0 [pid 1272] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1273] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1272] <... futex resumed>) = 0 [pid 1272] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1272] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1273] <... futex resumed>) = 1 [pid 1273] open("./bus", O_RDONLY) = 7 [pid 1273] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1272] <... futex resumed>) = 0 [pid 1272] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1272] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1273] <... futex resumed>) = 1 [ 88.372907][ T1273] loop0: detected capacity change from 0 to 512 [ 88.388042][ T1273] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 88.401576][ T1273] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1273] sendfile(6, 7, NULL, 140737974943952 [pid 1272] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1272] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1272] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1272] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1272] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1275 attached => {parent_tid=[1275]}, 88) = 1275 [pid 1275] set_robust_list(0x7f9627dc89a0, 24 [pid 1272] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1275] <... set_robust_list resumed>) = 0 [pid 1272] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1272] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1275] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1275] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1275] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1272] <... futex resumed>) = 0 [pid 1272] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1272] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1275] <... futex resumed>) = 1 [pid 1275] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1275] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1272] <... futex resumed>) = 0 [pid 1275] <... futex resumed>) = 1 [pid 1275] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1272] exit_group(0 [pid 1275] <... futex resumed>) = ? [pid 1272] <... exit_group resumed>) = ? [pid 1275] +++ exited with 0 +++ [pid 1273] <... sendfile resumed>) = ? [pid 1273] +++ exited with 0 +++ [pid 1272] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1272, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./224", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./224/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./224/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./224/binderfs") = 0 umount2("./224/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./224/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./224/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./224/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./224/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./224/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./224") = 0 mkdir("./225", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1276 ./strace-static-x86_64: Process 1276 attached [pid 1276] set_robust_list(0x555556b826a0, 24) = 0 [pid 1276] chdir("./225") = 0 [pid 1276] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1276] setpgid(0, 0) = 0 [pid 1276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1276] write(3, "1000", 4) = 4 [pid 1276] close(3) = 0 [pid 1276] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1276] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1276] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1276] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1276] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1276] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1276] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1277]}, 88) = 1277 [pid 1276] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1276] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1276] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1277 attached [pid 1277] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1277] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1277] memfd_create("syzkaller", 0) = 3 [pid 1277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1277] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1277] munmap(0x7f9627d89000, 262144) = 0 [pid 1277] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1277] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1277] close(3) = 0 [pid 1277] mkdir("./file0", 0777) = 0 [pid 1277] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1277] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1277] chdir("./file0") = 0 [pid 1277] ioctl(4, LOOP_CLR_FD) = 0 [pid 1277] close(4) = 0 [pid 1277] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1276] <... futex resumed>) = 0 [pid 1276] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1276] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1277] <... futex resumed>) = 1 [pid 1277] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1277] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1276] <... futex resumed>) = 0 [pid 1276] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1276] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1277] <... futex resumed>) = 1 [pid 1277] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1277] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1276] <... futex resumed>) = 0 [pid 1276] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1276] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1277] <... futex resumed>) = 1 [pid 1277] creat("./bus", 000) = 6 [pid 1277] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1276] <... futex resumed>) = 0 [pid 1276] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1276] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1277] <... futex resumed>) = 1 [pid 1277] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1277] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1276] <... futex resumed>) = 0 [pid 1277] open("./bus", O_RDONLY [pid 1276] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1276] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1277] <... open resumed>) = 7 [pid 1277] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1276] <... futex resumed>) = 0 [pid 1277] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1276] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1276] <... futex resumed>) = 0 [pid 1277] sendfile(6, 7, NULL, 140737974943952 [ 88.694588][ T1277] loop0: detected capacity change from 0 to 512 [ 88.703695][ T1277] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 88.716928][ T1277] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1276] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1276] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1276] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1276] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1276] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1276] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1280 attached => {parent_tid=[1280]}, 88) = 1280 [pid 1276] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1276] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1276] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1280] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1280] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1280] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1280] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1276] <... futex resumed>) = 0 [pid 1276] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1276] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1280] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1280] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1276] <... futex resumed>) = 0 [pid 1280] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1276] exit_group(0 [pid 1280] <... futex resumed>) = ? [pid 1276] <... exit_group resumed>) = ? [pid 1280] +++ exited with 0 +++ [pid 1277] <... sendfile resumed>) = ? [pid 1277] +++ exited with 0 +++ [pid 1276] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1276, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./225", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./225/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./225/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./225/binderfs") = 0 umount2("./225/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./225/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./225/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./225/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./225/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./225/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./225") = 0 mkdir("./226", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1281 ./strace-static-x86_64: Process 1281 attached [pid 1281] set_robust_list(0x555556b826a0, 24) = 0 [pid 1281] chdir("./226") = 0 [pid 1281] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1281] setpgid(0, 0) = 0 [pid 1281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1281] write(3, "1000", 4) = 4 [pid 1281] close(3) = 0 [pid 1281] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1281] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1281] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1281] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1281] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1281] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1282]}, 88) = 1282 [pid 1281] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1281] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 1282 attached [pid 1281] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1282] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1282] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1282] memfd_create("syzkaller", 0) = 3 [pid 1282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1282] munmap(0x7f9627d89000, 262144) = 0 [pid 1282] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1282] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1282] close(3) = 0 [pid 1282] mkdir("./file0", 0777) = 0 [pid 1282] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1282] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1282] chdir("./file0") = 0 [pid 1282] ioctl(4, LOOP_CLR_FD) = 0 [pid 1282] close(4) = 0 [pid 1282] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1282] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1281] <... futex resumed>) = 0 [pid 1281] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1281] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1282] <... futex resumed>) = 0 [pid 1282] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1282] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] <... futex resumed>) = 0 [pid 1281] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1281] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1282] <... futex resumed>) = 1 [pid 1282] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1282] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] <... futex resumed>) = 0 [pid 1281] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1281] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1282] <... futex resumed>) = 1 [pid 1282] creat("./bus", 000) = 6 [pid 1282] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] <... futex resumed>) = 0 [pid 1282] <... futex resumed>) = 1 [pid 1281] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1282] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 1281] <... futex resumed>) = 0 [pid 1281] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1282] <... writev resumed>) = 1 [pid 1282] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] <... futex resumed>) = 0 [pid 1281] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1281] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1282] <... futex resumed>) = 1 [pid 1282] open("./bus", O_RDONLY) = 7 [pid 1282] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] <... futex resumed>) = 0 [pid 1281] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1281] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1282] <... futex resumed>) = 1 [ 89.001942][ T1282] loop0: detected capacity change from 0 to 512 [ 89.010119][ T1282] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 89.023045][ T1282] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1282] sendfile(6, 7, NULL, 140737974943952 [pid 1281] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1281] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1281] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1281] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1281] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1281] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1281] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1284 attached => {parent_tid=[1284]}, 88) = 1284 [pid 1281] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1281] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1281] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1284] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1284] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1284] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1284] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] <... futex resumed>) = 0 [pid 1281] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1281] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1284] <... futex resumed>) = 1 [pid 1284] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1284] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1281] <... futex resumed>) = 0 [pid 1284] <... futex resumed>) = 1 [pid 1284] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1281] exit_group(0 [pid 1284] <... futex resumed>) = ? [pid 1281] <... exit_group resumed>) = ? [pid 1282] <... sendfile resumed>) = ? [pid 1284] +++ exited with 0 +++ [pid 1282] +++ exited with 0 +++ [pid 1281] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1281, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./226", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./226/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./226/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./226/binderfs") = 0 umount2("./226/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./226/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./226/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./226/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./226/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./226/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./226") = 0 mkdir("./227", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1285 ./strace-static-x86_64: Process 1285 attached [pid 1285] set_robust_list(0x555556b826a0, 24) = 0 [pid 1285] chdir("./227") = 0 [pid 1285] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1285] setpgid(0, 0) = 0 [pid 1285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1285] write(3, "1000", 4) = 4 [pid 1285] close(3) = 0 [pid 1285] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1285] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1285] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1285] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1285] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1285] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1285] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1285] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1286 attached => {parent_tid=[1286]}, 88) = 1286 [pid 1285] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1285] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1285] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1286] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1286] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1286] memfd_create("syzkaller", 0) = 3 [pid 1286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1286] munmap(0x7f9627d89000, 262144) = 0 [pid 1286] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1286] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1286] close(3) = 0 [pid 1286] mkdir("./file0", 0777) = 0 [pid 1286] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1286] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1286] chdir("./file0") = 0 [pid 1286] ioctl(4, LOOP_CLR_FD) = 0 [pid 1286] close(4) = 0 [pid 1286] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1285] <... futex resumed>) = 0 [pid 1285] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1285] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1286] <... futex resumed>) = 1 [pid 1286] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1286] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1285] <... futex resumed>) = 0 [pid 1285] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1285] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1286] <... futex resumed>) = 1 [pid 1286] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1286] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1285] <... futex resumed>) = 0 [pid 1285] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1285] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1286] <... futex resumed>) = 1 [pid 1286] creat("./bus", 000) = 6 [pid 1286] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1285] <... futex resumed>) = 0 [pid 1285] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1285] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1286] <... futex resumed>) = 1 [pid 1286] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1286] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1285] <... futex resumed>) = 0 [pid 1285] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1285] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1286] <... futex resumed>) = 1 [pid 1286] open("./bus", O_RDONLY) = 7 [pid 1286] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1285] <... futex resumed>) = 0 [pid 1285] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1285] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1286] <... futex resumed>) = 1 [ 89.278344][ T1286] loop0: detected capacity change from 0 to 512 [ 89.286478][ T1286] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 89.299464][ T1286] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1286] sendfile(6, 7, NULL, 140737974943952 [pid 1285] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1285] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1285] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1285] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1285] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1285] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1285] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1288]}, 88) = 1288 [pid 1285] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1285] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1285] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1288 attached [pid 1288] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1288] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1288] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1288] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1285] <... futex resumed>) = 0 [pid 1285] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1285] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1288] <... futex resumed>) = 1 [pid 1288] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1288] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1285] <... futex resumed>) = 0 [pid 1288] <... futex resumed>) = 1 [pid 1288] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1285] exit_group(0 [pid 1288] <... futex resumed>) = ? [pid 1285] <... exit_group resumed>) = ? [pid 1288] +++ exited with 0 +++ [pid 1286] <... sendfile resumed>) = ? [pid 1286] +++ exited with 0 +++ [pid 1285] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1285, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./227", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./227/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./227/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./227/binderfs") = 0 umount2("./227/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./227/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./227/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./227/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./227/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./227/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./227") = 0 mkdir("./228", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1289 ./strace-static-x86_64: Process 1289 attached [pid 1289] set_robust_list(0x555556b826a0, 24) = 0 [pid 1289] chdir("./228") = 0 [pid 1289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1289] setpgid(0, 0) = 0 [pid 1289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1289] write(3, "1000", 4) = 4 [pid 1289] close(3) = 0 [pid 1289] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1289] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1289] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1289] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1289] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1289] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1289] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1290 attached [pid 1290] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1290] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1290] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1289] <... clone3 resumed> => {parent_tid=[1290]}, 88) = 1290 [pid 1289] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1289] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1289] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1290] <... futex resumed>) = 0 [pid 1290] memfd_create("syzkaller", 0) = 3 [pid 1290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1290] munmap(0x7f9627d89000, 262144) = 0 [pid 1290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1290] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1290] close(3) = 0 [pid 1290] mkdir("./file0", 0777) = 0 [pid 1290] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1290] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1290] chdir("./file0") = 0 [pid 1290] ioctl(4, LOOP_CLR_FD) = 0 [pid 1290] close(4) = 0 [pid 1290] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1290] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1289] <... futex resumed>) = 0 [pid 1289] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1289] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1290] <... futex resumed>) = 0 [pid 1290] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1290] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1289] <... futex resumed>) = 0 [pid 1290] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1289] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1289] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1290] <... futex resumed>) = 0 [pid 1290] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1290] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1289] <... futex resumed>) = 0 [pid 1290] creat("./bus", 000 [pid 1289] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1289] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1290] <... creat resumed>) = 6 [pid 1290] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1289] <... futex resumed>) = 0 [pid 1289] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1289] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1290] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1290] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1289] <... futex resumed>) = 0 [pid 1289] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1289] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1290] open("./bus", O_RDONLY) = 7 [pid 1290] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1289] <... futex resumed>) = 0 [pid 1289] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1289] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 89.540909][ T1290] loop0: detected capacity change from 0 to 512 [ 89.548900][ T1290] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 89.562584][ T1290] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1290] sendfile(6, 7, NULL, 140737974943952 [pid 1289] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1289] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1289] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1289] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1289] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1289] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1292]}, 88) = 1292 [pid 1289] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1289] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1289] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1292 attached [pid 1292] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1292] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1292] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1292] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1289] <... futex resumed>) = 0 [pid 1289] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1289] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1292] <... futex resumed>) = 1 [pid 1292] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1292] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1289] <... futex resumed>) = 0 [pid 1292] <... futex resumed>) = 1 [pid 1292] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1289] exit_group(0 [pid 1292] <... futex resumed>) = ? [pid 1289] <... exit_group resumed>) = ? [pid 1290] <... sendfile resumed>) = ? [pid 1292] +++ exited with 0 +++ [pid 1290] +++ exited with 0 +++ [pid 1289] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1289, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./228", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./228/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./228/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./228/binderfs") = 0 umount2("./228/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./228/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./228/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./228/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./228/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./228/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./228") = 0 mkdir("./229", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1294 ./strace-static-x86_64: Process 1294 attached [pid 1294] set_robust_list(0x555556b826a0, 24) = 0 [pid 1294] chdir("./229") = 0 [pid 1294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1294] setpgid(0, 0) = 0 [pid 1294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1294] write(3, "1000", 4) = 4 [pid 1294] close(3) = 0 [pid 1294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1294] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1294] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1294] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1294] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1294] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1294] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1295]}, 88) = 1295 [pid 1294] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 1295 attached [pid 1294] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1295] set_robust_list(0x7f96301a99a0, 24 [pid 1294] <... futex resumed>) = 0 [pid 1295] <... set_robust_list resumed>) = 0 [pid 1295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1294] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1295] memfd_create("syzkaller", 0) = 3 [pid 1295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1295] munmap(0x7f9627d89000, 262144) = 0 [pid 1295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1295] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1295] close(3) = 0 [pid 1295] mkdir("./file0", 0777) = 0 [pid 1295] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1295] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1295] chdir("./file0") = 0 [pid 1295] ioctl(4, LOOP_CLR_FD) = 0 [pid 1295] close(4) = 0 [pid 1295] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1294] <... futex resumed>) = 0 [pid 1294] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1294] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1295] <... futex resumed>) = 1 [pid 1295] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1295] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1294] <... futex resumed>) = 0 [pid 1294] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1294] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1295] <... futex resumed>) = 1 [pid 1295] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1295] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1294] <... futex resumed>) = 0 [pid 1294] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1294] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1295] <... futex resumed>) = 1 [pid 1295] creat("./bus", 000) = 6 [pid 1295] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1294] <... futex resumed>) = 0 [pid 1294] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1294] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1295] <... futex resumed>) = 1 [pid 1295] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1295] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1294] <... futex resumed>) = 0 [pid 1294] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1294] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1295] <... futex resumed>) = 1 [pid 1295] open("./bus", O_RDONLY) = 7 [pid 1295] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1294] <... futex resumed>) = 0 [pid 1294] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1294] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1295] <... futex resumed>) = 1 [ 89.823906][ T1295] loop0: detected capacity change from 0 to 512 [ 89.832091][ T1295] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 89.845982][ T1295] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1295] sendfile(6, 7, NULL, 140737974943952 [pid 1294] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1294] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1294] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1294] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1294] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1294] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1294] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1294] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1294] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1294] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1297]}, 88) = 1297 [pid 1294] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1294] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1294] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1297 attached [pid 1297] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1297] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1297] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1294] <... futex resumed>) = 0 [pid 1294] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1294] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1297] <... futex resumed>) = 1 [pid 1297] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1297] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1294] <... futex resumed>) = 0 [pid 1297] <... futex resumed>) = 1 [pid 1297] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1294] exit_group(0) = ? [pid 1297] <... futex resumed>) = ? [pid 1295] <... sendfile resumed>) = ? [pid 1297] +++ exited with 0 +++ [pid 1295] +++ exited with 0 +++ [pid 1294] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1294, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./229", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./229/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./229/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./229/binderfs") = 0 umount2("./229/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./229/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./229/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./229/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./229/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./229/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./229") = 0 mkdir("./230", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1298 ./strace-static-x86_64: Process 1298 attached [pid 1298] set_robust_list(0x555556b826a0, 24) = 0 [pid 1298] chdir("./230") = 0 [pid 1298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1298] setpgid(0, 0) = 0 [pid 1298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1298] write(3, "1000", 4) = 4 [pid 1298] close(3) = 0 [pid 1298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1298] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1298] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1298] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1298] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1299]}, 88) = 1299 [pid 1298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1299 attached [pid 1299] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1299] memfd_create("syzkaller", 0) = 3 [pid 1299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1299] munmap(0x7f9627d89000, 262144) = 0 [pid 1299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1299] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1299] close(3) = 0 [pid 1299] mkdir("./file0", 0777) = 0 [pid 1299] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1299] chdir("./file0") = 0 [pid 1299] ioctl(4, LOOP_CLR_FD) = 0 [pid 1299] close(4) = 0 [pid 1299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1298] <... futex resumed>) = 0 [pid 1298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1299] <... futex resumed>) = 1 [pid 1299] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1298] <... futex resumed>) = 0 [pid 1298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1299] <... futex resumed>) = 1 [pid 1299] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1298] <... futex resumed>) = 0 [pid 1298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1299] <... futex resumed>) = 1 [pid 1299] creat("./bus", 000) = 6 [pid 1299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1298] <... futex resumed>) = 0 [pid 1298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1299] <... futex resumed>) = 1 [pid 1299] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1298] <... futex resumed>) = 0 [pid 1298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1299] <... futex resumed>) = 1 [pid 1299] open("./bus", O_RDONLY) = 7 [pid 1299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1298] <... futex resumed>) = 0 [pid 1298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1299] <... futex resumed>) = 1 [ 90.091327][ T1299] loop0: detected capacity change from 0 to 512 [ 90.099387][ T1299] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 90.112374][ T1299] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1299] sendfile(6, 7, NULL, 140737974943952 [pid 1298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1298] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1298] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1301 attached => {parent_tid=[1301]}, 88) = 1301 [pid 1298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1298] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1298] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1301] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1301] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1301] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1298] <... futex resumed>) = 0 [pid 1298] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1298] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1301] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1301] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1298] <... futex resumed>) = 0 [pid 1301] <... futex resumed>) = 1 [pid 1301] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1298] exit_group(0) = ? [pid 1299] <... sendfile resumed>) = ? [pid 1299] +++ exited with 0 +++ [pid 1301] <... futex resumed>) = ? [pid 1301] +++ exited with 0 +++ [pid 1298] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1298, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./230", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./230/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./230/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./230/binderfs") = 0 umount2("./230/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./230/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./230/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./230/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./230/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./230/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./230") = 0 mkdir("./231", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1302 ./strace-static-x86_64: Process 1302 attached [pid 1302] set_robust_list(0x555556b826a0, 24) = 0 [pid 1302] chdir("./231") = 0 [pid 1302] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1302] setpgid(0, 0) = 0 [pid 1302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1302] write(3, "1000", 4) = 4 [pid 1302] close(3) = 0 [pid 1302] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1302] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1302] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1302] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1302] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1302] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1303]}, 88) = 1303 [pid 1302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1302] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1302] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1303 attached [pid 1303] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1303] memfd_create("syzkaller", 0) = 3 [pid 1303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1303] munmap(0x7f9627d89000, 262144) = 0 [pid 1303] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1303] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1303] close(3) = 0 [pid 1303] mkdir("./file0", 0777) = 0 [pid 1303] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1303] chdir("./file0") = 0 [pid 1303] ioctl(4, LOOP_CLR_FD) = 0 [pid 1303] close(4) = 0 [pid 1303] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1303] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1302] <... futex resumed>) = 0 [pid 1302] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1302] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1303] <... futex resumed>) = 0 [pid 1303] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1303] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1302] <... futex resumed>) = 0 [pid 1302] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1302] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1303] <... futex resumed>) = 1 [pid 1303] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1303] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1302] <... futex resumed>) = 0 [pid 1302] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1302] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1303] <... futex resumed>) = 1 [pid 1303] creat("./bus", 000) = 6 [pid 1303] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1302] <... futex resumed>) = 0 [pid 1302] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1302] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1303] <... futex resumed>) = 1 [pid 1303] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1303] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1302] <... futex resumed>) = 0 [pid 1302] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1302] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1303] <... futex resumed>) = 1 [pid 1303] open("./bus", O_RDONLY) = 7 [pid 1303] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1302] <... futex resumed>) = 0 [pid 1302] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1302] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1303] <... futex resumed>) = 1 [ 90.446884][ T1303] loop0: detected capacity change from 0 to 512 [ 90.455630][ T1303] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 90.468937][ T1303] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1303] sendfile(6, 7, NULL, 140737974943952 [pid 1302] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1302] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1302] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1302] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1302] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1305 attached [pid 1305] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1305] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1302] <... clone3 resumed> => {parent_tid=[1305]}, 88) = 1305 [pid 1302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1302] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1302] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1305] <... futex resumed>) = 0 [pid 1305] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1305] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1302] <... futex resumed>) = 0 [pid 1302] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1302] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1305] <... futex resumed>) = 1 [pid 1305] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1305] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1302] <... futex resumed>) = 0 [pid 1305] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1302] exit_group(0) = ? [pid 1305] <... futex resumed>) = ? [pid 1305] +++ exited with 0 +++ [pid 1303] <... sendfile resumed>) = ? [pid 1303] +++ exited with 0 +++ [pid 1302] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1302, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./231", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./231/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./231/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./231/binderfs") = 0 umount2("./231/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./231/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./231/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./231/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./231/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./231/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./231") = 0 mkdir("./232", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1306 ./strace-static-x86_64: Process 1306 attached [pid 1306] set_robust_list(0x555556b826a0, 24) = 0 [pid 1306] chdir("./232") = 0 [pid 1306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1306] setpgid(0, 0) = 0 [pid 1306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1306] write(3, "1000", 4) = 4 [pid 1306] close(3) = 0 [pid 1306] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1306] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1306] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1306] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1306] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1306] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1307]}, 88) = 1307 [pid 1306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1306] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1306] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1307 attached [pid 1307] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1307] memfd_create("syzkaller", 0) = 3 [pid 1307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1307] munmap(0x7f9627d89000, 262144) = 0 [pid 1307] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1307] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1307] close(3) = 0 [pid 1307] mkdir("./file0", 0777) = 0 [pid 1307] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1307] chdir("./file0") = 0 [pid 1307] ioctl(4, LOOP_CLR_FD) = 0 [pid 1307] close(4) = 0 [pid 1307] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... futex resumed>) = 0 [pid 1306] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1306] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1307] <... futex resumed>) = 1 [pid 1307] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1307] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... futex resumed>) = 0 [pid 1306] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1306] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1307] <... futex resumed>) = 1 [pid 1307] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1307] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... futex resumed>) = 0 [pid 1306] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1306] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1307] <... futex resumed>) = 1 [pid 1307] creat("./bus", 000) = 6 [pid 1307] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... futex resumed>) = 0 [pid 1306] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1306] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1307] <... futex resumed>) = 1 [pid 1307] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1307] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... futex resumed>) = 0 [pid 1306] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1306] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1307] <... futex resumed>) = 1 [pid 1307] open("./bus", O_RDONLY) = 7 [pid 1307] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1306] <... futex resumed>) = 0 [pid 1307] sendfile(6, 7, NULL, 140737974943952 [pid 1306] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.770840][ T1307] loop0: detected capacity change from 0 to 512 [ 90.779929][ T1307] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 90.793456][ T1307] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1306] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1306] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1306] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1306] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1306] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1306] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1310 attached => {parent_tid=[1310]}, 88) = 1310 [pid 1306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1306] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1306] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1310] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1310] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1310] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1306] <... futex resumed>) = 0 [pid 1306] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1306] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1310] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1310] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... futex resumed>) = 0 [pid 1310] <... futex resumed>) = 1 [pid 1310] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1306] exit_group(0 [pid 1310] <... futex resumed>) = ? [pid 1306] <... exit_group resumed>) = ? [pid 1310] +++ exited with 0 +++ [pid 1307] <... sendfile resumed>) = ? [pid 1307] +++ exited with 0 +++ [pid 1306] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1306, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./232", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./232/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./232/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./232/binderfs") = 0 umount2("./232/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./232/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./232/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./232/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./232/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./232/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./232") = 0 mkdir("./233", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1311 ./strace-static-x86_64: Process 1311 attached [pid 1311] set_robust_list(0x555556b826a0, 24) = 0 [pid 1311] chdir("./233") = 0 [pid 1311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1311] setpgid(0, 0) = 0 [pid 1311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1311] write(3, "1000", 4) = 4 [pid 1311] close(3) = 0 [pid 1311] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1311] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1311] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1311] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1311] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1312]}, 88) = 1312 [pid 1311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1311] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1311] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1312 attached [pid 1312] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1312] memfd_create("syzkaller", 0) = 3 [pid 1312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1312] munmap(0x7f9627d89000, 262144) = 0 [pid 1312] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1312] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1312] close(3) = 0 [pid 1312] mkdir("./file0", 0777) = 0 [pid 1312] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1312] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1312] chdir("./file0") = 0 [pid 1312] ioctl(4, LOOP_CLR_FD) = 0 [pid 1312] close(4) = 0 [pid 1312] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1312] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1311] <... futex resumed>) = 0 [pid 1311] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1311] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1312] <... futex resumed>) = 0 [pid 1312] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1312] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1311] <... futex resumed>) = 0 [pid 1311] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1311] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1312] <... futex resumed>) = 1 [pid 1312] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1312] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1311] <... futex resumed>) = 0 [pid 1311] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1311] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1312] <... futex resumed>) = 1 [pid 1312] creat("./bus", 000) = 6 [pid 1312] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1311] <... futex resumed>) = 0 [pid 1311] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1311] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1312] <... futex resumed>) = 1 [pid 1312] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1312] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1311] <... futex resumed>) = 0 [pid 1312] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1311] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1311] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1312] open("./bus", O_RDONLY) = 7 [pid 1312] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1311] <... futex resumed>) = 0 [pid 1312] sendfile(6, 7, NULL, 140737974943952 [pid 1311] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 91.083595][ T1312] loop0: detected capacity change from 0 to 512 [ 91.092272][ T1312] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 91.105520][ T1312] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1311] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1311] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1311] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1314]}, 88) = 1314 ./strace-static-x86_64: Process 1314 attached [pid 1311] rt_sigprocmask(SIG_SETMASK, [], [pid 1314] set_robust_list(0x7f9627dc89a0, 24 [pid 1311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1314] <... set_robust_list resumed>) = 0 [pid 1311] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1314] rt_sigprocmask(SIG_SETMASK, [], [pid 1311] <... futex resumed>) = 0 [pid 1311] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1314] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1314] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1314] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1311] <... futex resumed>) = 0 [pid 1311] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1314] sendmsg(-1, 0x20000000, 0 [pid 1311] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1314] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1314] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1311] <... futex resumed>) = 0 [pid 1314] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1311] exit_group(0 [pid 1314] <... futex resumed>) = ? [pid 1311] <... exit_group resumed>) = ? [pid 1314] +++ exited with 0 +++ [pid 1312] <... sendfile resumed>) = ? [pid 1312] +++ exited with 0 +++ [pid 1311] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1311, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./233", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./233", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./233/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./233/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./233/binderfs") = 0 umount2("./233/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./233/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./233/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./233/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./233/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./233/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./233") = 0 mkdir("./234", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1315 ./strace-static-x86_64: Process 1315 attached [pid 1315] set_robust_list(0x555556b826a0, 24) = 0 [pid 1315] chdir("./234") = 0 [pid 1315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1315] setpgid(0, 0) = 0 [pid 1315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1315] write(3, "1000", 4) = 4 [pid 1315] close(3) = 0 [pid 1315] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1315] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1315] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1315] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1315] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1315] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1316]}, 88) = 1316 [pid 1315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1315] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1315] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1316 attached [pid 1316] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1316] memfd_create("syzkaller", 0) = 3 [pid 1316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1316] munmap(0x7f9627d89000, 262144) = 0 [pid 1316] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1316] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1316] close(3) = 0 [pid 1316] mkdir("./file0", 0777) = 0 [pid 1316] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1316] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1316] chdir("./file0") = 0 [pid 1316] ioctl(4, LOOP_CLR_FD) = 0 [pid 1316] close(4) = 0 [pid 1316] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1315] <... futex resumed>) = 0 [pid 1315] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1315] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1316] <... futex resumed>) = 1 [pid 1316] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1316] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1315] <... futex resumed>) = 0 [pid 1315] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1315] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1316] <... futex resumed>) = 1 [pid 1316] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1316] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1315] <... futex resumed>) = 0 [pid 1315] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1315] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1316] <... futex resumed>) = 1 [pid 1316] creat("./bus", 000) = 6 [pid 1316] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1315] <... futex resumed>) = 0 [pid 1315] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1315] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1316] <... futex resumed>) = 1 [pid 1316] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1316] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1315] <... futex resumed>) = 0 [pid 1315] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1315] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1316] <... futex resumed>) = 1 [pid 1316] open("./bus", O_RDONLY) = 7 [pid 1316] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1315] <... futex resumed>) = 0 [pid 1315] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1315] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1316] <... futex resumed>) = 1 [ 91.414154][ T1316] loop0: detected capacity change from 0 to 512 [ 91.421778][ T1316] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 91.434843][ T1316] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1316] sendfile(6, 7, NULL, 140737974943952 [pid 1315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1315] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1315] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1315] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1315] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1315] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1315] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1318]}, 88) = 1318 [pid 1315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1315] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1315] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1318 attached [pid 1318] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1318] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1318] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1315] <... futex resumed>) = 0 [pid 1315] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1315] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1318] <... futex resumed>) = 1 [pid 1318] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1318] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1315] <... futex resumed>) = 0 [pid 1318] <... futex resumed>) = 1 [pid 1318] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1315] exit_group(0) = ? [pid 1318] <... futex resumed>) = ? [pid 1318] +++ exited with 0 +++ [pid 1316] <... sendfile resumed>) = ? [pid 1316] +++ exited with 0 +++ [pid 1315] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1315, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./234", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./234", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./234/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./234/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./234/binderfs") = 0 umount2("./234/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./234/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./234/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./234/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./234/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./234/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./234") = 0 mkdir("./235", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1319 ./strace-static-x86_64: Process 1319 attached [pid 1319] set_robust_list(0x555556b826a0, 24) = 0 [pid 1319] chdir("./235") = 0 [pid 1319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1319] setpgid(0, 0) = 0 [pid 1319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1319] write(3, "1000", 4) = 4 [pid 1319] close(3) = 0 [pid 1319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1319] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1319] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1319] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1319] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1320]}, 88) = 1320 [pid 1319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1319] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1320 attached [pid 1320] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1320] memfd_create("syzkaller", 0) = 3 [pid 1320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1320] munmap(0x7f9627d89000, 262144) = 0 [pid 1320] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1320] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1320] close(3) = 0 [pid 1320] mkdir("./file0", 0777) = 0 [pid 1320] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1320] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1320] chdir("./file0") = 0 [pid 1320] ioctl(4, LOOP_CLR_FD) = 0 [pid 1320] close(4) = 0 [pid 1320] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1319] <... futex resumed>) = 0 [pid 1319] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1320] <... futex resumed>) = 1 [pid 1320] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1320] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1320] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1319] <... futex resumed>) = 0 [pid 1319] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1319] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1320] <... futex resumed>) = 0 [pid 1320] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1320] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1319] <... futex resumed>) = 0 [pid 1319] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1320] <... futex resumed>) = 1 [pid 1320] creat("./bus", 000) = 6 [pid 1320] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1319] <... futex resumed>) = 0 [pid 1319] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1320] <... futex resumed>) = 1 [pid 1320] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1320] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1319] <... futex resumed>) = 0 [pid 1319] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1320] <... futex resumed>) = 1 [pid 1320] open("./bus", O_RDONLY) = 7 [pid 1320] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1319] <... futex resumed>) = 0 [pid 1319] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1320] <... futex resumed>) = 1 [ 91.720845][ T1320] loop0: detected capacity change from 0 to 512 [ 91.729468][ T1320] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 91.742603][ T1320] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1320] sendfile(6, 7, NULL, 140737974943952 [pid 1319] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1319] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1319] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1319] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1323 attached => {parent_tid=[1323]}, 88) = 1323 [pid 1319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1319] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1323] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1323] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1323] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1319] <... futex resumed>) = 0 [pid 1319] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1319] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1323] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1323] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1319] <... futex resumed>) = 0 [pid 1323] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1319] exit_group(0 [pid 1323] <... futex resumed>) = ? [pid 1319] <... exit_group resumed>) = ? [pid 1323] +++ exited with 0 +++ [pid 1320] <... sendfile resumed>) = ? [pid 1320] +++ exited with 0 +++ [pid 1319] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1319, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./235", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./235", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./235/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./235/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./235/binderfs") = 0 umount2("./235/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./235/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./235/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./235/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./235/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./235/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./235") = 0 mkdir("./236", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1324 ./strace-static-x86_64: Process 1324 attached [pid 1324] set_robust_list(0x555556b826a0, 24) = 0 [pid 1324] chdir("./236") = 0 [pid 1324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1324] setpgid(0, 0) = 0 [pid 1324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1324] write(3, "1000", 4) = 4 [pid 1324] close(3) = 0 [pid 1324] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1324] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1324] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1324] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1324] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1324] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1324] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1325]}, 88) = 1325 [pid 1324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1324] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1324] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1325 attached [pid 1325] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1325] memfd_create("syzkaller", 0) = 3 [pid 1325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1325] munmap(0x7f9627d89000, 262144) = 0 [pid 1325] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1325] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1325] close(3) = 0 [pid 1325] mkdir("./file0", 0777) = 0 [pid 1325] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1325] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1325] chdir("./file0") = 0 [pid 1325] ioctl(4, LOOP_CLR_FD) = 0 [pid 1325] close(4) = 0 [pid 1325] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1325] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1324] <... futex resumed>) = 0 [pid 1324] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1324] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1325] <... futex resumed>) = 0 [pid 1325] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1325] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1324] <... futex resumed>) = 0 [pid 1324] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1324] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1325] <... futex resumed>) = 1 [pid 1325] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1325] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1324] <... futex resumed>) = 0 [pid 1324] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1324] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1325] <... futex resumed>) = 1 [pid 1325] creat("./bus", 000) = 6 [pid 1325] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1324] <... futex resumed>) = 0 [pid 1324] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1324] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1325] <... futex resumed>) = 1 [pid 1325] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1325] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1324] <... futex resumed>) = 0 [pid 1324] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1324] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1325] <... futex resumed>) = 1 [pid 1325] open("./bus", O_RDONLY) = 7 [pid 1325] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1324] <... futex resumed>) = 0 [pid 1324] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1324] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1325] <... futex resumed>) = 1 [ 91.983957][ T1325] loop0: detected capacity change from 0 to 512 [ 91.992256][ T1325] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 92.005271][ T1325] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1325] sendfile(6, 7, NULL, 140737974943952 [pid 1324] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1324] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1324] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1324] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1324] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1327 attached => {parent_tid=[1327]}, 88) = 1327 [pid 1327] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1327] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1324] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1324] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1327] <... futex resumed>) = 0 [pid 1327] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1327] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1327] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1324] <... futex resumed>) = 0 [pid 1324] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1327] <... futex resumed>) = 0 [pid 1324] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1327] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1327] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1324] <... futex resumed>) = 0 [pid 1327] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1324] exit_group(0) = ? [pid 1327] <... futex resumed>) = ? [pid 1327] +++ exited with 0 +++ [pid 1325] <... sendfile resumed>) = ? [pid 1325] +++ exited with 0 +++ [pid 1324] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1324, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./236", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./236", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./236/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./236/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./236/binderfs") = 0 umount2("./236/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./236/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./236/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./236/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./236/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./236/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./236") = 0 mkdir("./237", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1328 ./strace-static-x86_64: Process 1328 attached [pid 1328] set_robust_list(0x555556b826a0, 24) = 0 [pid 1328] chdir("./237") = 0 [pid 1328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1328] setpgid(0, 0) = 0 [pid 1328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1328] write(3, "1000", 4) = 4 [pid 1328] close(3) = 0 [pid 1328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1328] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1328] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1328] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1328] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1328] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1329]}, 88) = 1329 [pid 1328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1328] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1328] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1329 attached [pid 1329] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1329] memfd_create("syzkaller", 0) = 3 [pid 1329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1329] munmap(0x7f9627d89000, 262144) = 0 [pid 1329] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1329] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1329] close(3) = 0 [pid 1329] mkdir("./file0", 0777) = 0 [pid 1329] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1329] chdir("./file0") = 0 [pid 1329] ioctl(4, LOOP_CLR_FD) = 0 [pid 1329] close(4) = 0 [pid 1329] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1328] <... futex resumed>) = 0 [pid 1328] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1328] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1329] <... futex resumed>) = 1 [pid 1329] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1329] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1328] <... futex resumed>) = 0 [pid 1328] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1328] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1329] <... futex resumed>) = 1 [pid 1329] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1329] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1328] <... futex resumed>) = 0 [pid 1328] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1328] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1329] creat("./bus", 000) = 6 [pid 1329] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1328] <... futex resumed>) = 0 [pid 1328] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1328] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1329] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1329] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1328] <... futex resumed>) = 0 [pid 1328] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1328] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1329] <... futex resumed>) = 1 [pid 1329] open("./bus", O_RDONLY) = 7 [pid 1329] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1328] <... futex resumed>) = 0 [pid 1328] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1328] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1329] <... futex resumed>) = 1 [ 92.275191][ T1329] loop0: detected capacity change from 0 to 512 [ 92.283608][ T1329] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 92.296770][ T1329] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1329] sendfile(6, 7, NULL, 140737974943952 [pid 1328] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1328] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1328] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1328] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1331]}, 88) = 1331 [pid 1328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1328] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1328] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1331 attached [pid 1331] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1331] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1331] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1328] <... futex resumed>) = 0 [pid 1328] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1328] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1331] <... futex resumed>) = 1 [pid 1331] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1331] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1328] <... futex resumed>) = 0 [pid 1331] <... futex resumed>) = 1 [pid 1331] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1328] exit_group(0 [pid 1331] <... futex resumed>) = ? [pid 1328] <... exit_group resumed>) = ? [pid 1331] +++ exited with 0 +++ [pid 1329] <... sendfile resumed>) = ? [pid 1329] +++ exited with 0 +++ [pid 1328] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1328, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./237", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./237", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./237/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./237/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./237/binderfs") = 0 umount2("./237/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./237/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./237/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./237/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./237/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./237/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./237") = 0 mkdir("./238", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1332 ./strace-static-x86_64: Process 1332 attached [pid 1332] set_robust_list(0x555556b826a0, 24) = 0 [pid 1332] chdir("./238") = 0 [pid 1332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1332] setpgid(0, 0) = 0 [pid 1332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1332] write(3, "1000", 4) = 4 [pid 1332] close(3) = 0 [pid 1332] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1332] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1332] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1332] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1332] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1332] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1333]}, 88) = 1333 [pid 1332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1332] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1332] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1333 attached [pid 1333] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1333] memfd_create("syzkaller", 0) = 3 [pid 1333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1333] munmap(0x7f9627d89000, 262144) = 0 [pid 1333] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1333] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1333] close(3) = 0 [pid 1333] mkdir("./file0", 0777) = 0 [pid 1333] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1333] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1333] chdir("./file0") = 0 [pid 1333] ioctl(4, LOOP_CLR_FD) = 0 [pid 1333] close(4) = 0 [pid 1333] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1332] <... futex resumed>) = 0 [pid 1332] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1332] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1333] <... futex resumed>) = 1 [pid 1333] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1333] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1332] <... futex resumed>) = 0 [pid 1332] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1332] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1333] <... futex resumed>) = 1 [pid 1333] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1333] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1332] <... futex resumed>) = 0 [pid 1332] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1332] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1333] <... futex resumed>) = 1 [pid 1333] creat("./bus", 000) = 6 [pid 1333] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1332] <... futex resumed>) = 0 [pid 1332] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1332] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1333] <... futex resumed>) = 1 [pid 1333] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1333] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1332] <... futex resumed>) = 0 [pid 1332] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1332] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1333] <... futex resumed>) = 1 [pid 1333] open("./bus", O_RDONLY) = 7 [pid 1333] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1332] <... futex resumed>) = 0 [pid 1332] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1332] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1333] <... futex resumed>) = 1 [ 92.582310][ T1333] loop0: detected capacity change from 0 to 512 [ 92.590897][ T1333] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 92.604259][ T1333] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1333] sendfile(6, 7, NULL, 140737974943952 [pid 1332] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1332] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1332] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1332] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1332] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1332] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1335 attached => {parent_tid=[1335]}, 88) = 1335 [pid 1335] set_robust_list(0x7f9627dc89a0, 24 [pid 1332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1335] <... set_robust_list resumed>) = 0 [pid 1332] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1332] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1335] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1335] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1332] <... futex resumed>) = 0 [pid 1332] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1332] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1335] <... futex resumed>) = 1 [pid 1335] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1335] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1332] <... futex resumed>) = 0 [pid 1335] <... futex resumed>) = 1 [pid 1335] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1332] exit_group(0 [pid 1335] <... futex resumed>) = ? [pid 1332] <... exit_group resumed>) = ? [pid 1335] +++ exited with 0 +++ [pid 1333] <... sendfile resumed>) = ? [pid 1333] +++ exited with 0 +++ [pid 1332] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1332, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./238", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./238", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./238/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./238/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./238/binderfs") = 0 umount2("./238/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./238/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./238/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./238/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./238/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./238/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./238") = 0 mkdir("./239", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1337 ./strace-static-x86_64: Process 1337 attached [pid 1337] set_robust_list(0x555556b826a0, 24) = 0 [pid 1337] chdir("./239") = 0 [pid 1337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1337] setpgid(0, 0) = 0 [pid 1337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1337] write(3, "1000", 4) = 4 [pid 1337] close(3) = 0 [pid 1337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1337] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1337] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1337] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1338]}, 88) = 1338 [pid 1337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1337] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1337] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1338 attached [pid 1338] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1338] memfd_create("syzkaller", 0) = 3 [pid 1338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1338] munmap(0x7f9627d89000, 262144) = 0 [pid 1338] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1338] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1338] close(3) = 0 [pid 1338] mkdir("./file0", 0777) = 0 [pid 1338] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1338] chdir("./file0") = 0 [pid 1338] ioctl(4, LOOP_CLR_FD) = 0 [pid 1338] close(4) = 0 [pid 1338] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1337] <... futex resumed>) = 0 [pid 1337] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1337] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1338] <... futex resumed>) = 1 [pid 1338] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1338] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1337] <... futex resumed>) = 0 [pid 1337] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1337] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1338] <... futex resumed>) = 1 [pid 1338] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1338] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1337] <... futex resumed>) = 0 [pid 1337] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1337] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1338] <... futex resumed>) = 1 [pid 1338] creat("./bus", 000) = 6 [pid 1338] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1337] <... futex resumed>) = 0 [pid 1337] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1337] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1338] <... futex resumed>) = 1 [pid 1338] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1338] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1337] <... futex resumed>) = 0 [pid 1337] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1337] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1338] <... futex resumed>) = 1 [pid 1338] open("./bus", O_RDONLY) = 7 [pid 1338] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1337] <... futex resumed>) = 0 [pid 1337] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1337] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1338] <... futex resumed>) = 1 [ 92.891751][ T1338] loop0: detected capacity change from 0 to 512 [ 92.900551][ T1338] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 92.913492][ T1338] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1338] sendfile(6, 7, NULL, 140737974943952 [pid 1337] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1337] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1337] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1337] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1340 attached => {parent_tid=[1340]}, 88) = 1340 [pid 1340] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1340] rt_sigprocmask(SIG_SETMASK, [], [pid 1337] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1340] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1340] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1337] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1340] <... mmap resumed>) = 0x20000000 [pid 1340] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1337] <... futex resumed>) = 0 [pid 1337] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1337] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1340] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1340] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1337] <... futex resumed>) = 0 [pid 1340] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1337] exit_group(0 [pid 1340] <... futex resumed>) = ? [pid 1337] <... exit_group resumed>) = ? [pid 1340] +++ exited with 0 +++ [pid 1338] <... sendfile resumed>) = ? [pid 1338] +++ exited with 0 +++ [pid 1337] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1337, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./239", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./239", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./239/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./239/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./239/binderfs") = 0 umount2("./239/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./239/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./239/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./239/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./239/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./239/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./239") = 0 mkdir("./240", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1341 ./strace-static-x86_64: Process 1341 attached [pid 1341] set_robust_list(0x555556b826a0, 24) = 0 [pid 1341] chdir("./240") = 0 [pid 1341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1341] setpgid(0, 0) = 0 [pid 1341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1341] write(3, "1000", 4) = 4 [pid 1341] close(3) = 0 [pid 1341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1341] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1341] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1341] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1341] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1341] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1342]}, 88) = 1342 [pid 1341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1341] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1341] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1342 attached [pid 1342] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1342] memfd_create("syzkaller", 0) = 3 [pid 1342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1342] munmap(0x7f9627d89000, 262144) = 0 [pid 1342] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1342] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1342] close(3) = 0 [pid 1342] mkdir("./file0", 0777) = 0 [pid 1342] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1342] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1342] chdir("./file0") = 0 [pid 1342] ioctl(4, LOOP_CLR_FD) = 0 [pid 1342] close(4) = 0 [pid 1342] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1341] <... futex resumed>) = 0 [pid 1341] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1341] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1342] <... futex resumed>) = 1 [pid 1342] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1342] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1341] <... futex resumed>) = 0 [pid 1341] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1341] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1342] <... futex resumed>) = 1 [pid 1342] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1342] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1341] <... futex resumed>) = 0 [pid 1341] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1341] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1342] <... futex resumed>) = 1 [pid 1342] creat("./bus", 000) = 6 [pid 1342] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1341] <... futex resumed>) = 0 [pid 1341] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1341] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1342] <... futex resumed>) = 1 [pid 1342] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1342] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1341] <... futex resumed>) = 0 [pid 1341] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1341] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1342] <... futex resumed>) = 1 [pid 1342] open("./bus", O_RDONLY) = 7 [pid 1342] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1341] <... futex resumed>) = 0 [pid 1341] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1341] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1342] <... futex resumed>) = 1 [ 93.192170][ T1342] loop0: detected capacity change from 0 to 512 [ 93.201065][ T1342] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 93.214084][ T1342] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 93.223803][ T1342] EXT4-fs mount: 35 callbacks suppressed [ 93.223814][ T1342] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1342] sendfile(6, 7, NULL, 140737974943952 [pid 1341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1341] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1341] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1341] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1341] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1344 attached => {parent_tid=[1344]}, 88) = 1344 [pid 1341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1341] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1341] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1344] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1344] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1344] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1341] <... futex resumed>) = 0 [pid 1341] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1341] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1344] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1344] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1341] <... futex resumed>) = 0 [pid 1344] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1341] exit_group(0 [pid 1344] <... futex resumed>) = ? [pid 1341] <... exit_group resumed>) = ? [pid 1342] <... sendfile resumed>) = ? [pid 1342] +++ exited with 0 +++ [pid 1344] +++ exited with 0 +++ [pid 1341] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1341, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./240", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./240", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./240/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./240/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./240/binderfs") = 0 umount2("./240/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./240/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./240/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./240/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./240/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./240/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./240") = 0 mkdir("./241", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1345 ./strace-static-x86_64: Process 1345 attached [pid 1345] set_robust_list(0x555556b826a0, 24) = 0 [pid 1345] chdir("./241") = 0 [pid 1345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1345] setpgid(0, 0) = 0 [pid 1345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1345] write(3, "1000", 4) = 4 [pid 1345] close(3) = 0 [pid 1345] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1345] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1345] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1345] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1345] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1345] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1345] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1346]}, 88) = 1346 [pid 1345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1345] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1345] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1346 attached [pid 1346] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1346] memfd_create("syzkaller", 0) = 3 [pid 1346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1346] munmap(0x7f9627d89000, 262144) = 0 [pid 1346] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1346] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1346] close(3) = 0 [pid 1346] mkdir("./file0", 0777) = 0 [pid 1346] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1346] chdir("./file0") = 0 [pid 1346] ioctl(4, LOOP_CLR_FD) = 0 [pid 1346] close(4) = 0 [pid 1346] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1345] <... futex resumed>) = 0 [pid 1345] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1345] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1346] <... futex resumed>) = 1 [pid 1346] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1346] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1345] <... futex resumed>) = 0 [pid 1345] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1345] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1346] <... futex resumed>) = 1 [pid 1346] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1346] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1345] <... futex resumed>) = 0 [pid 1345] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1345] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1346] <... futex resumed>) = 1 [pid 1346] creat("./bus", 000) = 6 [pid 1346] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1346] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1345] <... futex resumed>) = 0 [pid 1345] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1345] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1346] <... futex resumed>) = 0 [pid 1346] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1346] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1345] <... futex resumed>) = 0 [pid 1345] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1345] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1346] <... futex resumed>) = 1 [pid 1346] open("./bus", O_RDONLY) = 7 [pid 1346] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1345] <... futex resumed>) = 0 [pid 1345] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1345] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1346] <... futex resumed>) = 1 [ 93.498384][ T1346] loop0: detected capacity change from 0 to 512 [ 93.506539][ T1346] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 93.519648][ T1346] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 93.529481][ T1346] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1346] sendfile(6, 7, NULL, 140737974943952 [pid 1345] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1345] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1345] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1345] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1345] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1345] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1348 attached => {parent_tid=[1348]}, 88) = 1348 [pid 1348] set_robust_list(0x7f9627dc89a0, 24 [pid 1345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1345] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1345] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1348] <... set_robust_list resumed>) = 0 [pid 1348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1348] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1348] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1345] <... futex resumed>) = 0 [pid 1345] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1345] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1348] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1348] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1345] <... futex resumed>) = 0 [pid 1348] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1345] exit_group(0) = ? [pid 1348] <... futex resumed>) = ? [pid 1346] <... sendfile resumed>) = ? [pid 1346] +++ exited with 0 +++ [pid 1348] +++ exited with 0 +++ [pid 1345] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1345, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./241", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./241", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./241/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./241/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./241/binderfs") = 0 umount2("./241/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./241/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./241/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./241/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./241/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./241/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./241") = 0 mkdir("./242", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1350 ./strace-static-x86_64: Process 1350 attached [pid 1350] set_robust_list(0x555556b826a0, 24) = 0 [pid 1350] chdir("./242") = 0 [pid 1350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1350] setpgid(0, 0) = 0 [pid 1350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1350] write(3, "1000", 4) = 4 [pid 1350] close(3) = 0 [pid 1350] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1350] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1350] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1350] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1350] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1350] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1351]}, 88) = 1351 [pid 1350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1350] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1350] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1351 attached [pid 1351] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1351] memfd_create("syzkaller", 0) = 3 [pid 1351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1351] munmap(0x7f9627d89000, 262144) = 0 [pid 1351] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1351] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1351] close(3) = 0 [pid 1351] mkdir("./file0", 0777) = 0 [pid 1351] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1351] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1351] chdir("./file0") = 0 [pid 1351] ioctl(4, LOOP_CLR_FD) = 0 [pid 1351] close(4) = 0 [pid 1351] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1350] <... futex resumed>) = 0 [pid 1350] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1350] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1351] <... futex resumed>) = 1 [pid 1351] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1351] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1350] <... futex resumed>) = 0 [pid 1350] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1350] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1351] <... futex resumed>) = 1 [pid 1351] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1351] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1350] <... futex resumed>) = 0 [pid 1350] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1350] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1351] <... futex resumed>) = 1 [pid 1351] creat("./bus", 000) = 6 [pid 1351] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1350] <... futex resumed>) = 0 [pid 1350] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1351] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 1350] <... futex resumed>) = 0 [pid 1351] <... writev resumed>) = 1 [pid 1350] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1351] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1350] <... futex resumed>) = 0 [pid 1350] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1350] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1351] <... futex resumed>) = 1 [pid 1351] open("./bus", O_RDONLY) = 7 [pid 1351] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1350] <... futex resumed>) = 0 [pid 1350] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1351] <... futex resumed>) = 1 [pid 1350] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 93.812396][ T1351] loop0: detected capacity change from 0 to 512 [ 93.820320][ T1351] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 93.833423][ T1351] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 93.843169][ T1351] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1351] sendfile(6, 7, NULL, 140737974943952 [pid 1350] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1350] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1350] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1350] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1353 attached => {parent_tid=[1353]}, 88) = 1353 [pid 1350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1350] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1350] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1353] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1353] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1353] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1353] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1350] <... futex resumed>) = 0 [pid 1350] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1350] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1353] <... futex resumed>) = 1 [pid 1353] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1353] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1350] <... futex resumed>) = 0 [pid 1353] <... futex resumed>) = 1 [pid 1353] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1350] exit_group(0) = ? [pid 1353] <... futex resumed>) = ? [pid 1353] +++ exited with 0 +++ [pid 1351] <... sendfile resumed>) = ? [pid 1351] +++ exited with 0 +++ [pid 1350] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1350, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./242", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./242", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./242/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./242/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./242/binderfs") = 0 umount2("./242/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./242/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./242/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./242/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./242/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./242/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./242") = 0 mkdir("./243", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1354 ./strace-static-x86_64: Process 1354 attached [pid 1354] set_robust_list(0x555556b826a0, 24) = 0 [pid 1354] chdir("./243") = 0 [pid 1354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1354] setpgid(0, 0) = 0 [pid 1354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1354] write(3, "1000", 4) = 4 [pid 1354] close(3) = 0 [pid 1354] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1354] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1354] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1354] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1354] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1354] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1355]}, 88) = 1355 [pid 1354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1354] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1354] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1355 attached [pid 1355] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1355] memfd_create("syzkaller", 0) = 3 [pid 1355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1355] munmap(0x7f9627d89000, 262144) = 0 [pid 1355] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1355] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1355] close(3) = 0 [pid 1355] mkdir("./file0", 0777) = 0 [pid 1355] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1355] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1355] chdir("./file0") = 0 [pid 1355] ioctl(4, LOOP_CLR_FD) = 0 [pid 1355] close(4) = 0 [pid 1355] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1354] <... futex resumed>) = 0 [pid 1354] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1354] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1355] <... futex resumed>) = 1 [pid 1355] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1355] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1354] <... futex resumed>) = 0 [pid 1354] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1354] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1355] <... futex resumed>) = 1 [pid 1355] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1355] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1354] <... futex resumed>) = 0 [pid 1354] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1354] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1355] <... futex resumed>) = 1 [pid 1355] creat("./bus", 000) = 6 [pid 1355] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1354] <... futex resumed>) = 0 [pid 1354] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1354] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1355] <... futex resumed>) = 1 [pid 1355] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1355] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1354] <... futex resumed>) = 0 [pid 1354] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1354] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1355] <... futex resumed>) = 1 [pid 1355] open("./bus", O_RDONLY) = 7 [pid 1355] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1354] <... futex resumed>) = 0 [pid 1354] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1354] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1355] <... futex resumed>) = 1 [ 94.131550][ T1355] loop0: detected capacity change from 0 to 512 [ 94.139896][ T1355] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 94.153079][ T1355] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 94.163155][ T1355] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1355] sendfile(6, 7, NULL, 140737974943952 [pid 1354] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1354] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1354] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1354] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1357]}, 88) = 1357 [pid 1354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1354] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1354] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1357 attached [pid 1357] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1357] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1357] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1354] <... futex resumed>) = 0 [pid 1354] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1354] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1357] <... futex resumed>) = 1 [pid 1357] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1357] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1354] <... futex resumed>) = 0 [pid 1357] <... futex resumed>) = 1 [pid 1357] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1354] exit_group(0) = ? [pid 1357] <... futex resumed>) = ? [pid 1357] +++ exited with 0 +++ [pid 1355] <... sendfile resumed>) = ? [pid 1355] +++ exited with 0 +++ [pid 1354] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1354, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./243", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./243", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./243/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./243/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./243/binderfs") = 0 umount2("./243/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./243/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./243/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./243/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./243/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./243/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./243") = 0 mkdir("./244", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1358 ./strace-static-x86_64: Process 1358 attached [pid 1358] set_robust_list(0x555556b826a0, 24) = 0 [pid 1358] chdir("./244") = 0 [pid 1358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1358] setpgid(0, 0) = 0 [pid 1358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1358] write(3, "1000", 4) = 4 [pid 1358] close(3) = 0 [pid 1358] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1358] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1358] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1358] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1358] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1358] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1359]}, 88) = 1359 [pid 1358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1358] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1358] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1359 attached [pid 1359] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1359] memfd_create("syzkaller", 0) = 3 [pid 1359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1359] munmap(0x7f9627d89000, 262144) = 0 [pid 1359] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1359] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1359] close(3) = 0 [pid 1359] mkdir("./file0", 0777) = 0 [pid 1359] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1359] chdir("./file0") = 0 [pid 1359] ioctl(4, LOOP_CLR_FD) = 0 [pid 1359] close(4) = 0 [pid 1359] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1358] <... futex resumed>) = 0 [pid 1358] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1358] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1359] <... futex resumed>) = 1 [pid 1359] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1359] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1358] <... futex resumed>) = 0 [pid 1358] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1358] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1359] <... futex resumed>) = 1 [pid 1359] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1359] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1358] <... futex resumed>) = 0 [pid 1358] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1358] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1359] <... futex resumed>) = 1 [pid 1359] creat("./bus", 000) = 6 [pid 1359] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1358] <... futex resumed>) = 0 [pid 1358] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1358] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1359] <... futex resumed>) = 1 [pid 1359] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1359] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1358] <... futex resumed>) = 0 [pid 1358] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1358] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1359] <... futex resumed>) = 1 [pid 1359] open("./bus", O_RDONLY) = 7 [pid 1359] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1358] <... futex resumed>) = 0 [pid 1358] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1358] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1359] <... futex resumed>) = 1 [ 94.432415][ T1359] loop0: detected capacity change from 0 to 512 [ 94.440482][ T1359] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 94.453732][ T1359] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 94.463752][ T1359] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1359] sendfile(6, 7, NULL, 140737974943952 [pid 1358] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1358] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1358] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1358] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1358] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1358] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1361 attached => {parent_tid=[1361]}, 88) = 1361 [pid 1361] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1361] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1361] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1358] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1361] <... futex resumed>) = 0 [pid 1361] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1358] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1361] <... mmap resumed>) = 0x20000000 [pid 1361] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1358] <... futex resumed>) = 0 [pid 1358] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1361] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1358] <... futex resumed>) = 0 [pid 1361] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1358] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1361] <... futex resumed>) = 0 [pid 1358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1361] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1358] exit_group(0 [pid 1361] <... futex resumed>) = ? [pid 1358] <... exit_group resumed>) = ? [pid 1361] +++ exited with 0 +++ [pid 1359] <... sendfile resumed>) = ? [pid 1359] +++ exited with 0 +++ [pid 1358] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1358, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./244", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./244", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./244/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./244/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./244/binderfs") = 0 umount2("./244/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./244/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./244/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./244/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./244/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./244/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./244") = 0 mkdir("./245", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1362 ./strace-static-x86_64: Process 1362 attached [pid 1362] set_robust_list(0x555556b826a0, 24) = 0 [pid 1362] chdir("./245") = 0 [pid 1362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1362] setpgid(0, 0) = 0 [pid 1362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1362] write(3, "1000", 4) = 4 [pid 1362] close(3) = 0 [pid 1362] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1362] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1362] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1362] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1362] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1362] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1363]}, 88) = 1363 [pid 1362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1362] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1362] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1363 attached [pid 1363] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1363] memfd_create("syzkaller", 0) = 3 [pid 1363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1363] munmap(0x7f9627d89000, 262144) = 0 [pid 1363] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1363] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1363] close(3) = 0 [pid 1363] mkdir("./file0", 0777) = 0 [pid 1363] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1363] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1363] chdir("./file0") = 0 [pid 1363] ioctl(4, LOOP_CLR_FD) = 0 [pid 1363] close(4) = 0 [pid 1363] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1363] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1362] <... futex resumed>) = 0 [pid 1362] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1362] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1363] <... futex resumed>) = 0 [pid 1363] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1363] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1362] <... futex resumed>) = 0 [pid 1362] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1362] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1363] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1363] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1362] <... futex resumed>) = 0 [pid 1362] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1362] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1363] creat("./bus", 000) = 6 [pid 1363] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1362] <... futex resumed>) = 0 [pid 1362] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1362] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1363] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1363] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1362] <... futex resumed>) = 0 [pid 1362] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1362] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1363] <... futex resumed>) = 1 [pid 1363] open("./bus", O_RDONLY) = 7 [pid 1363] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1362] <... futex resumed>) = 0 [pid 1362] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1362] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1363] <... futex resumed>) = 1 [ 94.740114][ T1363] loop0: detected capacity change from 0 to 512 [ 94.748652][ T1363] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 94.761785][ T1363] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 94.771581][ T1363] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1363] sendfile(6, 7, NULL, 140737974943952 [pid 1362] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1362] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1362] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1362] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1362] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1366 attached [pid 1366] set_robust_list(0x7f9627dc89a0, 24 [pid 1362] <... clone3 resumed> => {parent_tid=[1366]}, 88) = 1366 [pid 1366] <... set_robust_list resumed>) = 0 [pid 1362] rt_sigprocmask(SIG_SETMASK, [], [pid 1366] rt_sigprocmask(SIG_SETMASK, [], [pid 1362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1366] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1362] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1366] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1362] <... futex resumed>) = 0 [pid 1362] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1366] <... mmap resumed>) = 0x20000000 [pid 1366] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1362] <... futex resumed>) = 0 [pid 1362] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1362] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1366] <... futex resumed>) = 1 [pid 1366] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1366] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1362] <... futex resumed>) = 0 [pid 1366] <... futex resumed>) = 1 [pid 1366] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1362] exit_group(0) = ? [pid 1366] <... futex resumed>) = 230 [pid 1363] <... sendfile resumed>) = ? [pid 1366] +++ exited with 0 +++ [pid 1363] +++ exited with 0 +++ [pid 1362] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1362, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./245", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./245", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./245/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./245/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./245/binderfs") = 0 umount2("./245/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./245/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./245/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./245/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./245/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./245/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./245") = 0 mkdir("./246", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1367 ./strace-static-x86_64: Process 1367 attached [pid 1367] set_robust_list(0x555556b826a0, 24) = 0 [pid 1367] chdir("./246") = 0 [pid 1367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1367] setpgid(0, 0) = 0 [pid 1367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1367] write(3, "1000", 4) = 4 [pid 1367] close(3) = 0 [pid 1367] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1367] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1367] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1367] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1367] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1367] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1368 attached => {parent_tid=[1368]}, 88) = 1368 [pid 1368] set_robust_list(0x7f96301a99a0, 24 [pid 1367] rt_sigprocmask(SIG_SETMASK, [], [pid 1368] <... set_robust_list resumed>) = 0 [pid 1367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1368] rt_sigprocmask(SIG_SETMASK, [], [pid 1367] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1368] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1367] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1368] memfd_create("syzkaller", 0) = 3 [pid 1368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1368] munmap(0x7f9627d89000, 262144) = 0 [pid 1368] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1368] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1368] close(3) = 0 [pid 1368] mkdir("./file0", 0777) = 0 [pid 1368] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1368] chdir("./file0") = 0 [pid 1368] ioctl(4, LOOP_CLR_FD) = 0 [pid 1368] close(4) = 0 [pid 1368] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... futex resumed>) = 0 [pid 1367] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1367] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1368] <... futex resumed>) = 1 [pid 1368] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1368] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... futex resumed>) = 0 [pid 1367] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1367] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1368] <... futex resumed>) = 1 [pid 1368] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1368] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... futex resumed>) = 0 [pid 1367] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1367] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1368] <... futex resumed>) = 1 [pid 1368] creat("./bus", 000) = 6 [pid 1368] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... futex resumed>) = 0 [pid 1367] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1367] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1368] <... futex resumed>) = 1 [pid 1368] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1368] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... futex resumed>) = 0 [pid 1367] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1367] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1368] <... futex resumed>) = 1 [pid 1368] open("./bus", O_RDONLY) = 7 [pid 1368] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... futex resumed>) = 0 [pid 1367] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1367] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1368] <... futex resumed>) = 1 [ 95.065738][ T1368] loop0: detected capacity change from 0 to 512 [ 95.073924][ T1368] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 95.089074][ T1368] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 95.099819][ T1368] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1368] sendfile(6, 7, NULL, 140737974943952 [pid 1367] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1367] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1367] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1367] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1367] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1370 attached [pid 1370] set_robust_list(0x7f9627dc89a0, 24 [pid 1367] <... clone3 resumed> => {parent_tid=[1370]}, 88) = 1370 [pid 1370] <... set_robust_list resumed>) = 0 [pid 1367] rt_sigprocmask(SIG_SETMASK, [], [pid 1370] rt_sigprocmask(SIG_SETMASK, [], [pid 1367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1367] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1367] <... futex resumed>) = 0 [pid 1370] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1367] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1370] <... mmap resumed>) = 0x20000000 [pid 1370] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1367] <... futex resumed>) = 0 [pid 1367] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1370] sendmsg(-1, 0x20000000, 0 [pid 1367] <... futex resumed>) = 0 [pid 1370] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1367] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1370] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1367] <... futex resumed>) = 0 [pid 1370] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1367] exit_group(0) = ? [pid 1370] <... futex resumed>) = 231 [pid 1370] +++ exited with 0 +++ [pid 1368] <... sendfile resumed>) = ? [pid 1368] +++ exited with 0 +++ [pid 1367] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1367, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./246", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./246", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./246/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./246/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./246/binderfs") = 0 umount2("./246/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./246/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./246/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./246/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./246/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./246/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./246") = 0 mkdir("./247", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1371 ./strace-static-x86_64: Process 1371 attached [pid 1371] set_robust_list(0x555556b826a0, 24) = 0 [pid 1371] chdir("./247") = 0 [pid 1371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1371] setpgid(0, 0) = 0 [pid 1371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1371] write(3, "1000", 4) = 4 [pid 1371] close(3) = 0 [pid 1371] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1371] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1371] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1371] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1371] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1371] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1372]}, 88) = 1372 [pid 1371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 1372 attached [pid 1371] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1371] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1372] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1372] memfd_create("syzkaller", 0) = 3 [pid 1372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1372] munmap(0x7f9627d89000, 262144) = 0 [pid 1372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1372] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1372] close(3) = 0 [pid 1372] mkdir("./file0", 0777) = 0 [pid 1372] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1372] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1372] chdir("./file0") = 0 [pid 1372] ioctl(4, LOOP_CLR_FD) = 0 [pid 1372] close(4) = 0 [pid 1372] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1371] <... futex resumed>) = 0 [pid 1371] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1371] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1372] <... futex resumed>) = 1 [pid 1372] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1372] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1371] <... futex resumed>) = 0 [pid 1371] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1371] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1372] <... futex resumed>) = 1 [pid 1372] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1372] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1371] <... futex resumed>) = 0 [pid 1371] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1371] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1372] <... futex resumed>) = 1 [pid 1372] creat("./bus", 000) = 6 [pid 1372] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1371] <... futex resumed>) = 0 [pid 1371] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1371] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1372] <... futex resumed>) = 1 [pid 1372] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1372] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1371] <... futex resumed>) = 0 [pid 1371] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1371] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1372] <... futex resumed>) = 1 [pid 1372] open("./bus", O_RDONLY) = 7 [pid 1372] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1371] <... futex resumed>) = 0 [pid 1371] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1371] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1372] <... futex resumed>) = 1 [pid 1372] sendfile(6, 7, NULL, 140737974943952 [pid 1371] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1371] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 95.364550][ T1372] loop0: detected capacity change from 0 to 512 [ 95.372907][ T1372] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 95.386973][ T1372] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 95.396956][ T1372] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1371] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1371] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1374]}, 88) = 1374 [pid 1371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1371] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1371] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1374 attached [pid 1374] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1374] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1374] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1371] <... futex resumed>) = 0 [pid 1371] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1371] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1374] <... futex resumed>) = 1 [pid 1374] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1374] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1371] <... futex resumed>) = 0 [pid 1374] <... futex resumed>) = 1 [pid 1374] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1371] exit_group(0 [pid 1374] <... futex resumed>) = ? [pid 1371] <... exit_group resumed>) = ? [pid 1372] <... sendfile resumed>) = ? [pid 1372] +++ exited with 0 +++ [pid 1374] +++ exited with 0 +++ [pid 1371] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1371, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./247", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./247", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./247/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./247/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./247/binderfs") = 0 umount2("./247/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./247/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./247/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./247/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./247/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./247/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./247") = 0 mkdir("./248", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1375 ./strace-static-x86_64: Process 1375 attached [pid 1375] set_robust_list(0x555556b826a0, 24) = 0 [pid 1375] chdir("./248") = 0 [pid 1375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1375] setpgid(0, 0) = 0 [pid 1375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1375] write(3, "1000", 4) = 4 [pid 1375] close(3) = 0 [pid 1375] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1375] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1375] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1375] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1375] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1375] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1375] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1375] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1376]}, 88) = 1376 [pid 1375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1375] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1375] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1376 attached [pid 1376] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1376] memfd_create("syzkaller", 0) = 3 [pid 1376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1376] munmap(0x7f9627d89000, 262144) = 0 [pid 1376] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1376] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1376] close(3) = 0 [pid 1376] mkdir("./file0", 0777) = 0 [pid 1376] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1376] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1376] chdir("./file0") = 0 [pid 1376] ioctl(4, LOOP_CLR_FD) = 0 [pid 1376] close(4) = 0 [pid 1376] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1375] <... futex resumed>) = 0 [pid 1375] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1375] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1376] <... futex resumed>) = 1 [pid 1376] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1376] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1375] <... futex resumed>) = 0 [pid 1375] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1375] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1376] <... futex resumed>) = 1 [pid 1376] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1376] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1375] <... futex resumed>) = 0 [pid 1375] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1375] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1376] <... futex resumed>) = 1 [pid 1376] creat("./bus", 000) = 6 [pid 1376] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1375] <... futex resumed>) = 0 [pid 1375] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1375] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1376] <... futex resumed>) = 1 [pid 1376] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1376] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1375] <... futex resumed>) = 0 [pid 1375] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1375] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1376] <... futex resumed>) = 1 [pid 1376] open("./bus", O_RDONLY) = 7 [pid 1376] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1375] <... futex resumed>) = 0 [pid 1375] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1375] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1376] <... futex resumed>) = 1 [ 95.632737][ T1376] loop0: detected capacity change from 0 to 512 [ 95.641186][ T1376] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 95.654741][ T1376] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 95.664505][ T1376] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1376] sendfile(6, 7, NULL, 140737974943952 [pid 1375] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1375] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1375] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1375] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1375] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1375] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1375] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1375] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1375] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1378]}, 88) = 1378 [pid 1375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1375] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1375] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1378 attached [pid 1378] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1378] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1378] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1375] <... futex resumed>) = 0 [pid 1375] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1375] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1378] <... futex resumed>) = 1 [pid 1378] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1378] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1375] <... futex resumed>) = 0 [pid 1378] <... futex resumed>) = 1 [pid 1378] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1375] exit_group(0 [pid 1378] <... futex resumed>) = ? [pid 1375] <... exit_group resumed>) = ? [pid 1378] +++ exited with 0 +++ [pid 1376] <... sendfile resumed>) = ? [pid 1376] +++ exited with 0 +++ [pid 1375] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1375, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./248", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./248", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./248/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./248/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./248/binderfs") = 0 umount2("./248/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./248/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./248/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./248/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./248/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./248/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./248") = 0 mkdir("./249", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1380 ./strace-static-x86_64: Process 1380 attached [pid 1380] set_robust_list(0x555556b826a0, 24) = 0 [pid 1380] chdir("./249") = 0 [pid 1380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1380] setpgid(0, 0) = 0 [pid 1380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1380] write(3, "1000", 4) = 4 [pid 1380] close(3) = 0 [pid 1380] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1380] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1380] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1380] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1380] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1380] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1381]}, 88) = 1381 [pid 1380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1380] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1380] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1381 attached [pid 1381] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1381] memfd_create("syzkaller", 0) = 3 [pid 1381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1381] munmap(0x7f9627d89000, 262144) = 0 [pid 1381] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1381] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1381] close(3) = 0 [pid 1381] mkdir("./file0", 0777) = 0 [pid 1381] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1381] chdir("./file0") = 0 [pid 1381] ioctl(4, LOOP_CLR_FD) = 0 [pid 1381] close(4) = 0 [pid 1381] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1381] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1380] <... futex resumed>) = 0 [pid 1380] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1380] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1381] <... futex resumed>) = 0 [pid 1381] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1381] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... futex resumed>) = 0 [pid 1380] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1380] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1381] <... futex resumed>) = 1 [pid 1381] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1381] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... futex resumed>) = 0 [pid 1380] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1380] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1381] <... futex resumed>) = 1 [pid 1381] creat("./bus", 000) = 6 [pid 1381] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... futex resumed>) = 0 [pid 1380] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1380] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1381] <... futex resumed>) = 1 [pid 1381] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1381] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... futex resumed>) = 0 [pid 1380] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1380] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1381] <... futex resumed>) = 1 [pid 1381] open("./bus", O_RDONLY) = 7 [pid 1381] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... futex resumed>) = 0 [pid 1380] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1380] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1381] <... futex resumed>) = 1 [ 95.942698][ T1381] loop0: detected capacity change from 0 to 512 [ 95.950693][ T1381] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 95.963906][ T1381] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 95.973757][ T1381] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1381] sendfile(6, 7, NULL, 140737974943952 [pid 1380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1380] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1380] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1380] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1383]}, 88) = 1383 ./strace-static-x86_64: Process 1383 attached [pid 1380] rt_sigprocmask(SIG_SETMASK, [], [pid 1383] set_robust_list(0x7f9627dc89a0, 24 [pid 1380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1383] <... set_robust_list resumed>) = 0 [pid 1380] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1383] rt_sigprocmask(SIG_SETMASK, [], [pid 1380] <... futex resumed>) = 0 [pid 1383] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1380] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1383] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1383] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1380] <... futex resumed>) = 0 [pid 1380] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1383] sendmsg(-1, 0x20000000, 0 [pid 1380] <... futex resumed>) = 0 [pid 1383] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1380] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1383] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1380] <... futex resumed>) = 0 [pid 1383] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1380] exit_group(0) = ? [pid 1383] <... futex resumed>) = ? [pid 1383] +++ exited with 0 +++ [pid 1381] <... sendfile resumed>) = ? [pid 1381] +++ exited with 0 +++ [pid 1380] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1380, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./249", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./249", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./249/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./249/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./249/binderfs") = 0 umount2("./249/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./249/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./249/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./249/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./249/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./249/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./249") = 0 mkdir("./250", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1384 ./strace-static-x86_64: Process 1384 attached [pid 1384] set_robust_list(0x555556b826a0, 24) = 0 [pid 1384] chdir("./250") = 0 [pid 1384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1384] setpgid(0, 0) = 0 [pid 1384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1384] write(3, "1000", 4) = 4 [pid 1384] close(3) = 0 [pid 1384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1384] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1384] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1384] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1384] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1384] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1384] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1385]}, 88) = 1385 [pid 1384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1384] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1384] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1385 attached [pid 1385] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1385] memfd_create("syzkaller", 0) = 3 [pid 1385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1385] munmap(0x7f9627d89000, 262144) = 0 [pid 1385] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1385] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1385] close(3) = 0 [pid 1385] mkdir("./file0", 0777) = 0 [pid 1385] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1385] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1385] chdir("./file0") = 0 [pid 1385] ioctl(4, LOOP_CLR_FD) = 0 [pid 1385] close(4) = 0 [pid 1385] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] <... futex resumed>) = 0 [pid 1384] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1384] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1385] <... futex resumed>) = 1 [pid 1385] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1385] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] <... futex resumed>) = 0 [pid 1384] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1384] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1385] <... futex resumed>) = 1 [pid 1385] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1385] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] <... futex resumed>) = 0 [pid 1384] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1384] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1385] <... futex resumed>) = 1 [pid 1385] creat("./bus", 000) = 6 [pid 1385] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] <... futex resumed>) = 0 [pid 1384] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1384] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1385] <... futex resumed>) = 1 [pid 1385] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1385] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] <... futex resumed>) = 0 [pid 1384] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1384] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1385] <... futex resumed>) = 1 [pid 1385] open("./bus", O_RDONLY) = 7 [pid 1385] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] <... futex resumed>) = 0 [pid 1384] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1384] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1385] <... futex resumed>) = 1 [ 96.211816][ T1385] loop0: detected capacity change from 0 to 512 [ 96.220124][ T1385] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 96.233260][ T1385] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 96.242924][ T1385] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1385] sendfile(6, 7, NULL, 140737974943952 [pid 1384] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1384] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1384] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1384] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1384] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1384] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1384] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1384] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1384] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1387 attached => {parent_tid=[1387]}, 88) = 1387 [pid 1384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1384] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1384] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1387] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1387] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1387] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1387] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] <... futex resumed>) = 0 [pid 1387] <... futex resumed>) = 1 [pid 1384] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1387] sendmsg(-1, 0x20000000, 0 [pid 1384] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1387] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1387] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] <... futex resumed>) = 0 [pid 1387] <... futex resumed>) = 1 [pid 1387] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1384] exit_group(0 [pid 1387] <... futex resumed>) = ? [pid 1384] <... exit_group resumed>) = ? [pid 1387] +++ exited with 0 +++ [pid 1385] <... sendfile resumed>) = ? [pid 1385] +++ exited with 0 +++ [pid 1384] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1384, si_uid=0, si_status=0, si_utime=0, si_stime=20} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./250", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./250", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./250/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./250/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./250/binderfs") = 0 umount2("./250/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./250/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./250/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./250/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./250/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./250/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./250") = 0 mkdir("./251", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1388 ./strace-static-x86_64: Process 1388 attached [pid 1388] set_robust_list(0x555556b826a0, 24) = 0 [pid 1388] chdir("./251") = 0 [pid 1388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1388] setpgid(0, 0) = 0 [pid 1388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1388] write(3, "1000", 4) = 4 [pid 1388] close(3) = 0 [pid 1388] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1388] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1388] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1388] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1388] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1388] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1389]}, 88) = 1389 [pid 1388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1388] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1388] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1389 attached [pid 1389] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1389] memfd_create("syzkaller", 0) = 3 [pid 1389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1389] munmap(0x7f9627d89000, 262144) = 0 [pid 1389] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1389] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1389] close(3) = 0 [pid 1389] mkdir("./file0", 0777) = 0 [pid 1389] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1389] chdir("./file0") = 0 [pid 1389] ioctl(4, LOOP_CLR_FD) = 0 [pid 1389] close(4) = 0 [pid 1389] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] <... futex resumed>) = 0 [pid 1388] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1388] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1389] <... futex resumed>) = 1 [pid 1389] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1389] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] <... futex resumed>) = 0 [pid 1388] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1388] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1389] <... futex resumed>) = 1 [pid 1389] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1389] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1389] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1388] <... futex resumed>) = 0 [pid 1388] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1388] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1389] <... futex resumed>) = 0 [pid 1389] creat("./bus", 000) = 6 [pid 1389] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] <... futex resumed>) = 0 [pid 1388] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1388] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1389] <... futex resumed>) = 1 [pid 1389] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1389] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] <... futex resumed>) = 0 [pid 1388] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1388] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1389] <... futex resumed>) = 1 [pid 1389] open("./bus", O_RDONLY) = 7 [pid 1389] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] <... futex resumed>) = 0 [pid 1388] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1388] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1389] <... futex resumed>) = 1 [ 96.487549][ T1389] loop0: detected capacity change from 0 to 512 [ 96.496228][ T1389] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 96.509862][ T1389] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 96.519600][ T1389] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1389] sendfile(6, 7, NULL, 140737974943952 [pid 1388] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1388] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1388] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1388] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1391]}, 88) = 1391 [pid 1388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1388] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1388] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1391 attached [pid 1391] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1391] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1391] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] <... futex resumed>) = 0 [pid 1388] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1388] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1391] <... futex resumed>) = 1 [pid 1391] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1391] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1388] <... futex resumed>) = 0 [pid 1391] <... futex resumed>) = 1 [pid 1391] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1388] exit_group(0) = ? [pid 1391] <... futex resumed>) = 231 [pid 1389] <... sendfile resumed>) = ? [pid 1389] +++ exited with 0 +++ [pid 1391] +++ exited with 0 +++ [pid 1388] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1388, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./251", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./251", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./251/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./251/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./251/binderfs") = 0 umount2("./251/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./251/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./251/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./251/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./251/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./251/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./251") = 0 mkdir("./252", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1392 ./strace-static-x86_64: Process 1392 attached [pid 1392] set_robust_list(0x555556b826a0, 24) = 0 [pid 1392] chdir("./252") = 0 [pid 1392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1392] setpgid(0, 0) = 0 [pid 1392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1392] write(3, "1000", 4) = 4 [pid 1392] close(3) = 0 [pid 1392] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1392] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1392] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1392] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1392] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1392] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1392] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1394 attached => {parent_tid=[1394]}, 88) = 1394 [pid 1394] set_robust_list(0x7f96301a99a0, 24 [pid 1392] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1392] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1392] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1394] <... set_robust_list resumed>) = 0 [pid 1394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1394] memfd_create("syzkaller", 0) = 3 [pid 1394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1394] munmap(0x7f9627d89000, 262144) = 0 [pid 1394] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1394] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1394] close(3) = 0 [pid 1394] mkdir("./file0", 0777) = 0 [pid 1394] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1394] chdir("./file0") = 0 [pid 1394] ioctl(4, LOOP_CLR_FD) = 0 [pid 1394] close(4) = 0 [pid 1394] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1392] <... futex resumed>) = 0 [pid 1392] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1392] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1394] <... futex resumed>) = 1 [pid 1394] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1394] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1394] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1392] <... futex resumed>) = 0 [pid 1392] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1392] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1394] <... futex resumed>) = 0 [pid 1394] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1394] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1394] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1392] <... futex resumed>) = 0 [pid 1392] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1392] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1394] <... futex resumed>) = 0 [pid 1394] creat("./bus", 000) = 6 [pid 1394] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1392] <... futex resumed>) = 0 [pid 1392] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1392] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1394] <... futex resumed>) = 1 [pid 1394] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1394] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1392] <... futex resumed>) = 0 [pid 1392] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1392] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1394] <... futex resumed>) = 1 [pid 1394] open("./bus", O_RDONLY) = 7 [pid 1394] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1392] <... futex resumed>) = 0 [pid 1392] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1394] <... futex resumed>) = 1 [pid 1392] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 96.795015][ T1394] loop0: detected capacity change from 0 to 512 [ 96.803384][ T1394] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 96.816440][ T1394] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 96.826260][ T1394] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1394] sendfile(6, 7, NULL, 140737974943952 [pid 1392] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1392] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1392] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1392] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1392] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1396 attached => {parent_tid=[1396]}, 88) = 1396 [pid 1392] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1392] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1392] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1396] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1396] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1396] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1392] <... futex resumed>) = 0 [pid 1392] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1392] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1396] <... futex resumed>) = 1 [pid 1396] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1396] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1392] <... futex resumed>) = 0 [pid 1396] <... futex resumed>) = 1 [pid 1396] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1392] exit_group(0 [pid 1396] <... futex resumed>) = ? [pid 1392] <... exit_group resumed>) = ? [pid 1396] +++ exited with 0 +++ [pid 1394] <... sendfile resumed>) = ? [pid 1394] +++ exited with 0 +++ [pid 1392] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1392, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./252", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./252", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./252/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./252/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./252/binderfs") = 0 umount2("./252/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./252/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./252/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./252/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./252/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./252/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./252") = 0 mkdir("./253", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1397 ./strace-static-x86_64: Process 1397 attached [pid 1397] set_robust_list(0x555556b826a0, 24) = 0 [pid 1397] chdir("./253") = 0 [pid 1397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1397] setpgid(0, 0) = 0 [pid 1397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1397] write(3, "1000", 4) = 4 [pid 1397] close(3) = 0 [pid 1397] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1397] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1397] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1397] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1397] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1397] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1397] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1398 attached => {parent_tid=[1398]}, 88) = 1398 [pid 1398] set_robust_list(0x7f96301a99a0, 24 [pid 1397] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1397] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1397] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1398] <... set_robust_list resumed>) = 0 [pid 1398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1398] memfd_create("syzkaller", 0) = 3 [pid 1398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1398] munmap(0x7f9627d89000, 262144) = 0 [pid 1398] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1398] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1398] close(3) = 0 [pid 1398] mkdir("./file0", 0777) = 0 [pid 1398] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1398] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1398] chdir("./file0") = 0 [pid 1398] ioctl(4, LOOP_CLR_FD) = 0 [pid 1398] close(4) = 0 [pid 1398] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1397] <... futex resumed>) = 0 [pid 1397] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1397] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1398] <... futex resumed>) = 1 [pid 1398] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1398] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1397] <... futex resumed>) = 0 [pid 1397] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1397] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1398] <... futex resumed>) = 1 [pid 1398] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1398] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1397] <... futex resumed>) = 0 [pid 1397] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1397] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1398] <... futex resumed>) = 1 [pid 1398] creat("./bus", 000) = 6 [pid 1398] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1397] <... futex resumed>) = 0 [pid 1397] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1397] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1398] <... futex resumed>) = 1 [pid 1398] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1398] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1397] <... futex resumed>) = 0 [pid 1398] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1397] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1397] <... futex resumed>) = 0 [pid 1398] open("./bus", O_RDONLY [pid 1397] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1398] <... open resumed>) = 7 [pid 1398] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1397] <... futex resumed>) = 0 [pid 1398] sendfile(6, 7, NULL, 140737974943952 [pid 1397] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 97.115590][ T1398] loop0: detected capacity change from 0 to 512 [ 97.124244][ T1398] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 97.137392][ T1398] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 97.147138][ T1398] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1397] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1397] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1397] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1397] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1397] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1397] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1397] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1397] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1397] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1400]}, 88) = 1400 ./strace-static-x86_64: Process 1400 attached [pid 1397] rt_sigprocmask(SIG_SETMASK, [], [pid 1400] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1400] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1397] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1400] <... futex resumed>) = 0 [pid 1397] <... futex resumed>) = 1 [pid 1400] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1400] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1400] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1397] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1397] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1400] <... futex resumed>) = 0 [pid 1397] <... futex resumed>) = 1 [pid 1397] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1400] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1400] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1397] <... futex resumed>) = 0 [pid 1400] <... futex resumed>) = 1 [pid 1400] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1397] exit_group(0 [pid 1400] <... futex resumed>) = ? [pid 1397] <... exit_group resumed>) = ? [pid 1400] +++ exited with 0 +++ [pid 1398] <... sendfile resumed>) = ? [pid 1398] +++ exited with 0 +++ [pid 1397] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1397, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./253", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./253", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./253/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./253/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./253/binderfs") = 0 umount2("./253/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./253/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./253/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./253/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./253/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./253/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./253") = 0 mkdir("./254", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1401 ./strace-static-x86_64: Process 1401 attached [pid 1401] set_robust_list(0x555556b826a0, 24) = 0 [pid 1401] chdir("./254") = 0 [pid 1401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1401] setpgid(0, 0) = 0 [pid 1401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1401] write(3, "1000", 4) = 4 [pid 1401] close(3) = 0 [pid 1401] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1401] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1401] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1401] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1401] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1401] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1402]}, 88) = 1402 [pid 1401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1401] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1401] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1402 attached [pid 1402] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1402] memfd_create("syzkaller", 0) = 3 [pid 1402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1402] munmap(0x7f9627d89000, 262144) = 0 [pid 1402] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1402] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1402] close(3) = 0 [pid 1402] mkdir("./file0", 0777) = 0 [pid 1402] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1402] chdir("./file0") = 0 [pid 1402] ioctl(4, LOOP_CLR_FD) = 0 [pid 1402] close(4) = 0 [pid 1402] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1401] <... futex resumed>) = 0 [pid 1401] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1401] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1402] <... futex resumed>) = 1 [pid 1402] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1402] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1401] <... futex resumed>) = 0 [pid 1401] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1401] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1402] <... futex resumed>) = 1 [pid 1402] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1402] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1401] <... futex resumed>) = 0 [pid 1401] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1401] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1402] <... futex resumed>) = 1 [pid 1402] creat("./bus", 000) = 6 [pid 1402] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1402] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1401] <... futex resumed>) = 0 [pid 1401] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1401] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1402] <... futex resumed>) = 0 [pid 1402] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1402] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1401] <... futex resumed>) = 0 [pid 1401] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1401] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1402] <... futex resumed>) = 1 [pid 1402] open("./bus", O_RDONLY) = 7 [pid 1402] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1401] <... futex resumed>) = 0 [pid 1401] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1401] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1402] <... futex resumed>) = 1 [ 97.441526][ T1402] loop0: detected capacity change from 0 to 512 [ 97.450427][ T1402] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 97.467767][ T1402] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 97.478930][ T1402] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1402] sendfile(6, 7, NULL, 140737974943952 [pid 1401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1401] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1401] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1401] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1404 attached => {parent_tid=[1404]}, 88) = 1404 [pid 1401] rt_sigprocmask(SIG_SETMASK, [], [pid 1404] set_robust_list(0x7f9627dc89a0, 24 [pid 1401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1404] <... set_robust_list resumed>) = 0 [pid 1404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1404] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1401] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1404] <... futex resumed>) = 0 [pid 1401] <... futex resumed>) = 1 [pid 1404] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1401] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1404] <... mmap resumed>) = 0x20000000 [pid 1404] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1401] <... futex resumed>) = 0 [pid 1401] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1401] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1404] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1404] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1401] <... futex resumed>) = 0 [pid 1404] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1401] exit_group(0) = ? [pid 1404] <... futex resumed>) = ? [pid 1402] <... sendfile resumed>) = ? [pid 1402] +++ exited with 0 +++ [pid 1404] +++ exited with 0 +++ [pid 1401] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1401, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./254", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./254", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./254/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./254/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./254/binderfs") = 0 umount2("./254/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./254/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./254/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./254/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./254/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./254/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./254") = 0 mkdir("./255", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1405 ./strace-static-x86_64: Process 1405 attached [pid 1405] set_robust_list(0x555556b826a0, 24) = 0 [pid 1405] chdir("./255") = 0 [pid 1405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1405] setpgid(0, 0) = 0 [pid 1405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1405] write(3, "1000", 4) = 4 [pid 1405] close(3) = 0 [pid 1405] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1405] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1405] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1405] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1405] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1405] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1406]}, 88) = 1406 [pid 1405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1405] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1405] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1406 attached [pid 1406] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1406] memfd_create("syzkaller", 0) = 3 [pid 1406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1406] munmap(0x7f9627d89000, 262144) = 0 [pid 1406] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1406] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1406] close(3) = 0 [pid 1406] mkdir("./file0", 0777) = 0 [pid 1406] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1406] chdir("./file0") = 0 [pid 1406] ioctl(4, LOOP_CLR_FD) = 0 [pid 1406] close(4) = 0 [pid 1406] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1405] <... futex resumed>) = 0 [pid 1405] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1405] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1406] <... futex resumed>) = 1 [pid 1406] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1406] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1405] <... futex resumed>) = 0 [pid 1405] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1405] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1406] <... futex resumed>) = 1 [pid 1406] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1406] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1405] <... futex resumed>) = 0 [pid 1405] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1405] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1406] <... futex resumed>) = 1 [pid 1406] creat("./bus", 000) = 6 [pid 1406] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1405] <... futex resumed>) = 0 [pid 1405] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1405] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1406] <... futex resumed>) = 1 [pid 1406] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1406] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1405] <... futex resumed>) = 0 [pid 1405] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1405] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1406] <... futex resumed>) = 1 [pid 1406] open("./bus", O_RDONLY) = 7 [pid 1406] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1405] <... futex resumed>) = 0 [pid 1405] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1405] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1406] <... futex resumed>) = 1 [ 97.772822][ T1406] loop0: detected capacity change from 0 to 512 [ 97.782649][ T1406] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 97.797295][ T1406] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 97.807623][ T1406] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1406] sendfile(6, 7, NULL, 140737974943952 [pid 1405] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1405] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1405] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1405] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1405] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1405] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1409 attached => {parent_tid=[1409]}, 88) = 1409 [pid 1409] set_robust_list(0x7f9627dc89a0, 24 [pid 1405] rt_sigprocmask(SIG_SETMASK, [], [pid 1409] <... set_robust_list resumed>) = 0 [pid 1409] rt_sigprocmask(SIG_SETMASK, [], [pid 1405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1405] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1405] <... futex resumed>) = 0 [pid 1409] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1405] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1409] <... mmap resumed>) = 0x20000000 [pid 1409] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1405] <... futex resumed>) = 0 [pid 1405] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1405] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1409] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1409] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1405] <... futex resumed>) = 0 [pid 1409] <... futex resumed>) = 1 [pid 1409] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1405] exit_group(0 [pid 1409] <... futex resumed>) = ? [pid 1405] <... exit_group resumed>) = ? [pid 1409] +++ exited with 0 +++ [pid 1406] <... sendfile resumed>) = ? [pid 1406] +++ exited with 0 +++ [pid 1405] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1405, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./255", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./255", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./255/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./255/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./255/binderfs") = 0 umount2("./255/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./255/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./255/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./255/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./255/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./255/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./255") = 0 mkdir("./256", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1410 ./strace-static-x86_64: Process 1410 attached [pid 1410] set_robust_list(0x555556b826a0, 24) = 0 [pid 1410] chdir("./256") = 0 [pid 1410] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1410] setpgid(0, 0) = 0 [pid 1410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1410] write(3, "1000", 4) = 4 [pid 1410] close(3) = 0 [pid 1410] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1410] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1410] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1410] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1410] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1410] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1410] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1411]}, 88) = 1411 [pid 1410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1410] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1410] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1411 attached [pid 1411] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1411] memfd_create("syzkaller", 0) = 3 [pid 1411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1411] munmap(0x7f9627d89000, 262144) = 0 [pid 1411] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1411] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1411] close(3) = 0 [pid 1411] mkdir("./file0", 0777) = 0 [pid 1411] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1411] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1411] chdir("./file0") = 0 [pid 1411] ioctl(4, LOOP_CLR_FD) = 0 [pid 1411] close(4) = 0 [pid 1411] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1410] <... futex resumed>) = 0 [pid 1411] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1410] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1410] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1411] <... open resumed>) = 4 [pid 1411] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1410] <... futex resumed>) = 0 [pid 1411] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1410] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1411] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1410] <... futex resumed>) = 0 [pid 1411] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1410] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1411] <... open resumed>) = 5 [pid 1411] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1411] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1410] <... futex resumed>) = 0 [pid 1410] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1410] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1411] <... futex resumed>) = 0 [pid 1411] creat("./bus", 000) = 6 [pid 1411] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1410] <... futex resumed>) = 0 [pid 1410] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1410] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1411] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1411] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1410] <... futex resumed>) = 0 [pid 1410] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1410] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1411] open("./bus", O_RDONLY) = 7 [pid 1411] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1410] <... futex resumed>) = 0 [pid 1411] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1410] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1411] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1410] <... futex resumed>) = 0 [pid 1411] sendfile(6, 7, NULL, 140737974943952 [ 98.084644][ T1411] loop0: detected capacity change from 0 to 512 [ 98.092968][ T1411] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 98.106487][ T1411] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 98.116146][ T1411] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1410] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1410] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1410] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1410] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1410] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1410] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1413]}, 88) = 1413 ./strace-static-x86_64: Process 1413 attached [pid 1413] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1413] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1410] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1413] <... futex resumed>) = 0 [pid 1413] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1410] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1413] <... mmap resumed>) = 0x20000000 [pid 1413] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1410] <... futex resumed>) = 0 [pid 1410] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1410] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1413] <... futex resumed>) = 1 [pid 1413] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1413] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1410] <... futex resumed>) = 0 [pid 1413] <... futex resumed>) = 1 [pid 1413] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1410] exit_group(0 [pid 1413] <... futex resumed>) = ? [pid 1410] <... exit_group resumed>) = ? [pid 1413] +++ exited with 0 +++ [pid 1411] <... sendfile resumed>) = ? [pid 1411] +++ exited with 0 +++ [pid 1410] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1410, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./256", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./256", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./256/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./256/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./256/binderfs") = 0 umount2("./256/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./256/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./256/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./256/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./256/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./256/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./256") = 0 mkdir("./257", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1414 ./strace-static-x86_64: Process 1414 attached [pid 1414] set_robust_list(0x555556b826a0, 24) = 0 [pid 1414] chdir("./257") = 0 [pid 1414] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1414] setpgid(0, 0) = 0 [pid 1414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1414] write(3, "1000", 4) = 4 [pid 1414] close(3) = 0 [pid 1414] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1414] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1414] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1414] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1414] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1414] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1414] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1414] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1415 attached => {parent_tid=[1415]}, 88) = 1415 [pid 1415] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1415] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1415] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1414] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1415] <... futex resumed>) = 0 [pid 1415] memfd_create("syzkaller", 0) = 3 [pid 1415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1414] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1415] munmap(0x7f9627d89000, 262144) = 0 [pid 1415] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1415] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1415] close(3) = 0 [pid 1415] mkdir("./file0", 0777) = 0 [pid 1415] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1415] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1415] chdir("./file0") = 0 [pid 1415] ioctl(4, LOOP_CLR_FD) = 0 [pid 1415] close(4) = 0 [pid 1415] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1414] <... futex resumed>) = 0 [pid 1414] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1414] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1415] <... futex resumed>) = 1 [pid 1415] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1415] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1414] <... futex resumed>) = 0 [pid 1414] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1414] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1415] <... futex resumed>) = 1 [pid 1415] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1415] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1414] <... futex resumed>) = 0 [pid 1414] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1414] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1415] <... futex resumed>) = 1 [pid 1415] creat("./bus", 000) = 6 [pid 1415] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1414] <... futex resumed>) = 0 [pid 1414] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1414] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1415] <... futex resumed>) = 1 [pid 1415] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1415] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1414] <... futex resumed>) = 0 [pid 1414] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1414] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1415] <... futex resumed>) = 1 [pid 1415] open("./bus", O_RDONLY) = 7 [pid 1415] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1414] <... futex resumed>) = 0 [pid 1414] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1414] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1415] <... futex resumed>) = 1 [ 98.403360][ T1415] loop0: detected capacity change from 0 to 512 [ 98.411680][ T1415] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 98.425177][ T1415] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 98.434833][ T1415] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1415] sendfile(6, 7, NULL, 140737974943952 [pid 1414] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1414] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1414] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1414] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1414] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1414] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1414] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1417 attached => {parent_tid=[1417]}, 88) = 1417 [pid 1414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1414] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1414] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1417] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1417] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1417] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1414] <... futex resumed>) = 0 [pid 1414] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1414] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1417] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1417] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1414] <... futex resumed>) = 0 [pid 1417] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1414] exit_group(0) = ? [pid 1417] <... futex resumed>) = ? [pid 1415] <... sendfile resumed>) = ? [pid 1415] +++ exited with 0 +++ [pid 1417] +++ exited with 0 +++ [pid 1414] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1414, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./257", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./257", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./257/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./257/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./257/binderfs") = 0 umount2("./257/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./257/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./257/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./257/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./257/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./257/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./257") = 0 mkdir("./258", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1418 ./strace-static-x86_64: Process 1418 attached [pid 1418] set_robust_list(0x555556b826a0, 24) = 0 [pid 1418] chdir("./258") = 0 [pid 1418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1418] setpgid(0, 0) = 0 [pid 1418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1418] write(3, "1000", 4) = 4 [pid 1418] close(3) = 0 [pid 1418] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1418] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1418] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1418] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1418] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1419 attached => {parent_tid=[1419]}, 88) = 1419 [pid 1418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1418] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1419] set_robust_list(0x7f96301a99a0, 24 [pid 1418] <... futex resumed>) = 0 [pid 1419] <... set_robust_list resumed>) = 0 [pid 1418] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1419] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1419] memfd_create("syzkaller", 0) = 3 [pid 1419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1419] munmap(0x7f9627d89000, 262144) = 0 [pid 1419] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1419] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1419] close(3) = 0 [pid 1419] mkdir("./file0", 0777) = 0 [pid 1419] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1419] chdir("./file0") = 0 [pid 1419] ioctl(4, LOOP_CLR_FD) = 0 [pid 1419] close(4) = 0 [pid 1419] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1418] <... futex resumed>) = 0 [pid 1418] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1419] <... futex resumed>) = 1 [pid 1419] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1419] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1418] <... futex resumed>) = 0 [pid 1418] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1419] <... futex resumed>) = 1 [pid 1419] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1419] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1418] <... futex resumed>) = 0 [pid 1418] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1419] <... futex resumed>) = 1 [pid 1419] creat("./bus", 000) = 6 [pid 1419] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1418] <... futex resumed>) = 0 [pid 1418] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1419] <... futex resumed>) = 1 [pid 1419] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1419] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1418] <... futex resumed>) = 0 [pid 1418] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1419] <... futex resumed>) = 1 [pid 1419] open("./bus", O_RDONLY) = 7 [pid 1419] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1418] <... futex resumed>) = 0 [pid 1418] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1419] <... futex resumed>) = 1 [ 98.741493][ T1419] loop0: detected capacity change from 0 to 512 [ 98.749600][ T1419] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 98.763591][ T1419] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 98.773542][ T1419] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1419] sendfile(6, 7, NULL, 140737974943952 [pid 1418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1418] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1418] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1418] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1422 attached => {parent_tid=[1422]}, 88) = 1422 [pid 1418] rt_sigprocmask(SIG_SETMASK, [], [pid 1422] set_robust_list(0x7f9627dc89a0, 24 [pid 1418] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1422] <... set_robust_list resumed>) = 0 [pid 1418] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1418] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1422] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1422] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1418] <... futex resumed>) = 0 [pid 1422] <... futex resumed>) = 1 [pid 1418] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1422] sendmsg(-1, 0x20000000, 0 [pid 1418] <... futex resumed>) = 0 [pid 1422] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1422] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1418] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1422] <... futex resumed>) = 0 [pid 1422] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1418] exit_group(0 [pid 1422] <... futex resumed>) = ? [pid 1418] <... exit_group resumed>) = ? [pid 1422] +++ exited with 0 +++ [pid 1419] <... sendfile resumed>) = ? [pid 1419] +++ exited with 0 +++ [pid 1418] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1418, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./258", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./258", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./258/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./258/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./258/binderfs") = 0 umount2("./258/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./258/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./258/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./258/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./258/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./258/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./258") = 0 mkdir("./259", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1423 ./strace-static-x86_64: Process 1423 attached [pid 1423] set_robust_list(0x555556b826a0, 24) = 0 [pid 1423] chdir("./259") = 0 [pid 1423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1423] setpgid(0, 0) = 0 [pid 1423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1423] write(3, "1000", 4) = 4 [pid 1423] close(3) = 0 [pid 1423] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1423] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1423] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1423] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1423] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1423] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1424]}, 88) = 1424 [pid 1423] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1423] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1423] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1424 attached [pid 1424] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1424] memfd_create("syzkaller", 0) = 3 [pid 1424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1424] munmap(0x7f9627d89000, 262144) = 0 [pid 1424] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1424] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1424] close(3) = 0 [pid 1424] mkdir("./file0", 0777) = 0 [pid 1424] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1424] chdir("./file0") = 0 [pid 1424] ioctl(4, LOOP_CLR_FD) = 0 [pid 1424] close(4) = 0 [pid 1424] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1423] <... futex resumed>) = 0 [pid 1423] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1423] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1424] <... futex resumed>) = 1 [pid 1424] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1424] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1423] <... futex resumed>) = 0 [pid 1423] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1423] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1424] <... futex resumed>) = 1 [pid 1424] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1424] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1423] <... futex resumed>) = 0 [pid 1423] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1423] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1424] <... futex resumed>) = 1 [pid 1424] creat("./bus", 000) = 6 [pid 1424] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1423] <... futex resumed>) = 0 [pid 1423] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1423] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1424] <... futex resumed>) = 1 [pid 1424] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1424] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1423] <... futex resumed>) = 0 [pid 1423] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1423] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1424] <... futex resumed>) = 1 [pid 1424] open("./bus", O_RDONLY) = 7 [pid 1424] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1423] <... futex resumed>) = 0 [pid 1423] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1423] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1424] <... futex resumed>) = 1 [ 99.030807][ T1424] loop0: detected capacity change from 0 to 512 [ 99.038974][ T1424] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 99.051987][ T1424] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 99.061851][ T1424] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1424] sendfile(6, 7, NULL, 140737974943952 [pid 1423] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1423] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1423] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1423] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1423] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1426]}, 88) = 1426 [pid 1423] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1423] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1423] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1426 attached [pid 1426] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1426] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1426] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1426] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1423] <... futex resumed>) = 0 [pid 1426] <... futex resumed>) = 1 [pid 1423] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1423] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1426] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1426] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1423] <... futex resumed>) = 0 [pid 1426] <... futex resumed>) = 1 [pid 1426] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1423] exit_group(0) = ? [pid 1426] <... futex resumed>) = ? [pid 1426] +++ exited with 0 +++ [pid 1424] <... sendfile resumed>) = ? [pid 1424] +++ exited with 0 +++ [pid 1423] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1423, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./259", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./259", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./259/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./259/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./259/binderfs") = 0 umount2("./259/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./259/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./259/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./259/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./259/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./259/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./259") = 0 mkdir("./260", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1427 ./strace-static-x86_64: Process 1427 attached [pid 1427] set_robust_list(0x555556b826a0, 24) = 0 [pid 1427] chdir("./260") = 0 [pid 1427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1427] setpgid(0, 0) = 0 [pid 1427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1427] write(3, "1000", 4) = 4 [pid 1427] close(3) = 0 [pid 1427] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1427] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1427] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1427] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1427] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1427] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1428 attached => {parent_tid=[1428]}, 88) = 1428 [pid 1427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1427] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1428] set_robust_list(0x7f96301a99a0, 24 [pid 1427] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1428] <... set_robust_list resumed>) = 0 [pid 1428] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1428] memfd_create("syzkaller", 0) = 3 [pid 1428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1428] munmap(0x7f9627d89000, 262144) = 0 [pid 1428] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1428] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1428] close(3) = 0 [pid 1428] mkdir("./file0", 0777) = 0 [pid 1428] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1428] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1428] chdir("./file0") = 0 [pid 1428] ioctl(4, LOOP_CLR_FD) = 0 [pid 1428] close(4) = 0 [pid 1428] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1427] <... futex resumed>) = 0 [pid 1427] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1427] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1428] <... futex resumed>) = 1 [pid 1428] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1428] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1427] <... futex resumed>) = 0 [pid 1427] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1427] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1428] <... futex resumed>) = 1 [pid 1428] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1428] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1427] <... futex resumed>) = 0 [pid 1427] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1427] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1428] <... futex resumed>) = 1 [pid 1428] creat("./bus", 000) = 6 [pid 1428] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1427] <... futex resumed>) = 0 [pid 1427] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1427] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1428] <... futex resumed>) = 1 [pid 1428] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1428] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1427] <... futex resumed>) = 0 [pid 1427] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1427] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1428] <... futex resumed>) = 1 [pid 1428] open("./bus", O_RDONLY) = 7 [pid 1428] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1427] <... futex resumed>) = 0 [pid 1427] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1427] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1428] <... futex resumed>) = 1 [ 99.325120][ T1428] loop0: detected capacity change from 0 to 512 [ 99.333147][ T1428] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 99.346349][ T1428] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 99.356149][ T1428] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1428] sendfile(6, 7, NULL, 140737974943952 [pid 1427] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1427] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1427] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1427] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1427] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1427] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1430 attached => {parent_tid=[1430]}, 88) = 1430 [pid 1427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1427] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1427] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1430] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1430] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1430] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1427] <... futex resumed>) = 0 [pid 1427] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1427] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1430] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1430] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1427] <... futex resumed>) = 0 [pid 1430] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1427] exit_group(0 [pid 1430] <... futex resumed>) = ? [pid 1427] <... exit_group resumed>) = ? [pid 1430] +++ exited with 0 +++ [pid 1428] <... sendfile resumed>) = ? [pid 1428] +++ exited with 0 +++ [pid 1427] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1427, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./260", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./260", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./260/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./260/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./260/binderfs") = 0 umount2("./260/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./260/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./260/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./260/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./260/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./260/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./260") = 0 mkdir("./261", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1431 ./strace-static-x86_64: Process 1431 attached [pid 1431] set_robust_list(0x555556b826a0, 24) = 0 [pid 1431] chdir("./261") = 0 [pid 1431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1431] setpgid(0, 0) = 0 [pid 1431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1431] write(3, "1000", 4) = 4 [pid 1431] close(3) = 0 [pid 1431] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1431] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1431] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1431] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1431] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1431] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1432]}, 88) = 1432 [pid 1431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1432 attached [pid 1432] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1432] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1432] memfd_create("syzkaller", 0) = 3 [pid 1432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1432] munmap(0x7f9627d89000, 262144) = 0 [pid 1432] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1432] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1432] close(3) = 0 [pid 1432] mkdir("./file0", 0777) = 0 [pid 1432] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1432] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1432] chdir("./file0") = 0 [pid 1432] ioctl(4, LOOP_CLR_FD) = 0 [pid 1432] close(4) = 0 [pid 1432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1432] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1431] <... futex resumed>) = 0 [pid 1431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1432] <... futex resumed>) = 0 [pid 1432] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1431] <... futex resumed>) = 0 [pid 1431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1432] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1431] <... futex resumed>) = 0 [pid 1431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1432] creat("./bus", 000) = 6 [pid 1432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1431] <... futex resumed>) = 0 [pid 1431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1432] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1431] <... futex resumed>) = 0 [pid 1431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1432] open("./bus", O_RDONLY) = 7 [pid 1432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1431] <... futex resumed>) = 0 [pid 1431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1432] sendfile(6, 7, NULL, 140737974943952 [pid 1431] <... futex resumed>) = 0 [ 99.639545][ T1432] loop0: detected capacity change from 0 to 512 [ 99.647843][ T1432] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 99.661093][ T1432] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 99.670847][ T1432] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1431] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1431] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1431] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1434 attached => {parent_tid=[1434]}, 88) = 1434 [pid 1434] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1431] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1434] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1431] <... futex resumed>) = 0 [pid 1431] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1434] <... mmap resumed>) = 0x20000000 [pid 1434] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1431] <... futex resumed>) = 0 [pid 1434] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1431] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1434] <... futex resumed>) = 0 [pid 1431] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1434] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1434] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1431] <... futex resumed>) = 0 [pid 1434] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1431] exit_group(0 [pid 1434] <... futex resumed>) = ? [pid 1431] <... exit_group resumed>) = ? [pid 1434] +++ exited with 0 +++ [pid 1432] <... sendfile resumed>) = ? [pid 1432] +++ exited with 0 +++ [pid 1431] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1431, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./261", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./261", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./261/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./261/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./261/binderfs") = 0 umount2("./261/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./261/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./261/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./261/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./261/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./261/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./261") = 0 mkdir("./262", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1436 ./strace-static-x86_64: Process 1436 attached [pid 1436] set_robust_list(0x555556b826a0, 24) = 0 [pid 1436] chdir("./262") = 0 [pid 1436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1436] setpgid(0, 0) = 0 [pid 1436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1436] write(3, "1000", 4) = 4 [pid 1436] close(3) = 0 [pid 1436] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1436] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1436] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1436] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1436] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1436] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1437]}, 88) = 1437 [pid 1436] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 1437 attached [pid 1436] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1437] set_robust_list(0x7f96301a99a0, 24 [pid 1436] <... futex resumed>) = 0 [pid 1437] <... set_robust_list resumed>) = 0 [pid 1436] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1437] memfd_create("syzkaller", 0) = 3 [pid 1437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1437] munmap(0x7f9627d89000, 262144) = 0 [pid 1437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1437] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1437] close(3) = 0 [pid 1437] mkdir("./file0", 0777) = 0 [pid 1437] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1437] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1437] chdir("./file0") = 0 [pid 1437] ioctl(4, LOOP_CLR_FD) = 0 [pid 1437] close(4) = 0 [pid 1437] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] <... futex resumed>) = 0 [pid 1436] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1436] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1437] <... futex resumed>) = 1 [pid 1437] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1437] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] <... futex resumed>) = 0 [pid 1436] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1436] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1437] <... futex resumed>) = 1 [pid 1437] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1437] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] <... futex resumed>) = 0 [pid 1436] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1436] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1437] <... futex resumed>) = 1 [pid 1437] creat("./bus", 000) = 6 [pid 1437] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] <... futex resumed>) = 0 [pid 1436] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1436] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1437] <... futex resumed>) = 1 [pid 1437] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1437] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1436] <... futex resumed>) = 0 [pid 1436] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1436] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1437] open("./bus", O_RDONLY) = 7 [pid 1437] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1436] <... futex resumed>) = 0 [pid 1436] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1437] sendfile(6, 7, NULL, 140737974943952 [pid 1436] <... futex resumed>) = 0 [ 99.953835][ T1437] loop0: detected capacity change from 0 to 512 [ 99.962018][ T1437] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 99.975516][ T1437] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 99.985303][ T1437] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1436] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1436] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1436] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1436] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1436] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1439]}, 88) = 1439 [pid 1436] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1436] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1436] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1439 attached [pid 1439] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1439] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1439] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] <... futex resumed>) = 0 [pid 1436] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1436] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1439] <... futex resumed>) = 1 [pid 1439] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1439] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] <... futex resumed>) = 0 [pid 1439] <... futex resumed>) = 1 [pid 1439] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1436] exit_group(0 [pid 1439] <... futex resumed>) = ? [pid 1437] <... sendfile resumed>) = ? [pid 1436] <... exit_group resumed>) = ? [pid 1439] +++ exited with 0 +++ [pid 1437] +++ exited with 0 +++ [pid 1436] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1436, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./262", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./262", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./262/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./262/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./262/binderfs") = 0 umount2("./262/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./262/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./262/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./262/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./262/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./262/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./262") = 0 mkdir("./263", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1440 ./strace-static-x86_64: Process 1440 attached [pid 1440] set_robust_list(0x555556b826a0, 24) = 0 [pid 1440] chdir("./263") = 0 [pid 1440] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1440] setpgid(0, 0) = 0 [pid 1440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1440] write(3, "1000", 4) = 4 [pid 1440] close(3) = 0 [pid 1440] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1440] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1440] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1440] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1440] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1440] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1440] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1440] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1441 attached => {parent_tid=[1441]}, 88) = 1441 [pid 1441] set_robust_list(0x7f96301a99a0, 24 [pid 1440] rt_sigprocmask(SIG_SETMASK, [], [pid 1441] <... set_robust_list resumed>) = 0 [pid 1441] rt_sigprocmask(SIG_SETMASK, [], [pid 1440] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1441] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1440] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1441] <... futex resumed>) = 0 [pid 1440] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1441] memfd_create("syzkaller", 0) = 3 [pid 1441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1441] munmap(0x7f9627d89000, 262144) = 0 [pid 1441] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1441] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1441] close(3) = 0 [pid 1441] mkdir("./file0", 0777) = 0 [pid 1441] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1441] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1441] chdir("./file0") = 0 [pid 1441] ioctl(4, LOOP_CLR_FD) = 0 [pid 1441] close(4) = 0 [pid 1441] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1440] <... futex resumed>) = 0 [pid 1440] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1440] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1441] <... futex resumed>) = 1 [pid 1441] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1441] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1440] <... futex resumed>) = 0 [pid 1440] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1440] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1441] <... futex resumed>) = 1 [pid 1441] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1441] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1440] <... futex resumed>) = 0 [pid 1440] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1440] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1441] <... futex resumed>) = 1 [pid 1441] creat("./bus", 000) = 6 [pid 1441] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1440] <... futex resumed>) = 0 [pid 1440] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1440] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1441] <... futex resumed>) = 1 [pid 1441] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1441] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1441] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1440] <... futex resumed>) = 0 [pid 1440] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1441] open("./bus", O_RDONLY) = 7 [pid 1441] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1441] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1440] <... futex resumed>) = 1 [pid 1440] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1440] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1440] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1441] <... futex resumed>) = 0 [ 100.237762][ T1441] loop0: detected capacity change from 0 to 512 [ 100.246261][ T1441] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 100.259658][ T1441] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 100.269427][ T1441] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1441] sendfile(6, 7, NULL, 140737974943952 [pid 1440] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1440] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1440] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1440] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1440] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1440] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1443 attached [pid 1443] set_robust_list(0x7f9627dc89a0, 24 [pid 1440] <... clone3 resumed> => {parent_tid=[1443]}, 88) = 1443 [pid 1440] rt_sigprocmask(SIG_SETMASK, [], [pid 1443] <... set_robust_list resumed>) = 0 [pid 1443] rt_sigprocmask(SIG_SETMASK, [], [pid 1440] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1440] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1443] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1440] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1443] <... mmap resumed>) = 0x20000000 [pid 1443] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1440] <... futex resumed>) = 0 [pid 1443] sendmsg(-1, 0x20000000, 0 [pid 1440] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1443] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1440] <... futex resumed>) = 0 [pid 1440] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1443] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1443] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1440] exit_group(0) = ? [pid 1441] <... sendfile resumed>) = ? [pid 1441] +++ exited with 0 +++ [pid 1443] <... futex resumed>) = ? [pid 1443] +++ exited with 0 +++ [pid 1440] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1440, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./263", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./263", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./263/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./263/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./263/binderfs") = 0 umount2("./263/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./263/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./263/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./263/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./263/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./263/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./263") = 0 mkdir("./264", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1444 ./strace-static-x86_64: Process 1444 attached [pid 1444] set_robust_list(0x555556b826a0, 24) = 0 [pid 1444] chdir("./264") = 0 [pid 1444] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1444] setpgid(0, 0) = 0 [pid 1444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1444] write(3, "1000", 4) = 4 [pid 1444] close(3) = 0 [pid 1444] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1444] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1444] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1444] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1444] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1444] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1444] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1445 attached [pid 1445] set_robust_list(0x7f96301a99a0, 24 [pid 1444] <... clone3 resumed> => {parent_tid=[1445]}, 88) = 1445 [pid 1445] <... set_robust_list resumed>) = 0 [pid 1445] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1445] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1444] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1445] <... futex resumed>) = 0 [pid 1444] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1445] memfd_create("syzkaller", 0) = 3 [pid 1445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1445] munmap(0x7f9627d89000, 262144) = 0 [pid 1445] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1445] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1445] close(3) = 0 [pid 1445] mkdir("./file0", 0777) = 0 [pid 1445] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1445] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1445] chdir("./file0") = 0 [pid 1445] ioctl(4, LOOP_CLR_FD) = 0 [pid 1445] close(4) = 0 [pid 1445] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1444] <... futex resumed>) = 0 [pid 1444] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1444] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1445] <... futex resumed>) = 1 [pid 1445] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1445] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1444] <... futex resumed>) = 0 [pid 1444] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1444] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1445] <... futex resumed>) = 1 [pid 1445] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1445] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1444] <... futex resumed>) = 0 [pid 1444] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1444] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1445] <... futex resumed>) = 1 [pid 1445] creat("./bus", 000) = 6 [pid 1445] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1444] <... futex resumed>) = 0 [pid 1444] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1444] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1445] <... futex resumed>) = 1 [pid 1445] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1445] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1444] <... futex resumed>) = 0 [pid 1444] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1444] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1445] <... futex resumed>) = 1 [pid 1445] open("./bus", O_RDONLY) = 7 [pid 1445] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1444] <... futex resumed>) = 0 [pid 1444] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1444] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1445] <... futex resumed>) = 1 [ 100.519937][ T1445] loop0: detected capacity change from 0 to 512 [ 100.528411][ T1445] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 100.542305][ T1445] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 100.552790][ T1445] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1445] sendfile(6, 7, NULL, 140737974943952 [pid 1444] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1444] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1444] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1444] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1444] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1447 attached => {parent_tid=[1447]}, 88) = 1447 [pid 1444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1444] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1444] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1447] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1447] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1447] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1447] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1444] <... futex resumed>) = 0 [pid 1444] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1444] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1447] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1447] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1444] <... futex resumed>) = 0 [pid 1447] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1444] exit_group(0 [pid 1447] <... futex resumed>) = ? [pid 1444] <... exit_group resumed>) = ? [pid 1447] +++ exited with 0 +++ [pid 1445] <... sendfile resumed>) = ? [pid 1445] +++ exited with 0 +++ [pid 1444] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1444, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./264", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./264", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./264/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./264/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./264/binderfs") = 0 umount2("./264/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./264/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./264/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./264/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./264/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./264/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./264") = 0 mkdir("./265", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1449 ./strace-static-x86_64: Process 1449 attached [pid 1449] set_robust_list(0x555556b826a0, 24) = 0 [pid 1449] chdir("./265") = 0 [pid 1449] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1449] setpgid(0, 0) = 0 [pid 1449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1449] write(3, "1000", 4) = 4 [pid 1449] close(3) = 0 [pid 1449] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1449] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1449] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1449] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1449] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1449] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1450 attached => {parent_tid=[1450]}, 88) = 1450 [pid 1450] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1450] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1449] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1450] <... futex resumed>) = 0 [pid 1450] memfd_create("syzkaller", 0) = 3 [pid 1450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1449] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1450] munmap(0x7f9627d89000, 262144) = 0 [pid 1450] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1450] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1450] close(3) = 0 [pid 1450] mkdir("./file0", 0777) = 0 [pid 1450] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1450] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1450] chdir("./file0") = 0 [pid 1450] ioctl(4, LOOP_CLR_FD) = 0 [pid 1450] close(4) = 0 [pid 1450] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1450] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1449] <... futex resumed>) = 0 [pid 1449] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1450] <... futex resumed>) = 0 [pid 1449] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1450] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1450] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1450] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1449] <... futex resumed>) = 0 [pid 1449] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1449] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1450] <... futex resumed>) = 0 [pid 1450] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1450] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1449] <... futex resumed>) = 0 [pid 1449] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1449] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1450] <... futex resumed>) = 1 [pid 1450] creat("./bus", 000) = 6 [pid 1450] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1449] <... futex resumed>) = 0 [pid 1449] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1449] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1450] <... futex resumed>) = 1 [pid 1450] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1450] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1449] <... futex resumed>) = 0 [pid 1449] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1449] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1450] <... futex resumed>) = 1 [pid 1450] open("./bus", O_RDONLY) = 7 [pid 1450] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1449] <... futex resumed>) = 0 [pid 1449] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1449] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1450] <... futex resumed>) = 1 [ 100.812247][ T1450] loop0: detected capacity change from 0 to 512 [ 100.821123][ T1450] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 100.834450][ T1450] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 100.844080][ T1450] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1450] sendfile(6, 7, NULL, 140737974943952 [pid 1449] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1449] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1449] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1449] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1449] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1449] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1449] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1449] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1452]}, 88) = 1452 [pid 1449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1449] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1449] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1452 attached [pid 1452] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1452] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1452] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1452] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1449] <... futex resumed>) = 0 [pid 1449] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1449] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1452] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1452] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1449] <... futex resumed>) = 0 [pid 1452] <... futex resumed>) = 1 [pid 1452] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1449] exit_group(0 [pid 1452] <... futex resumed>) = ? [pid 1449] <... exit_group resumed>) = ? [pid 1452] +++ exited with 0 +++ [pid 1450] <... sendfile resumed>) = ? [pid 1450] +++ exited with 0 +++ [pid 1449] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1449, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- umount2("./265", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./265", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./265/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./265/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./265/binderfs") = 0 umount2("./265/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./265/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./265/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./265/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./265/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./265/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./265") = 0 mkdir("./266", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1453 ./strace-static-x86_64: Process 1453 attached [pid 1453] set_robust_list(0x555556b826a0, 24) = 0 [pid 1453] chdir("./266") = 0 [pid 1453] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1453] setpgid(0, 0) = 0 [pid 1453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1453] write(3, "1000", 4) = 4 [pid 1453] close(3) = 0 [pid 1453] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1453] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1453] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1453] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1453] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1453] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1453] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1454]}, 88) = 1454 [pid 1453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1453] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1453] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1454 attached [pid 1454] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1454] memfd_create("syzkaller", 0) = 3 [pid 1454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1454] munmap(0x7f9627d89000, 262144) = 0 [pid 1454] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1454] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1454] close(3) = 0 [pid 1454] mkdir("./file0", 0777) = 0 [pid 1454] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1454] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1454] chdir("./file0") = 0 [pid 1454] ioctl(4, LOOP_CLR_FD) = 0 [pid 1454] close(4) = 0 [pid 1454] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1454] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1453] <... futex resumed>) = 0 [pid 1453] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1453] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1454] <... futex resumed>) = 0 [pid 1454] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1454] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... futex resumed>) = 0 [pid 1453] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1453] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1454] <... futex resumed>) = 1 [pid 1454] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1454] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... futex resumed>) = 0 [pid 1453] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1453] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1454] <... futex resumed>) = 1 [pid 1454] creat("./bus", 000) = 6 [pid 1454] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... futex resumed>) = 0 [pid 1453] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1453] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1454] <... futex resumed>) = 1 [pid 1454] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1454] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... futex resumed>) = 0 [pid 1453] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1453] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1454] <... futex resumed>) = 1 [pid 1454] open("./bus", O_RDONLY) = 7 [pid 1454] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... futex resumed>) = 0 [pid 1453] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1453] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1454] <... futex resumed>) = 1 [ 101.127964][ T1454] loop0: detected capacity change from 0 to 512 [ 101.136107][ T1454] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 101.149278][ T1454] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 101.159364][ T1454] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1454] sendfile(6, 7, NULL, 140737974943952 [pid 1453] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1453] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1453] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1453] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1453] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1453] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1453] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1456]}, 88) = 1456 [pid 1453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1453] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1453] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1456 attached [pid 1456] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1456] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1456] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... futex resumed>) = 0 [pid 1456] <... futex resumed>) = 1 [pid 1453] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1456] sendmsg(-1, 0x20000000, 0 [pid 1453] <... futex resumed>) = 0 [pid 1456] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1453] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1456] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1456] <... futex resumed>) = 0 [pid 1456] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1453] exit_group(0 [pid 1456] <... futex resumed>) = ? [pid 1453] <... exit_group resumed>) = ? [pid 1456] +++ exited with 0 +++ [pid 1454] <... sendfile resumed>) = ? [pid 1454] +++ exited with 0 +++ [pid 1453] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1453, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./266", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./266", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./266/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./266/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./266/binderfs") = 0 umount2("./266/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./266/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./266/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./266/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./266/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./266/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./266") = 0 mkdir("./267", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1457 ./strace-static-x86_64: Process 1457 attached [pid 1457] set_robust_list(0x555556b826a0, 24) = 0 [pid 1457] chdir("./267") = 0 [pid 1457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1457] setpgid(0, 0) = 0 [pid 1457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1457] write(3, "1000", 4) = 4 [pid 1457] close(3) = 0 [pid 1457] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1457] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1457] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1457] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1457] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1457] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1457] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1458]}, 88) = 1458 [pid 1457] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1457] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1457] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1458 attached [pid 1458] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1458] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1458] memfd_create("syzkaller", 0) = 3 [pid 1458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1458] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1458] munmap(0x7f9627d89000, 262144) = 0 [pid 1458] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1458] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1458] close(3) = 0 [pid 1458] mkdir("./file0", 0777) = 0 [pid 1458] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1458] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1458] chdir("./file0") = 0 [pid 1458] ioctl(4, LOOP_CLR_FD) = 0 [pid 1458] close(4) = 0 [pid 1458] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1458] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1457] <... futex resumed>) = 0 [pid 1457] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1457] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1458] <... futex resumed>) = 0 [pid 1458] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1458] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1457] <... futex resumed>) = 0 [pid 1457] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1457] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1458] <... futex resumed>) = 1 [pid 1458] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1458] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1457] <... futex resumed>) = 0 [pid 1457] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1457] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1458] <... futex resumed>) = 1 [pid 1458] creat("./bus", 000) = 6 [pid 1458] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1457] <... futex resumed>) = 0 [pid 1457] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1457] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1458] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1458] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1457] <... futex resumed>) = 0 [pid 1457] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1457] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1458] <... futex resumed>) = 1 [pid 1458] open("./bus", O_RDONLY) = 7 [pid 1458] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1457] <... futex resumed>) = 0 [pid 1457] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1457] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1458] <... futex resumed>) = 1 [ 101.428078][ T1458] loop0: detected capacity change from 0 to 512 [ 101.436191][ T1458] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 101.449500][ T1458] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 101.459743][ T1458] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1458] sendfile(6, 7, NULL, 140737974943952 [pid 1457] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1457] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1457] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1457] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1457] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1457] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1460 attached => {parent_tid=[1460]}, 88) = 1460 [pid 1457] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1457] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1457] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1460] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1460] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1460] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1460] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1457] <... futex resumed>) = 0 [pid 1457] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1460] sendmsg(-1, 0x20000000, 0 [pid 1457] <... futex resumed>) = 0 [pid 1457] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1460] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1460] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1457] <... futex resumed>) = 0 [pid 1460] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1457] exit_group(0 [pid 1460] <... futex resumed>) = ? [pid 1457] <... exit_group resumed>) = ? [pid 1460] +++ exited with 0 +++ [pid 1458] <... sendfile resumed>) = ? [pid 1458] +++ exited with 0 +++ [pid 1457] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1457, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./267", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./267", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./267/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./267/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./267/binderfs") = 0 umount2("./267/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./267/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./267/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./267/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./267/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./267/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./267") = 0 mkdir("./268", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1461 ./strace-static-x86_64: Process 1461 attached [pid 1461] set_robust_list(0x555556b826a0, 24) = 0 [pid 1461] chdir("./268") = 0 [pid 1461] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1461] setpgid(0, 0) = 0 [pid 1461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1461] write(3, "1000", 4) = 4 [pid 1461] close(3) = 0 [pid 1461] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1461] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1461] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1461] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1461] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1461] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1461] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1462 attached => {parent_tid=[1462]}, 88) = 1462 [pid 1462] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1462] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1461] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1461] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1462] <... futex resumed>) = 0 [pid 1462] memfd_create("syzkaller", 0 [pid 1461] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1462] <... memfd_create resumed>) = 3 [pid 1462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1462] munmap(0x7f9627d89000, 262144) = 0 [pid 1462] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1462] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1462] close(3) = 0 [pid 1462] mkdir("./file0", 0777) = 0 [pid 1462] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1462] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1462] chdir("./file0") = 0 [pid 1462] ioctl(4, LOOP_CLR_FD) = 0 [pid 1462] close(4) = 0 [pid 1462] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1462] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1461] <... futex resumed>) = 0 [pid 1461] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1461] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... futex resumed>) = 0 [pid 1462] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1462] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1461] <... futex resumed>) = 0 [pid 1461] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1461] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... futex resumed>) = 1 [pid 1462] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1462] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1461] <... futex resumed>) = 0 [pid 1461] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1461] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... futex resumed>) = 1 [pid 1462] creat("./bus", 000) = 6 [pid 1462] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1461] <... futex resumed>) = 0 [pid 1461] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1461] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... futex resumed>) = 1 [pid 1462] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1462] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1461] <... futex resumed>) = 0 [pid 1461] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1461] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... futex resumed>) = 1 [pid 1462] open("./bus", O_RDONLY) = 7 [pid 1462] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1461] <... futex resumed>) = 0 [pid 1461] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1461] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] <... futex resumed>) = 1 [ 101.752734][ T1462] loop0: detected capacity change from 0 to 512 [ 101.760564][ T1462] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 101.773864][ T1462] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 101.784184][ T1462] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1462] sendfile(6, 7, NULL, 140737974943952 [pid 1461] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1461] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1461] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1461] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1461] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1461] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1461] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1461] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1461] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1465]}, 88) = 1465 [pid 1461] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1461] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1461] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1465 attached [pid 1465] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1465] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1465] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1461] <... futex resumed>) = 0 [pid 1461] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1461] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1465] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1465] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1461] <... futex resumed>) = 0 [pid 1465] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1461] exit_group(0 [pid 1465] <... futex resumed>) = ? [pid 1461] <... exit_group resumed>) = ? [pid 1465] +++ exited with 0 +++ [pid 1462] <... sendfile resumed>) = ? [pid 1462] +++ exited with 0 +++ [pid 1461] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1461, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./268", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./268", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./268/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./268/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./268/binderfs") = 0 umount2("./268/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./268/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./268/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./268/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./268/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./268/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./268") = 0 mkdir("./269", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1466 ./strace-static-x86_64: Process 1466 attached [pid 1466] set_robust_list(0x555556b826a0, 24) = 0 [pid 1466] chdir("./269") = 0 [pid 1466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1466] setpgid(0, 0) = 0 [pid 1466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1466] write(3, "1000", 4) = 4 [pid 1466] close(3) = 0 [pid 1466] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1466] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1466] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1466] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1466] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1466] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1467]}, 88) = 1467 [pid 1466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1467 attached [pid 1467] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1467] memfd_create("syzkaller", 0) = 3 [pid 1467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1467] munmap(0x7f9627d89000, 262144) = 0 [pid 1467] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1467] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1467] close(3) = 0 [pid 1467] mkdir("./file0", 0777) = 0 [pid 1467] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1467] chdir("./file0") = 0 [pid 1467] ioctl(4, LOOP_CLR_FD) = 0 [pid 1467] close(4) = 0 [pid 1467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1466] <... futex resumed>) = 0 [pid 1466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1467] <... futex resumed>) = 1 [pid 1467] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1466] <... futex resumed>) = 0 [pid 1466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1467] <... futex resumed>) = 1 [pid 1467] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1466] <... futex resumed>) = 0 [pid 1466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1467] <... futex resumed>) = 1 [pid 1467] creat("./bus", 000) = 6 [pid 1467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1466] <... futex resumed>) = 0 [pid 1466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1467] <... futex resumed>) = 1 [pid 1467] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1466] <... futex resumed>) = 0 [pid 1466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1467] <... futex resumed>) = 1 [pid 1467] open("./bus", O_RDONLY) = 7 [pid 1467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1466] <... futex resumed>) = 0 [pid 1466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1467] <... futex resumed>) = 1 [ 102.070998][ T1467] loop0: detected capacity change from 0 to 512 [ 102.080488][ T1467] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 102.097341][ T1467] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 102.108457][ T1467] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1467] sendfile(6, 7, NULL, 140737974943952 [pid 1466] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1466] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1466] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1466] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1469 attached => {parent_tid=[1469]}, 88) = 1469 [pid 1466] rt_sigprocmask(SIG_SETMASK, [], [pid 1469] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1469] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1466] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1466] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1469] <... futex resumed>) = 0 [pid 1469] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1469] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1466] <... futex resumed>) = 0 [pid 1466] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1466] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1469] <... futex resumed>) = 1 [pid 1469] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1469] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1466] <... futex resumed>) = 0 [pid 1469] <... futex resumed>) = 1 [pid 1469] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1466] exit_group(0) = ? [pid 1469] <... futex resumed>) = ? [pid 1469] +++ exited with 0 +++ [pid 1467] <... sendfile resumed>) = ? [pid 1467] +++ exited with 0 +++ [pid 1466] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1466, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./269", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./269", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./269/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./269/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./269/binderfs") = 0 umount2("./269/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./269/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./269/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./269/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./269/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./269/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./269") = 0 mkdir("./270", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1470 ./strace-static-x86_64: Process 1470 attached [pid 1470] set_robust_list(0x555556b826a0, 24) = 0 [pid 1470] chdir("./270") = 0 [pid 1470] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1470] setpgid(0, 0) = 0 [pid 1470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1470] write(3, "1000", 4) = 4 [pid 1470] close(3) = 0 [pid 1470] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1470] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1470] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1470] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1470] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1470] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1471 attached => {parent_tid=[1471]}, 88) = 1471 [pid 1471] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1471] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1471] <... futex resumed>) = 0 [pid 1470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1471] memfd_create("syzkaller", 0) = 3 [pid 1471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1471] munmap(0x7f9627d89000, 262144) = 0 [pid 1471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1471] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1471] close(3) = 0 [pid 1471] mkdir("./file0", 0777) = 0 [pid 1471] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1471] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1471] chdir("./file0") = 0 [pid 1471] ioctl(4, LOOP_CLR_FD) = 0 [pid 1471] close(4) = 0 [pid 1471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] <... futex resumed>) = 0 [pid 1470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1471] <... futex resumed>) = 1 [pid 1471] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] <... futex resumed>) = 0 [pid 1470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1471] <... futex resumed>) = 1 [pid 1471] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] <... futex resumed>) = 0 [pid 1470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1471] <... futex resumed>) = 1 [pid 1471] creat("./bus", 000) = 6 [pid 1471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] <... futex resumed>) = 0 [pid 1470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1471] <... futex resumed>) = 1 [pid 1471] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1470] <... futex resumed>) = 0 [pid 1470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1471] open("./bus", O_RDONLY) = 7 [pid 1471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] <... futex resumed>) = 0 [pid 1471] <... futex resumed>) = 1 [pid 1470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 102.374511][ T1471] loop0: detected capacity change from 0 to 512 [ 102.382765][ T1471] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 102.396404][ T1471] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 102.406630][ T1471] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1471] sendfile(6, 7, NULL, 140737974943952 [pid 1470] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1470] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1470] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1470] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1473]}, 88) = 1473 [pid 1470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1470] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1470] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1473 attached [pid 1473] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1473] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1473] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1473] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] <... futex resumed>) = 0 [pid 1470] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1470] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1473] <... futex resumed>) = 1 [pid 1473] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1473] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] <... futex resumed>) = 0 [pid 1473] <... futex resumed>) = 1 [pid 1473] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1470] exit_group(0 [pid 1473] <... futex resumed>) = ? [pid 1470] <... exit_group resumed>) = ? [pid 1473] +++ exited with 0 +++ [pid 1471] <... sendfile resumed>) = ? [pid 1471] +++ exited with 0 +++ [pid 1470] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1470, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./270", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./270", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./270/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./270/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./270/binderfs") = 0 umount2("./270/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./270/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./270/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./270/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./270/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./270/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./270") = 0 mkdir("./271", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1474 ./strace-static-x86_64: Process 1474 attached [pid 1474] set_robust_list(0x555556b826a0, 24) = 0 [pid 1474] chdir("./271") = 0 [pid 1474] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1474] setpgid(0, 0) = 0 [pid 1474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1474] write(3, "1000", 4) = 4 [pid 1474] close(3) = 0 [pid 1474] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1474] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1474] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1474] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1474] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1474] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1474] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1474] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1475 attached => {parent_tid=[1475]}, 88) = 1475 [pid 1474] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1474] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1474] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1475] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1475] memfd_create("syzkaller", 0) = 3 [pid 1475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1475] munmap(0x7f9627d89000, 262144) = 0 [pid 1475] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1475] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1475] close(3) = 0 [pid 1475] mkdir("./file0", 0777) = 0 [pid 1475] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1475] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1475] chdir("./file0") = 0 [pid 1475] ioctl(4, LOOP_CLR_FD) = 0 [pid 1475] close(4) = 0 [pid 1475] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1474] <... futex resumed>) = 0 [pid 1474] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1474] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1475] <... futex resumed>) = 1 [pid 1475] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1475] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1474] <... futex resumed>) = 0 [pid 1474] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1474] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1475] <... futex resumed>) = 1 [pid 1475] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1475] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1474] <... futex resumed>) = 0 [pid 1474] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1474] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1475] <... futex resumed>) = 1 [pid 1475] creat("./bus", 000) = 6 [pid 1475] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1474] <... futex resumed>) = 0 [pid 1474] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1474] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1475] <... futex resumed>) = 1 [pid 1475] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1475] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1474] <... futex resumed>) = 0 [pid 1474] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1474] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1475] open("./bus", O_RDONLY) = 7 [pid 1475] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1474] <... futex resumed>) = 0 [pid 1474] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1474] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 102.671304][ T1475] loop0: detected capacity change from 0 to 512 [ 102.680857][ T1475] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 102.696026][ T1475] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 102.705967][ T1475] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1475] sendfile(6, 7, NULL, 140737974943952 [pid 1474] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1474] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1474] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1474] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1474] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1474] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1474] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1474] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1477 attached [pid 1477] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1477] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1477] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1474] <... clone3 resumed> => {parent_tid=[1477]}, 88) = 1477 [pid 1474] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1474] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1477] <... futex resumed>) = 0 [pid 1474] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1477] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1477] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1474] <... futex resumed>) = 0 [pid 1474] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1474] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1477] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1477] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1474] <... futex resumed>) = 0 [pid 1477] <... futex resumed>) = 1 [pid 1477] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1474] exit_group(0 [pid 1477] <... futex resumed>) = ? [pid 1474] <... exit_group resumed>) = ? [pid 1477] +++ exited with 0 +++ [pid 1475] <... sendfile resumed>) = ? [pid 1475] +++ exited with 0 +++ [pid 1474] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1474, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./271", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./271", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./271/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./271/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./271/binderfs") = 0 umount2("./271/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./271/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./271/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./271/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./271/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./271/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./271") = 0 mkdir("./272", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1479 ./strace-static-x86_64: Process 1479 attached [pid 1479] set_robust_list(0x555556b826a0, 24) = 0 [pid 1479] chdir("./272") = 0 [pid 1479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1479] setpgid(0, 0) = 0 [pid 1479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1479] write(3, "1000", 4) = 4 [pid 1479] close(3) = 0 [pid 1479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1479] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1479] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1479] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1479] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1480]}, 88) = 1480 [pid 1479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1480 attached [pid 1480] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1480] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1480] memfd_create("syzkaller", 0) = 3 [pid 1480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1480] munmap(0x7f9627d89000, 262144) = 0 [pid 1480] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1480] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1480] close(3) = 0 [pid 1480] mkdir("./file0", 0777) = 0 [pid 1480] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1480] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1480] chdir("./file0") = 0 [pid 1480] ioctl(4, LOOP_CLR_FD) = 0 [pid 1480] close(4) = 0 [pid 1480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1479] <... futex resumed>) = 0 [pid 1479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1480] <... futex resumed>) = 1 [pid 1480] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1479] <... futex resumed>) = 0 [pid 1479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1480] <... futex resumed>) = 1 [pid 1480] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1479] <... futex resumed>) = 0 [pid 1479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1480] <... futex resumed>) = 1 [pid 1480] creat("./bus", 000) = 6 [pid 1480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1479] <... futex resumed>) = 0 [pid 1479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1480] <... futex resumed>) = 1 [pid 1480] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1479] <... futex resumed>) = 0 [pid 1479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1480] <... futex resumed>) = 1 [pid 1480] open("./bus", O_RDONLY) = 7 [pid 1480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1479] <... futex resumed>) = 0 [pid 1479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1480] <... futex resumed>) = 1 [ 102.999294][ T1480] loop0: detected capacity change from 0 to 512 [ 103.007470][ T1480] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 103.020762][ T1480] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 103.030593][ T1480] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1480] sendfile(6, 7, NULL, 140737974943952 [pid 1479] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1479] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1479] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1482]}, 88) = 1482 [pid 1479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1479] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1479] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1482 attached [pid 1482] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1482] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1482] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1482] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1479] <... futex resumed>) = 0 [pid 1479] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1479] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1482] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1482] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1479] <... futex resumed>) = 0 [pid 1482] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1479] exit_group(0 [pid 1482] <... futex resumed>) = ? [pid 1479] <... exit_group resumed>) = ? [pid 1482] +++ exited with 0 +++ [pid 1480] <... sendfile resumed>) = ? [pid 1480] +++ exited with 0 +++ [pid 1479] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1479, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./272", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./272", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./272/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./272/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./272/binderfs") = 0 umount2("./272/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./272/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./272/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./272/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./272/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./272/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./272") = 0 mkdir("./273", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1483 ./strace-static-x86_64: Process 1483 attached [pid 1483] set_robust_list(0x555556b826a0, 24) = 0 [pid 1483] chdir("./273") = 0 [pid 1483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1483] setpgid(0, 0) = 0 [pid 1483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1483] write(3, "1000", 4) = 4 [pid 1483] close(3) = 0 [pid 1483] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1483] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1483] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1483] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1483] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1484]}, 88) = 1484 [pid 1483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1484 attached [pid 1484] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1484] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1484] memfd_create("syzkaller", 0) = 3 [pid 1484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1484] munmap(0x7f9627d89000, 262144) = 0 [pid 1484] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1484] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1484] close(3) = 0 [pid 1484] mkdir("./file0", 0777) = 0 [pid 1484] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1484] chdir("./file0") = 0 [pid 1484] ioctl(4, LOOP_CLR_FD) = 0 [pid 1484] close(4) = 0 [pid 1484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1483] <... futex resumed>) = 0 [pid 1483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1484] <... futex resumed>) = 1 [pid 1484] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1483] <... futex resumed>) = 0 [pid 1483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1484] <... futex resumed>) = 1 [pid 1484] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1483] <... futex resumed>) = 0 [pid 1483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1484] <... futex resumed>) = 1 [pid 1484] creat("./bus", 000) = 6 [pid 1484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1483] <... futex resumed>) = 0 [pid 1483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1484] <... futex resumed>) = 1 [pid 1484] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1483] <... futex resumed>) = 0 [pid 1483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1484] <... futex resumed>) = 1 [pid 1484] open("./bus", O_RDONLY) = 7 [pid 1484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1483] <... futex resumed>) = 0 [pid 1483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1484] <... futex resumed>) = 1 [ 103.297058][ T1484] loop0: detected capacity change from 0 to 512 [ 103.305403][ T1484] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 103.318554][ T1484] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 103.328504][ T1484] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1484] sendfile(6, 7, NULL, 140737974943952 [pid 1483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1483] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1483] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1486 attached => {parent_tid=[1486]}, 88) = 1486 [pid 1483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1483] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1483] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1486] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1486] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1486] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1486] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1483] <... futex resumed>) = 0 [pid 1483] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1483] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1486] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1486] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1483] <... futex resumed>) = 0 [pid 1486] <... futex resumed>) = 1 [pid 1486] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1483] exit_group(0) = ? [pid 1486] <... futex resumed>) = ? [pid 1484] <... sendfile resumed>) = ? [pid 1484] +++ exited with 0 +++ [pid 1486] +++ exited with 0 +++ [pid 1483] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1483, si_uid=0, si_status=0, si_utime=0, si_stime=19} --- umount2("./273", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./273", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./273/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./273/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./273/binderfs") = 0 umount2("./273/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./273/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./273/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./273/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./273/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./273/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./273") = 0 mkdir("./274", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1487 ./strace-static-x86_64: Process 1487 attached [pid 1487] set_robust_list(0x555556b826a0, 24) = 0 [pid 1487] chdir("./274") = 0 [pid 1487] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1487] setpgid(0, 0) = 0 [pid 1487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1487] write(3, "1000", 4) = 4 [pid 1487] close(3) = 0 [pid 1487] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1487] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1487] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1487] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1487] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1487] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1487] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1488]}, 88) = 1488 [pid 1487] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1487] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1487] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1488 attached [pid 1488] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1488] memfd_create("syzkaller", 0) = 3 [pid 1488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1488] munmap(0x7f9627d89000, 262144) = 0 [pid 1488] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1488] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1488] close(3) = 0 [pid 1488] mkdir("./file0", 0777) = 0 [pid 1488] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1488] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1488] chdir("./file0") = 0 [pid 1488] ioctl(4, LOOP_CLR_FD) = 0 [pid 1488] close(4) = 0 [pid 1488] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1487] <... futex resumed>) = 0 [pid 1487] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1487] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1488] <... futex resumed>) = 1 [pid 1488] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1488] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1487] <... futex resumed>) = 0 [pid 1487] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1487] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1488] <... futex resumed>) = 1 [pid 1488] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1488] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1487] <... futex resumed>) = 0 [pid 1487] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1487] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1488] <... futex resumed>) = 1 [pid 1488] creat("./bus", 000) = 6 [pid 1488] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1487] <... futex resumed>) = 0 [pid 1487] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1487] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1488] <... futex resumed>) = 1 [pid 1488] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1488] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1487] <... futex resumed>) = 0 [pid 1487] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1487] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1488] <... futex resumed>) = 1 [pid 1488] open("./bus", O_RDONLY) = 7 [pid 1488] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1487] <... futex resumed>) = 0 [pid 1487] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1487] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1488] <... futex resumed>) = 1 [ 103.608000][ T1488] loop0: detected capacity change from 0 to 512 [ 103.615835][ T1488] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 103.629036][ T1488] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 103.638654][ T1488] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1488] sendfile(6, 7, NULL, 140737974943952 [pid 1487] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1487] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1487] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1487] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1487] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1487] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1487] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1490]}, 88) = 1490 [pid 1487] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1487] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1487] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1490 attached [pid 1490] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1490] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1490] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1490] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1487] <... futex resumed>) = 0 [pid 1487] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1487] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1490] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1490] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1487] <... futex resumed>) = 0 [pid 1490] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1487] exit_group(0 [pid 1490] <... futex resumed>) = ? [pid 1487] <... exit_group resumed>) = ? [pid 1490] +++ exited with 0 +++ [pid 1488] <... sendfile resumed>) = ? [pid 1488] +++ exited with 0 +++ [pid 1487] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1487, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./274", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./274", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./274/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./274/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./274/binderfs") = 0 umount2("./274/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./274/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./274/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./274/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./274/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./274/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./274") = 0 mkdir("./275", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1492 ./strace-static-x86_64: Process 1492 attached [pid 1492] set_robust_list(0x555556b826a0, 24) = 0 [pid 1492] chdir("./275") = 0 [pid 1492] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1492] setpgid(0, 0) = 0 [pid 1492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1492] write(3, "1000", 4) = 4 [pid 1492] close(3) = 0 [pid 1492] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1492] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1492] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1492] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1492] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1493]}, 88) = 1493 [pid 1492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1493 attached [pid 1493] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1493] memfd_create("syzkaller", 0) = 3 [pid 1493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1493] munmap(0x7f9627d89000, 262144) = 0 [pid 1493] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1493] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1493] close(3) = 0 [pid 1493] mkdir("./file0", 0777) = 0 [ 103.877037][ T1493] loop0: detected capacity change from 0 to 512 [ 103.889349][ T1493] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 103.912654][ T1493] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1493] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1493] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1493] chdir("./file0") = 0 [pid 1493] ioctl(4, LOOP_CLR_FD) = 0 [pid 1493] close(4) = 0 [pid 1493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1492] <... futex resumed>) = 0 [pid 1492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1493] <... futex resumed>) = 1 [pid 1493] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1493] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1492] <... futex resumed>) = 0 [pid 1492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1493] <... futex resumed>) = 0 [pid 1493] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1492] <... futex resumed>) = 0 [pid 1492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1493] <... futex resumed>) = 1 [pid 1493] creat("./bus", 000) = 6 [pid 1493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1492] <... futex resumed>) = 0 [pid 1492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1493] <... futex resumed>) = 1 [pid 1493] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1492] <... futex resumed>) = 0 [pid 1492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1493] <... futex resumed>) = 1 [pid 1493] open("./bus", O_RDONLY) = 7 [pid 1493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1492] <... futex resumed>) = 0 [pid 1492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1493] <... futex resumed>) = 1 [ 103.922304][ T1493] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1493] sendfile(6, 7, NULL, 140737974943952 [pid 1492] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1492] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1492] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1495 attached => {parent_tid=[1495]}, 88) = 1495 [pid 1495] set_robust_list(0x7f9627dc89a0, 24 [pid 1492] rt_sigprocmask(SIG_SETMASK, [], [pid 1495] <... set_robust_list resumed>) = 0 [pid 1495] rt_sigprocmask(SIG_SETMASK, [], [pid 1492] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1492] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1492] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1495] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1495] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1495] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1492] <... futex resumed>) = 0 [pid 1492] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1492] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1495] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1495] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1492] <... futex resumed>) = 0 [pid 1495] <... futex resumed>) = 1 [pid 1495] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1492] exit_group(0) = ? [pid 1495] <... futex resumed>) = ? [pid 1495] +++ exited with 0 +++ [pid 1493] <... sendfile resumed>) = ? [pid 1493] +++ exited with 0 +++ [pid 1492] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1492, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./275", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./275", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./275/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./275/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./275/binderfs") = 0 umount2("./275/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./275/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./275/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./275/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./275/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./275/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./275") = 0 mkdir("./276", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1496 ./strace-static-x86_64: Process 1496 attached [pid 1496] set_robust_list(0x555556b826a0, 24) = 0 [pid 1496] chdir("./276") = 0 [pid 1496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1496] setpgid(0, 0) = 0 [pid 1496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1496] write(3, "1000", 4) = 4 [pid 1496] close(3) = 0 [pid 1496] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1496] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1496] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1496] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1496] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1496] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1496] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1497 attached [pid 1497] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1497] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1496] <... clone3 resumed> => {parent_tid=[1497]}, 88) = 1497 [pid 1496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1496] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1497] <... futex resumed>) = 0 [pid 1496] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1497] memfd_create("syzkaller", 0) = 3 [pid 1497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1497] munmap(0x7f9627d89000, 262144) = 0 [pid 1497] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1497] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1497] close(3) = 0 [pid 1497] mkdir("./file0", 0777) = 0 [pid 1497] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1497] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1497] chdir("./file0") = 0 [pid 1497] ioctl(4, LOOP_CLR_FD) = 0 [pid 1497] close(4) = 0 [pid 1497] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] <... futex resumed>) = 0 [pid 1496] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1496] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1497] <... futex resumed>) = 1 [pid 1497] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1497] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] <... futex resumed>) = 0 [pid 1496] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1496] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1497] <... futex resumed>) = 1 [pid 1497] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1497] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1497] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1496] <... futex resumed>) = 0 [pid 1496] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1496] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1497] <... futex resumed>) = 0 [pid 1497] creat("./bus", 000) = 6 [pid 1497] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] <... futex resumed>) = 0 [pid 1496] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1496] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1497] <... futex resumed>) = 1 [pid 1497] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1497] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] <... futex resumed>) = 0 [pid 1496] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1496] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1497] <... futex resumed>) = 1 [pid 1497] open("./bus", O_RDONLY) = 7 [pid 1497] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] <... futex resumed>) = 0 [pid 1496] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1496] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1497] <... futex resumed>) = 1 [ 104.199254][ T1497] loop0: detected capacity change from 0 to 512 [ 104.207133][ T1497] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 104.221568][ T1497] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 104.231269][ T1497] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1497] sendfile(6, 7, NULL, 140737974943952 [pid 1496] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1496] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1496] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1496] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1496] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1499]}, 88) = 1499 ./strace-static-x86_64: Process 1499 attached [pid 1496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1496] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1496] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1499] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1499] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1499] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] <... futex resumed>) = 0 [pid 1499] <... futex resumed>) = 1 [pid 1496] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1496] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1499] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1499] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1496] <... futex resumed>) = 0 [pid 1499] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1496] exit_group(0 [pid 1499] <... futex resumed>) = ? [pid 1496] <... exit_group resumed>) = ? [pid 1499] +++ exited with 0 +++ [pid 1497] <... sendfile resumed>) = ? [pid 1497] +++ exited with 0 +++ [pid 1496] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1496, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./276", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./276", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./276/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./276/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./276/binderfs") = 0 umount2("./276/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./276/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./276/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./276/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./276/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./276/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./276") = 0 mkdir("./277", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1500 ./strace-static-x86_64: Process 1500 attached [pid 1500] set_robust_list(0x555556b826a0, 24) = 0 [pid 1500] chdir("./277") = 0 [pid 1500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1500] setpgid(0, 0) = 0 [pid 1500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1500] write(3, "1000", 4) = 4 [pid 1500] close(3) = 0 [pid 1500] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1500] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1500] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1500] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1500] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1500] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1501]}, 88) = 1501 ./strace-static-x86_64: Process 1501 attached [pid 1500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1500] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1500] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1501] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1501] memfd_create("syzkaller", 0) = 3 [pid 1501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1501] munmap(0x7f9627d89000, 262144) = 0 [pid 1501] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1501] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1501] close(3) = 0 [pid 1501] mkdir("./file0", 0777) = 0 [pid 1501] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1501] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1501] chdir("./file0") = 0 [pid 1501] ioctl(4, LOOP_CLR_FD) = 0 [pid 1501] close(4) = 0 [pid 1501] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1501] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1500] <... futex resumed>) = 0 [pid 1500] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1500] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1501] <... futex resumed>) = 0 [pid 1501] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1501] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1500] <... futex resumed>) = 0 [pid 1500] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1500] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1501] <... futex resumed>) = 1 [pid 1501] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1501] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1500] <... futex resumed>) = 0 [pid 1500] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1501] <... futex resumed>) = 1 [pid 1500] <... futex resumed>) = 0 [pid 1500] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1501] creat("./bus", 000) = 6 [pid 1501] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1500] <... futex resumed>) = 0 [pid 1500] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1500] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1501] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1501] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1501] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1500] <... futex resumed>) = 0 [pid 1500] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1501] <... futex resumed>) = 0 [pid 1500] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1501] open("./bus", O_RDONLY) = 7 [pid 1501] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1500] <... futex resumed>) = 0 [pid 1500] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1500] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1501] <... futex resumed>) = 1 [ 104.519336][ T1501] loop0: detected capacity change from 0 to 512 [ 104.527318][ T1501] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 104.540485][ T1501] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 104.551099][ T1501] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1501] sendfile(6, 7, NULL, 140737974943952 [pid 1500] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1500] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1500] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1500] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1500] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1500] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1503 attached => {parent_tid=[1503]}, 88) = 1503 [pid 1500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1500] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1500] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1503] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1503] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1503] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1503] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1500] <... futex resumed>) = 0 [pid 1500] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1500] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1503] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1503] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1500] <... futex resumed>) = 0 [pid 1503] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1500] exit_group(0 [pid 1503] <... futex resumed>) = ? [pid 1500] <... exit_group resumed>) = ? [pid 1503] +++ exited with 0 +++ [pid 1501] <... sendfile resumed>) = ? [pid 1501] +++ exited with 0 +++ [pid 1500] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1500, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./277", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./277", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./277/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./277/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./277/binderfs") = 0 umount2("./277/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./277/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./277/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./277/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./277/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./277/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./277") = 0 mkdir("./278", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1504 ./strace-static-x86_64: Process 1504 attached [pid 1504] set_robust_list(0x555556b826a0, 24) = 0 [pid 1504] chdir("./278") = 0 [pid 1504] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1504] setpgid(0, 0) = 0 [pid 1504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1504] write(3, "1000", 4) = 4 [pid 1504] close(3) = 0 [pid 1504] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1504] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1504] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1504] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1504] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1504] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1505]}, 88) = 1505 [pid 1504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1504] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1504] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1505 attached [pid 1505] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1505] memfd_create("syzkaller", 0) = 3 [pid 1505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1505] munmap(0x7f9627d89000, 262144) = 0 [pid 1505] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1505] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1505] close(3) = 0 [pid 1505] mkdir("./file0", 0777) = 0 [pid 1505] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1505] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1505] chdir("./file0") = 0 [pid 1505] ioctl(4, LOOP_CLR_FD) = 0 [pid 1505] close(4) = 0 [pid 1505] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1504] <... futex resumed>) = 0 [pid 1504] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1504] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1505] <... futex resumed>) = 1 [pid 1505] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1505] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1504] <... futex resumed>) = 0 [pid 1504] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1504] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1505] <... futex resumed>) = 1 [pid 1505] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1505] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1504] <... futex resumed>) = 0 [pid 1504] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1504] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1505] <... futex resumed>) = 1 [pid 1505] creat("./bus", 000) = 6 [pid 1505] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1504] <... futex resumed>) = 0 [pid 1504] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1504] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1505] <... futex resumed>) = 1 [pid 1505] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1505] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1504] <... futex resumed>) = 0 [pid 1504] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1504] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1505] <... futex resumed>) = 1 [pid 1505] open("./bus", O_RDONLY) = 7 [pid 1505] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1504] <... futex resumed>) = 0 [pid 1504] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1504] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1505] <... futex resumed>) = 1 [ 104.802762][ T1505] loop0: detected capacity change from 0 to 512 [ 104.811308][ T1505] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 104.824356][ T1505] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 104.834173][ T1505] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1505] sendfile(6, 7, NULL, 140737974943952 [pid 1504] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1504] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1504] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1504] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1508 attached [pid 1508] set_robust_list(0x7f9627dc89a0, 24 [pid 1504] <... clone3 resumed> => {parent_tid=[1508]}, 88) = 1508 [pid 1504] rt_sigprocmask(SIG_SETMASK, [], [pid 1508] <... set_robust_list resumed>) = 0 [pid 1504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1508] rt_sigprocmask(SIG_SETMASK, [], [pid 1504] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1504] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1508] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1508] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1508] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1504] <... futex resumed>) = 0 [pid 1504] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1504] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1508] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1508] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1504] <... futex resumed>) = 0 [pid 1508] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1504] exit_group(0 [pid 1508] <... futex resumed>) = ? [pid 1504] <... exit_group resumed>) = ? [pid 1508] +++ exited with 0 +++ [pid 1505] <... sendfile resumed>) = ? [pid 1505] +++ exited with 0 +++ [pid 1504] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1504, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./278", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./278", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./278/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./278/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./278/binderfs") = 0 umount2("./278/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./278/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./278/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./278/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./278/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./278/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./278") = 0 mkdir("./279", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1509 ./strace-static-x86_64: Process 1509 attached [pid 1509] set_robust_list(0x555556b826a0, 24) = 0 [pid 1509] chdir("./279") = 0 [pid 1509] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1509] setpgid(0, 0) = 0 [pid 1509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1509] write(3, "1000", 4) = 4 [pid 1509] close(3) = 0 [pid 1509] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1509] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1509] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1509] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1509] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1509] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1509] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1510]}, 88) = 1510 ./strace-static-x86_64: Process 1510 attached [pid 1509] rt_sigprocmask(SIG_SETMASK, [], [pid 1510] set_robust_list(0x7f96301a99a0, 24 [pid 1509] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1510] <... set_robust_list resumed>) = 0 [pid 1510] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1510] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1509] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1510] <... futex resumed>) = 0 [pid 1510] memfd_create("syzkaller", 0 [pid 1509] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1510] <... memfd_create resumed>) = 3 [pid 1510] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1510] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1510] munmap(0x7f9627d89000, 262144) = 0 [pid 1510] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1510] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1510] close(3) = 0 [pid 1510] mkdir("./file0", 0777) = 0 [pid 1510] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1510] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1510] chdir("./file0") = 0 [pid 1510] ioctl(4, LOOP_CLR_FD) = 0 [pid 1510] close(4) = 0 [pid 1510] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1509] <... futex resumed>) = 0 [pid 1509] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1509] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1510] <... futex resumed>) = 1 [pid 1510] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1510] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1509] <... futex resumed>) = 0 [pid 1509] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1509] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1510] <... futex resumed>) = 1 [pid 1510] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1510] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1509] <... futex resumed>) = 0 [pid 1509] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1509] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1510] <... futex resumed>) = 1 [pid 1510] creat("./bus", 000) = 6 [pid 1510] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1509] <... futex resumed>) = 0 [pid 1509] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1509] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1510] <... futex resumed>) = 1 [pid 1510] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1510] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1509] <... futex resumed>) = 0 [pid 1509] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1509] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1510] <... futex resumed>) = 1 [pid 1510] open("./bus", O_RDONLY) = 7 [pid 1510] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1509] <... futex resumed>) = 0 [pid 1509] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1509] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1510] <... futex resumed>) = 1 [ 105.130937][ T1510] loop0: detected capacity change from 0 to 512 [ 105.138701][ T1510] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 105.153513][ T1510] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 105.165135][ T1510] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1510] sendfile(6, 7, NULL, 140737974943952 [pid 1509] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1509] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1509] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1509] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1509] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1512]}, 88) = 1512 [pid 1509] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1509] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1509] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1512 attached [pid 1512] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1512] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1512] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1509] <... futex resumed>) = 0 [pid 1509] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1509] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1512] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1512] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1509] <... futex resumed>) = 0 [pid 1512] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1509] exit_group(0 [pid 1512] <... futex resumed>) = ? [pid 1509] <... exit_group resumed>) = ? [pid 1510] <... sendfile resumed>) = ? [pid 1510] +++ exited with 0 +++ [pid 1512] +++ exited with 0 +++ [pid 1509] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1509, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./279", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./279", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./279/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./279/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./279/binderfs") = 0 umount2("./279/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./279/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./279/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./279/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./279/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./279/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./279") = 0 mkdir("./280", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1513 ./strace-static-x86_64: Process 1513 attached [pid 1513] set_robust_list(0x555556b826a0, 24) = 0 [pid 1513] chdir("./280") = 0 [pid 1513] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1513] setpgid(0, 0) = 0 [pid 1513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1513] write(3, "1000", 4) = 4 [pid 1513] close(3) = 0 [pid 1513] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1513] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1513] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1513] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1513] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1513] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1513] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1513] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1514]}, 88) = 1514 [pid 1513] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1513] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1513] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1514 attached [pid 1514] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1514] memfd_create("syzkaller", 0) = 3 [pid 1514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1514] munmap(0x7f9627d89000, 262144) = 0 [pid 1514] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1514] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1514] close(3) = 0 [pid 1514] mkdir("./file0", 0777) = 0 [pid 1514] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1514] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1514] chdir("./file0") = 0 [pid 1514] ioctl(4, LOOP_CLR_FD) = 0 [pid 1514] close(4) = 0 [pid 1514] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1513] <... futex resumed>) = 0 [pid 1513] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1513] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1514] <... futex resumed>) = 1 [pid 1514] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1514] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1513] <... futex resumed>) = 0 [pid 1513] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1513] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1514] <... futex resumed>) = 1 [pid 1514] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1514] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1513] <... futex resumed>) = 0 [pid 1513] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1513] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1514] <... futex resumed>) = 1 [pid 1514] creat("./bus", 000) = 6 [pid 1514] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1513] <... futex resumed>) = 0 [pid 1513] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1513] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1514] <... futex resumed>) = 1 [pid 1514] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1514] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1513] <... futex resumed>) = 0 [pid 1513] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1513] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1514] <... futex resumed>) = 1 [pid 1514] open("./bus", O_RDONLY) = 7 [pid 1514] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1513] <... futex resumed>) = 0 [pid 1513] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1513] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1514] <... futex resumed>) = 1 [ 105.440720][ T1514] loop0: detected capacity change from 0 to 512 [ 105.449278][ T1514] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 105.464293][ T1514] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 105.475108][ T1514] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1514] sendfile(6, 7, NULL, 140737974943952 [pid 1513] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1513] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1513] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1513] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1513] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1513] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1513] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1516 attached [pid 1516] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1516] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1513] <... clone3 resumed> => {parent_tid=[1516]}, 88) = 1516 [pid 1513] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1513] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1513] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1516] <... futex resumed>) = 0 [pid 1516] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1516] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1513] <... futex resumed>) = 0 [pid 1513] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1513] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1516] <... futex resumed>) = 1 [pid 1516] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1516] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1513] <... futex resumed>) = 0 [pid 1516] <... futex resumed>) = 1 [pid 1516] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1513] exit_group(0 [pid 1516] <... futex resumed>) = ? [pid 1513] <... exit_group resumed>) = ? [pid 1516] +++ exited with 0 +++ [pid 1514] <... sendfile resumed>) = ? [pid 1514] +++ exited with 0 +++ [pid 1513] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1513, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./280", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./280", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./280/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./280/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./280/binderfs") = 0 umount2("./280/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./280/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./280/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./280/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./280/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./280/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./280") = 0 mkdir("./281", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1517 ./strace-static-x86_64: Process 1517 attached [pid 1517] set_robust_list(0x555556b826a0, 24) = 0 [pid 1517] chdir("./281") = 0 [pid 1517] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1517] setpgid(0, 0) = 0 [pid 1517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1517] write(3, "1000", 4) = 4 [pid 1517] close(3) = 0 [pid 1517] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1517] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1517] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1517] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1517] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1517] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1517] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1518]}, 88) = 1518 [pid 1517] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1517] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1517] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1518 attached [pid 1518] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1518] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1518] memfd_create("syzkaller", 0) = 3 [pid 1518] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1518] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1518] munmap(0x7f9627d89000, 262144) = 0 [pid 1518] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1518] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1518] close(3) = 0 [pid 1518] mkdir("./file0", 0777) = 0 [pid 1518] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1518] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1518] chdir("./file0") = 0 [pid 1518] ioctl(4, LOOP_CLR_FD) = 0 [pid 1518] close(4) = 0 [pid 1518] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1518] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1517] <... futex resumed>) = 0 [pid 1517] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1517] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1518] <... futex resumed>) = 0 [pid 1518] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1518] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1517] <... futex resumed>) = 0 [pid 1517] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1517] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1518] <... futex resumed>) = 1 [pid 1518] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1518] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1517] <... futex resumed>) = 0 [pid 1517] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1517] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1518] <... futex resumed>) = 1 [pid 1518] creat("./bus", 000) = 6 [pid 1518] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1517] <... futex resumed>) = 0 [pid 1517] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1517] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1518] <... futex resumed>) = 1 [pid 1518] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1518] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1517] <... futex resumed>) = 0 [pid 1518] open("./bus", O_RDONLY [pid 1517] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1518] <... open resumed>) = 7 [pid 1517] <... futex resumed>) = 0 [pid 1518] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1517] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1518] <... futex resumed>) = 0 [pid 1518] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1517] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1518] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1517] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1518] sendfile(6, 7, NULL, 140737974943952 [pid 1517] <... futex resumed>) = 0 [ 105.723807][ T1518] loop0: detected capacity change from 0 to 512 [ 105.731610][ T1518] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 105.744852][ T1518] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 105.755921][ T1518] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1517] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1517] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1517] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1517] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1517] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1521]}, 88) = 1521 ./strace-static-x86_64: Process 1521 attached [pid 1517] rt_sigprocmask(SIG_SETMASK, [], [pid 1521] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1521] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1521] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1517] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1517] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1521] <... futex resumed>) = 0 [pid 1521] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1517] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1521] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1521] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1517] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1517] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1521] <... futex resumed>) = 0 [pid 1517] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1521] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1521] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1517] <... futex resumed>) = 0 [pid 1521] <... futex resumed>) = 1 [pid 1521] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1517] exit_group(0 [pid 1521] <... futex resumed>) = ? [pid 1517] <... exit_group resumed>) = ? [pid 1521] +++ exited with 0 +++ [pid 1518] <... sendfile resumed>) = ? [pid 1518] +++ exited with 0 +++ [pid 1517] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1517, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./281", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./281", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./281/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./281/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./281/binderfs") = 0 umount2("./281/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./281/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./281/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./281/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./281/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./281/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./281") = 0 mkdir("./282", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1522 ./strace-static-x86_64: Process 1522 attached [pid 1522] set_robust_list(0x555556b826a0, 24) = 0 [pid 1522] chdir("./282") = 0 [pid 1522] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1522] setpgid(0, 0) = 0 [pid 1522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1522] write(3, "1000", 4) = 4 [pid 1522] close(3) = 0 [pid 1522] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1522] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1522] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1522] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1522] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1522] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1523]}, 88) = 1523 [pid 1522] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1522] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1522] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1523 attached [pid 1523] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1523] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1523] memfd_create("syzkaller", 0) = 3 [pid 1523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1523] munmap(0x7f9627d89000, 262144) = 0 [pid 1523] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1523] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1523] close(3) = 0 [pid 1523] mkdir("./file0", 0777) = 0 [pid 1523] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1523] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1523] chdir("./file0") = 0 [pid 1523] ioctl(4, LOOP_CLR_FD) = 0 [pid 1523] close(4) = 0 [pid 1523] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1523] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1522] <... futex resumed>) = 0 [pid 1522] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1522] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1523] <... futex resumed>) = 0 [pid 1523] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1523] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1522] <... futex resumed>) = 0 [pid 1522] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1522] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1523] <... futex resumed>) = 1 [pid 1523] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1523] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1522] <... futex resumed>) = 0 [pid 1522] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1522] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1523] <... futex resumed>) = 1 [pid 1523] creat("./bus", 000) = 6 [pid 1523] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1522] <... futex resumed>) = 0 [pid 1522] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1522] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1523] <... futex resumed>) = 1 [pid 1523] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1523] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1522] <... futex resumed>) = 0 [pid 1522] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1522] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1523] open("./bus", O_RDONLY) = 7 [pid 1523] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1522] <... futex resumed>) = 0 [pid 1522] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1522] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 106.052949][ T1523] loop0: detected capacity change from 0 to 512 [ 106.061522][ T1523] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 106.074662][ T1523] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 106.085831][ T1523] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1523] sendfile(6, 7, NULL, 140737974943952 [pid 1522] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1522] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1522] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1522] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1522] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1525]}, 88) = 1525 [pid 1522] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 1525 attached [pid 1525] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1525] rt_sigprocmask(SIG_SETMASK, [], [pid 1522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1522] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1522] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1525] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1525] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1522] <... futex resumed>) = 0 [pid 1522] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1522] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1525] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1525] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1522] <... futex resumed>) = 0 [pid 1525] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1522] exit_group(0) = ? [pid 1525] <... futex resumed>) = ? [pid 1525] +++ exited with 0 +++ [pid 1523] <... sendfile resumed>) = ? [pid 1523] +++ exited with 0 +++ [pid 1522] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1522, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./282", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./282", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./282/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./282/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./282/binderfs") = 0 umount2("./282/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./282/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./282/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./282/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./282/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./282/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./282") = 0 mkdir("./283", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1526 ./strace-static-x86_64: Process 1526 attached [pid 1526] set_robust_list(0x555556b826a0, 24) = 0 [pid 1526] chdir("./283") = 0 [pid 1526] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1526] setpgid(0, 0) = 0 [pid 1526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1526] write(3, "1000", 4) = 4 [pid 1526] close(3) = 0 [pid 1526] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1526] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1526] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1526] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1526] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1526] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1527 attached => {parent_tid=[1527]}, 88) = 1527 [pid 1527] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1527] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1527] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1526] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1527] <... futex resumed>) = 0 [pid 1526] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1527] memfd_create("syzkaller", 0) = 3 [pid 1527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1527] munmap(0x7f9627d89000, 262144) = 0 [pid 1527] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1527] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1527] close(3) = 0 [pid 1527] mkdir("./file0", 0777) = 0 [pid 1527] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1527] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1527] chdir("./file0") = 0 [pid 1527] ioctl(4, LOOP_CLR_FD) = 0 [pid 1527] close(4) = 0 [pid 1527] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1527] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1526] <... futex resumed>) = 0 [pid 1526] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1526] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1527] <... futex resumed>) = 0 [pid 1527] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1527] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1526] <... futex resumed>) = 0 [pid 1526] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1526] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1527] <... futex resumed>) = 1 [pid 1527] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1527] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1526] <... futex resumed>) = 0 [pid 1526] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1526] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1527] <... futex resumed>) = 1 [pid 1527] creat("./bus", 000) = 6 [pid 1527] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1526] <... futex resumed>) = 0 [pid 1526] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1526] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1527] <... futex resumed>) = 1 [pid 1527] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1527] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1526] <... futex resumed>) = 0 [pid 1526] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1526] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1527] <... futex resumed>) = 1 [pid 1527] open("./bus", O_RDONLY) = 7 [pid 1527] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1526] <... futex resumed>) = 0 [pid 1526] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1526] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1527] <... futex resumed>) = 1 [ 106.376174][ T1527] loop0: detected capacity change from 0 to 512 [ 106.386008][ T1527] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 106.400111][ T1527] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 106.411750][ T1527] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1527] sendfile(6, 7, NULL, 140737974943952 [pid 1526] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1526] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1526] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1526] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1529 attached => {parent_tid=[1529]}, 88) = 1529 [pid 1526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1526] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1526] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1529] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1529] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1529] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1529] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1526] <... futex resumed>) = 0 [pid 1529] <... futex resumed>) = 1 [pid 1526] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1526] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1529] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1529] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1526] <... futex resumed>) = 0 [pid 1529] <... futex resumed>) = 1 [pid 1529] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1526] exit_group(0 [pid 1529] <... futex resumed>) = ? [pid 1527] <... sendfile resumed>) = ? [pid 1526] <... exit_group resumed>) = ? [pid 1529] +++ exited with 0 +++ [pid 1527] +++ exited with 0 +++ [pid 1526] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1526, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./283", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./283", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./283/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./283/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./283/binderfs") = 0 umount2("./283/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./283/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./283/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./283/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./283/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./283/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./283") = 0 mkdir("./284", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1530 ./strace-static-x86_64: Process 1530 attached [pid 1530] set_robust_list(0x555556b826a0, 24) = 0 [pid 1530] chdir("./284") = 0 [pid 1530] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1530] setpgid(0, 0) = 0 [pid 1530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1530] write(3, "1000", 4) = 4 [pid 1530] close(3) = 0 [pid 1530] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1530] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1530] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1530] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1530] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1530] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1530] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1531 attached [pid 1531] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1531] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1531] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1530] <... clone3 resumed> => {parent_tid=[1531]}, 88) = 1531 [pid 1530] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1530] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1531] <... futex resumed>) = 0 [pid 1531] memfd_create("syzkaller", 0) = 3 [pid 1531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1530] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1531] <... mmap resumed>) = 0x7f9627d89000 [pid 1531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1531] munmap(0x7f9627d89000, 262144) = 0 [pid 1531] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1531] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1531] close(3) = 0 [pid 1531] mkdir("./file0", 0777) = 0 [pid 1531] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1531] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1531] chdir("./file0") = 0 [pid 1531] ioctl(4, LOOP_CLR_FD) = 0 [pid 1531] close(4) = 0 [pid 1531] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] <... futex resumed>) = 0 [pid 1530] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1530] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1531] <... futex resumed>) = 1 [pid 1531] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1531] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1531] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1530] <... futex resumed>) = 0 [pid 1530] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1530] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1531] <... futex resumed>) = 0 [pid 1531] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1531] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] <... futex resumed>) = 0 [pid 1530] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1530] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1531] <... futex resumed>) = 1 [pid 1531] creat("./bus", 000) = 6 [pid 1531] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] <... futex resumed>) = 0 [pid 1530] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1530] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1531] <... futex resumed>) = 1 [pid 1531] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1531] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] <... futex resumed>) = 0 [pid 1530] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1530] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1531] <... futex resumed>) = 1 [pid 1531] open("./bus", O_RDONLY) = 7 [pid 1531] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] <... futex resumed>) = 0 [pid 1530] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1530] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1531] <... futex resumed>) = 1 [ 106.699450][ T1531] loop0: detected capacity change from 0 to 512 [ 106.708002][ T1531] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 106.721547][ T1531] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 106.731210][ T1531] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1531] sendfile(6, 7, NULL, 140737974943952 [pid 1530] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1530] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1530] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1530] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1530] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1530] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1533]}, 88) = 1533 [pid 1530] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1530] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1530] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1533 attached [pid 1533] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1533] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1533] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1533] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1530] <... futex resumed>) = 0 [pid 1530] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1530] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1533] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1533] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1530] <... futex resumed>) = 0 [pid 1533] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1530] exit_group(0 [pid 1533] <... futex resumed>) = 230 [pid 1530] <... exit_group resumed>) = ? [pid 1533] +++ exited with 0 +++ [pid 1531] <... sendfile resumed>) = ? [pid 1531] +++ exited with 0 +++ [pid 1530] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1530, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./284", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./284", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./284/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./284/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./284/binderfs") = 0 umount2("./284/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./284/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./284/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./284/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./284/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./284/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./284") = 0 mkdir("./285", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1535 ./strace-static-x86_64: Process 1535 attached [pid 1535] set_robust_list(0x555556b826a0, 24) = 0 [pid 1535] chdir("./285") = 0 [pid 1535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1535] setpgid(0, 0) = 0 [pid 1535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1535] write(3, "1000", 4) = 4 [pid 1535] close(3) = 0 [pid 1535] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1535] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1535] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1535] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1535] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1535] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1535] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1535] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1536 attached => {parent_tid=[1536]}, 88) = 1536 [pid 1535] rt_sigprocmask(SIG_SETMASK, [], [pid 1536] set_robust_list(0x7f96301a99a0, 24 [pid 1535] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1535] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1535] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1536] <... set_robust_list resumed>) = 0 [pid 1536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1536] memfd_create("syzkaller", 0) = 3 [pid 1536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1536] munmap(0x7f9627d89000, 262144) = 0 [pid 1536] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1536] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1536] close(3) = 0 [pid 1536] mkdir("./file0", 0777) = 0 [pid 1536] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1536] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1536] chdir("./file0") = 0 [pid 1536] ioctl(4, LOOP_CLR_FD) = 0 [pid 1536] close(4) = 0 [pid 1536] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1535] <... futex resumed>) = 0 [pid 1535] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1535] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1536] <... futex resumed>) = 1 [pid 1536] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1536] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1535] <... futex resumed>) = 0 [pid 1535] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1535] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1536] <... futex resumed>) = 1 [pid 1536] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1536] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1535] <... futex resumed>) = 0 [pid 1535] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1535] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1536] <... futex resumed>) = 1 [pid 1536] creat("./bus", 000) = 6 [pid 1536] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1535] <... futex resumed>) = 0 [pid 1535] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1535] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1536] <... futex resumed>) = 1 [pid 1536] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1536] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1535] <... futex resumed>) = 0 [pid 1535] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1535] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1536] <... futex resumed>) = 1 [pid 1536] open("./bus", O_RDONLY) = 7 [pid 1536] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1535] <... futex resumed>) = 0 [pid 1535] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1535] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1536] <... futex resumed>) = 1 [ 106.994580][ T1536] loop0: detected capacity change from 0 to 512 [ 107.002941][ T1536] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 107.016577][ T1536] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 107.026179][ T1536] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1536] sendfile(6, 7, NULL, 140737974943952 [pid 1535] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1535] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1535] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1535] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1535] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1535] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1535] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1535] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1538 attached => {parent_tid=[1538]}, 88) = 1538 [pid 1535] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1535] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1538] set_robust_list(0x7f9627dc89a0, 24 [pid 1535] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1538] <... set_robust_list resumed>) = 0 [pid 1538] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1538] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1538] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1535] <... futex resumed>) = 0 [pid 1535] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1535] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1538] <... futex resumed>) = 1 [pid 1538] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1538] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1535] <... futex resumed>) = 0 [pid 1538] <... futex resumed>) = 1 [pid 1538] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1535] exit_group(0 [pid 1538] <... futex resumed>) = ? [pid 1535] <... exit_group resumed>) = ? [pid 1538] +++ exited with 0 +++ [pid 1536] <... sendfile resumed>) = ? [pid 1536] +++ exited with 0 +++ [pid 1535] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1535, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./285", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./285", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./285/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./285/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./285/binderfs") = 0 umount2("./285/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./285/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./285/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./285/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./285/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./285/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./285") = 0 mkdir("./286", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1539 ./strace-static-x86_64: Process 1539 attached [pid 1539] set_robust_list(0x555556b826a0, 24) = 0 [pid 1539] chdir("./286") = 0 [pid 1539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1539] setpgid(0, 0) = 0 [pid 1539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1539] write(3, "1000", 4) = 4 [pid 1539] close(3) = 0 [pid 1539] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1539] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1539] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1539] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1539] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1539] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1539] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1540]}, 88) = 1540 [pid 1539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1539] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1539] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1540 attached [pid 1540] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1540] memfd_create("syzkaller", 0) = 3 [pid 1540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1540] munmap(0x7f9627d89000, 262144) = 0 [pid 1540] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1540] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1540] close(3) = 0 [pid 1540] mkdir("./file0", 0777) = 0 [ 107.334506][ T1540] loop0: detected capacity change from 0 to 512 [ 107.343435][ T1540] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 107.363242][ T1540] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1540] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1540] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1540] chdir("./file0") = 0 [pid 1540] ioctl(4, LOOP_CLR_FD) = 0 [pid 1540] close(4) = 0 [pid 1540] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1539] <... futex resumed>) = 0 [pid 1539] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1539] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1540] <... futex resumed>) = 1 [pid 1540] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1540] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1539] <... futex resumed>) = 0 [pid 1539] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1539] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1540] <... futex resumed>) = 1 [pid 1540] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1540] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1539] <... futex resumed>) = 0 [pid 1539] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1539] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1540] <... futex resumed>) = 1 [pid 1540] creat("./bus", 000) = 6 [pid 1540] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1539] <... futex resumed>) = 0 [pid 1539] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1539] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1540] <... futex resumed>) = 1 [pid 1540] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1540] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1539] <... futex resumed>) = 0 [pid 1539] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1539] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1540] <... futex resumed>) = 1 [pid 1540] open("./bus", O_RDONLY) = 7 [pid 1540] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1539] <... futex resumed>) = 0 [pid 1539] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1539] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1540] <... futex resumed>) = 1 [ 107.377005][ T1540] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1540] sendfile(6, 7, NULL, 140737974943952 [pid 1539] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1539] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1539] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1539] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1539] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1542 attached => {parent_tid=[1542]}, 88) = 1542 [pid 1542] set_robust_list(0x7f9627dc89a0, 24 [pid 1539] rt_sigprocmask(SIG_SETMASK, [], [pid 1542] <... set_robust_list resumed>) = 0 [pid 1539] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1542] rt_sigprocmask(SIG_SETMASK, [], [pid 1539] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1542] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1542] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1539] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1542] <... mmap resumed>) = 0x20000000 [pid 1542] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1539] <... futex resumed>) = 0 [pid 1539] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1539] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1542] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1542] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1539] <... futex resumed>) = 0 [pid 1542] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1539] exit_group(0 [pid 1542] <... futex resumed>) = ? [pid 1539] <... exit_group resumed>) = ? [pid 1542] +++ exited with 0 +++ [pid 1540] <... sendfile resumed>) = ? [pid 1540] +++ exited with 0 +++ [pid 1539] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1539, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./286", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./286", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./286/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./286/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./286/binderfs") = 0 umount2("./286/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./286/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./286/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./286/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./286/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./286/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./286") = 0 mkdir("./287", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1543 ./strace-static-x86_64: Process 1543 attached [pid 1543] set_robust_list(0x555556b826a0, 24) = 0 [pid 1543] chdir("./287") = 0 [pid 1543] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1543] setpgid(0, 0) = 0 [pid 1543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1543] write(3, "1000", 4) = 4 [pid 1543] close(3) = 0 [pid 1543] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1543] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1543] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1543] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1543] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1543] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1543] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1544]}, 88) = 1544 [pid 1543] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1543] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1543] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1544 attached [pid 1544] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1544] memfd_create("syzkaller", 0) = 3 [pid 1544] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1544] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1544] munmap(0x7f9627d89000, 262144) = 0 [pid 1544] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1544] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1544] close(3) = 0 [pid 1544] mkdir("./file0", 0777) = 0 [pid 1544] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1544] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1544] chdir("./file0") = 0 [pid 1544] ioctl(4, LOOP_CLR_FD) = 0 [pid 1544] close(4) = 0 [pid 1544] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1543] <... futex resumed>) = 0 [pid 1543] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1543] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1544] <... futex resumed>) = 1 [pid 1544] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1544] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1543] <... futex resumed>) = 0 [pid 1543] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1543] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1544] <... futex resumed>) = 1 [pid 1544] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1544] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1543] <... futex resumed>) = 0 [pid 1543] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1543] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1544] <... futex resumed>) = 1 [pid 1544] creat("./bus", 000) = 6 [pid 1544] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1543] <... futex resumed>) = 0 [pid 1543] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1543] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1544] <... futex resumed>) = 1 [pid 1544] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1544] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1543] <... futex resumed>) = 0 [pid 1543] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1543] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1544] <... futex resumed>) = 1 [pid 1544] open("./bus", O_RDONLY) = 7 [pid 1544] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1543] <... futex resumed>) = 0 [pid 1544] sendfile(6, 7, NULL, 140737974943952 [pid 1543] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 107.620978][ T1544] loop0: detected capacity change from 0 to 512 [ 107.629047][ T1544] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 107.642132][ T1544] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 107.651938][ T1544] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1543] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1543] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1543] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1543] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1543] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1546 attached => {parent_tid=[1546]}, 88) = 1546 [pid 1543] rt_sigprocmask(SIG_SETMASK, [], [pid 1546] set_robust_list(0x7f9627dc89a0, 24 [pid 1543] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1546] <... set_robust_list resumed>) = 0 [pid 1543] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1546] rt_sigprocmask(SIG_SETMASK, [], [pid 1543] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1546] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1546] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1543] <... futex resumed>) = 0 [pid 1546] <... futex resumed>) = 1 [pid 1543] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1546] sendmsg(-1, 0x20000000, 0 [pid 1543] <... futex resumed>) = 0 [pid 1546] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1543] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1546] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1543] <... futex resumed>) = 0 [pid 1546] <... futex resumed>) = 1 [pid 1546] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1543] exit_group(0 [pid 1546] <... futex resumed>) = ? [pid 1543] <... exit_group resumed>) = ? [pid 1546] +++ exited with 0 +++ [pid 1544] <... sendfile resumed>) = ? [pid 1544] +++ exited with 0 +++ [pid 1543] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1543, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./287", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./287", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./287/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./287/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./287/binderfs") = 0 umount2("./287/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./287/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./287/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./287/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./287/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./287/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./287") = 0 mkdir("./288", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1548 ./strace-static-x86_64: Process 1548 attached [pid 1548] set_robust_list(0x555556b826a0, 24) = 0 [pid 1548] chdir("./288") = 0 [pid 1548] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1548] setpgid(0, 0) = 0 [pid 1548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1548] write(3, "1000", 4) = 4 [pid 1548] close(3) = 0 [pid 1548] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1548] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1548] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1548] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1548] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1548] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1548] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1549]}, 88) = 1549 ./strace-static-x86_64: Process 1549 attached [pid 1548] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1548] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1548] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1549] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1549] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1549] memfd_create("syzkaller", 0) = 3 [pid 1549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1549] munmap(0x7f9627d89000, 262144) = 0 [pid 1549] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1549] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1549] close(3) = 0 [pid 1549] mkdir("./file0", 0777) = 0 [pid 1549] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1549] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1549] chdir("./file0") = 0 [pid 1549] ioctl(4, LOOP_CLR_FD) = 0 [pid 1549] close(4) = 0 [pid 1549] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1548] <... futex resumed>) = 0 [pid 1548] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1548] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1549] <... futex resumed>) = 1 [pid 1549] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1549] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1548] <... futex resumed>) = 0 [pid 1548] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1548] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1549] <... futex resumed>) = 1 [pid 1549] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1549] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1548] <... futex resumed>) = 0 [pid 1548] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1548] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1549] <... futex resumed>) = 1 [pid 1549] creat("./bus", 000) = 6 [pid 1549] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1548] <... futex resumed>) = 0 [pid 1548] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1548] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1549] <... futex resumed>) = 1 [pid 1549] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1549] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1548] <... futex resumed>) = 0 [pid 1548] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1548] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1549] open("./bus", O_RDONLY) = 7 [pid 1549] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1548] <... futex resumed>) = 0 [pid 1548] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1548] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 107.935516][ T1549] loop0: detected capacity change from 0 to 512 [ 107.945487][ T1549] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 107.959786][ T1549] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 107.970271][ T1549] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1549] sendfile(6, 7, NULL, 140737974943952 [pid 1548] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1548] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1548] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1548] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1548] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1548] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1551]}, 88) = 1551 ./strace-static-x86_64: Process 1551 attached [pid 1548] rt_sigprocmask(SIG_SETMASK, [], [pid 1551] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1551] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1551] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1548] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1548] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1551] <... futex resumed>) = 0 [pid 1551] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1548] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1551] <... mmap resumed>) = 0x20000000 [pid 1551] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1548] <... futex resumed>) = 0 [pid 1548] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1548] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1551] <... futex resumed>) = 1 [pid 1551] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1551] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1548] <... futex resumed>) = 0 [pid 1551] <... futex resumed>) = 1 [pid 1551] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1548] exit_group(0) = ? [pid 1551] <... futex resumed>) = ? [pid 1549] <... sendfile resumed>) = ? [pid 1551] +++ exited with 0 +++ [pid 1549] +++ exited with 0 +++ [pid 1548] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1548, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./288", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./288", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./288/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./288/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./288/binderfs") = 0 umount2("./288/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./288/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./288/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./288/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./288/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./288/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./288") = 0 mkdir("./289", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1552 ./strace-static-x86_64: Process 1552 attached [pid 1552] set_robust_list(0x555556b826a0, 24) = 0 [pid 1552] chdir("./289") = 0 [pid 1552] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1552] setpgid(0, 0) = 0 [pid 1552] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1552] write(3, "1000", 4) = 4 [pid 1552] close(3) = 0 [pid 1552] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1552] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1552] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1552] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1552] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1552] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1552] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1552] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1553]}, 88) = 1553 [pid 1552] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1552] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1552] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1553 attached [pid 1553] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1553] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1553] memfd_create("syzkaller", 0) = 3 [pid 1553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1553] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1553] munmap(0x7f9627d89000, 262144) = 0 [pid 1553] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1553] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1553] close(3) = 0 [pid 1553] mkdir("./file0", 0777) = 0 [pid 1553] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1553] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1553] chdir("./file0") = 0 [pid 1553] ioctl(4, LOOP_CLR_FD) = 0 [pid 1553] close(4) = 0 [pid 1553] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1552] <... futex resumed>) = 0 [pid 1552] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1552] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1553] <... futex resumed>) = 1 [pid 1553] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1553] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1552] <... futex resumed>) = 0 [pid 1552] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1552] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1553] <... futex resumed>) = 1 [pid 1553] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1553] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1552] <... futex resumed>) = 0 [pid 1552] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1552] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1553] <... futex resumed>) = 1 [pid 1553] creat("./bus", 000) = 6 [pid 1553] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1552] <... futex resumed>) = 0 [pid 1552] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1552] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1553] <... futex resumed>) = 1 [pid 1553] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1553] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1552] <... futex resumed>) = 0 [pid 1552] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1552] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1553] <... futex resumed>) = 1 [pid 1553] open("./bus", O_RDONLY) = 7 [pid 1553] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1552] <... futex resumed>) = 0 [pid 1552] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1552] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1553] <... futex resumed>) = 1 [ 108.207735][ T1553] loop0: detected capacity change from 0 to 512 [ 108.215700][ T1553] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 108.228816][ T1553] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 108.238558][ T1553] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1553] sendfile(6, 7, NULL, 140737974943952 [pid 1552] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1552] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1552] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1552] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1552] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1552] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1555 attached => {parent_tid=[1555]}, 88) = 1555 [pid 1555] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1555] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1555] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1552] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1552] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1555] <... futex resumed>) = 0 [pid 1552] <... futex resumed>) = 1 [pid 1555] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1552] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1555] <... mmap resumed>) = 0x20000000 [pid 1555] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1552] <... futex resumed>) = 0 [pid 1552] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1552] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1555] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1555] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1552] <... futex resumed>) = 0 [pid 1555] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1552] exit_group(0 [pid 1555] <... futex resumed>) = ? [pid 1552] <... exit_group resumed>) = ? [pid 1555] +++ exited with 0 +++ [pid 1553] <... sendfile resumed>) = ? [pid 1553] +++ exited with 0 +++ [pid 1552] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1552, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./289", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./289", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./289/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./289/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./289/binderfs") = 0 umount2("./289/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./289/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./289/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./289/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./289/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./289/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./289") = 0 mkdir("./290", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1556 ./strace-static-x86_64: Process 1556 attached [pid 1556] set_robust_list(0x555556b826a0, 24) = 0 [pid 1556] chdir("./290") = 0 [pid 1556] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1556] setpgid(0, 0) = 0 [pid 1556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1556] write(3, "1000", 4) = 4 [pid 1556] close(3) = 0 [pid 1556] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1556] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1556] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1556] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1556] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1556] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1556] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1556] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1557]}, 88) = 1557 [pid 1556] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1556] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1556] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1557 attached [pid 1557] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1557] memfd_create("syzkaller", 0) = 3 [pid 1557] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1557] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1557] munmap(0x7f9627d89000, 262144) = 0 [pid 1557] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1557] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1557] close(3) = 0 [pid 1557] mkdir("./file0", 0777) = 0 [pid 1557] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1557] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1557] chdir("./file0") = 0 [pid 1557] ioctl(4, LOOP_CLR_FD) = 0 [pid 1557] close(4) = 0 [pid 1557] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1556] <... futex resumed>) = 0 [pid 1556] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1556] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1557] <... futex resumed>) = 1 [pid 1557] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1557] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1556] <... futex resumed>) = 0 [pid 1556] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1556] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1557] <... futex resumed>) = 1 [pid 1557] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1557] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1556] <... futex resumed>) = 0 [pid 1556] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1556] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1557] <... futex resumed>) = 1 [pid 1557] creat("./bus", 000) = 6 [pid 1557] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1556] <... futex resumed>) = 0 [pid 1556] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1556] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1557] <... futex resumed>) = 1 [pid 1557] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1557] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1556] <... futex resumed>) = 0 [pid 1556] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1556] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1557] <... futex resumed>) = 1 [pid 1557] open("./bus", O_RDONLY) = 7 [pid 1557] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1556] <... futex resumed>) = 0 [pid 1556] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1556] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1557] <... futex resumed>) = 1 [ 108.485702][ T1557] loop0: detected capacity change from 0 to 512 [ 108.494155][ T1557] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 108.507148][ T1557] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 108.517298][ T1557] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1557] sendfile(6, 7, NULL, 140737974943952 [pid 1556] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1556] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1556] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1556] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1556] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1556] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1560 attached => {parent_tid=[1560]}, 88) = 1560 [pid 1556] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1560] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1560] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1556] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1560] <... futex resumed>) = 0 [pid 1556] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1560] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1560] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1556] <... futex resumed>) = 0 [pid 1556] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1560] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1556] <... futex resumed>) = 0 [pid 1560] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1556] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1560] <... futex resumed>) = 0 [pid 1556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1560] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1556] exit_group(0 [pid 1560] <... futex resumed>) = ? [pid 1556] <... exit_group resumed>) = ? [pid 1560] +++ exited with 0 +++ [pid 1557] <... sendfile resumed>) = ? [pid 1557] +++ exited with 0 +++ [pid 1556] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1556, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./290", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./290", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./290/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./290/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./290/binderfs") = 0 umount2("./290/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./290/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./290/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./290/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./290/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./290/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./290") = 0 mkdir("./291", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1561 ./strace-static-x86_64: Process 1561 attached [pid 1561] set_robust_list(0x555556b826a0, 24) = 0 [pid 1561] chdir("./291") = 0 [pid 1561] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1561] setpgid(0, 0) = 0 [pid 1561] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1561] write(3, "1000", 4) = 4 [pid 1561] close(3) = 0 [pid 1561] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1561] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1561] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1561] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1561] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1561] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1561] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1562 attached [pid 1562] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1561] <... clone3 resumed> => {parent_tid=[1562]}, 88) = 1562 [pid 1561] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1561] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1561] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1562] memfd_create("syzkaller", 0) = 3 [pid 1562] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1562] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1562] munmap(0x7f9627d89000, 262144) = 0 [pid 1562] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1562] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1562] close(3) = 0 [pid 1562] mkdir("./file0", 0777) = 0 [pid 1562] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1562] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1562] chdir("./file0") = 0 [pid 1562] ioctl(4, LOOP_CLR_FD) = 0 [pid 1562] close(4) = 0 [pid 1562] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1561] <... futex resumed>) = 0 [pid 1561] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1561] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1562] <... futex resumed>) = 1 [pid 1562] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1562] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1561] <... futex resumed>) = 0 [pid 1561] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1562] <... futex resumed>) = 1 [pid 1561] <... futex resumed>) = 0 [pid 1562] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1561] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1562] <... open resumed>) = 5 [pid 1562] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1561] <... futex resumed>) = 0 [pid 1561] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1562] <... futex resumed>) = 1 [pid 1561] <... futex resumed>) = 0 [pid 1561] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1562] creat("./bus", 000) = 6 [pid 1562] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1561] <... futex resumed>) = 0 [pid 1561] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1561] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1562] <... futex resumed>) = 1 [pid 1562] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1562] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1561] <... futex resumed>) = 0 [pid 1561] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1561] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1562] <... futex resumed>) = 1 [pid 1562] open("./bus", O_RDONLY) = 7 [pid 1562] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1561] <... futex resumed>) = 0 [pid 1561] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1561] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1562] <... futex resumed>) = 1 [ 108.767119][ T1562] loop0: detected capacity change from 0 to 512 [ 108.776589][ T1562] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 108.789749][ T1562] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 108.799893][ T1562] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1562] sendfile(6, 7, NULL, 140737974943952 [pid 1561] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1561] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1561] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1561] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1561] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1561] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1561] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1565 attached [pid 1565] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1565] rt_sigprocmask(SIG_SETMASK, [], [pid 1561] <... clone3 resumed> => {parent_tid=[1565]}, 88) = 1565 [pid 1565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1565] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1561] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1561] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1565] <... futex resumed>) = 0 [pid 1561] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1565] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1565] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1565] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1561] <... futex resumed>) = 0 [pid 1561] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1565] <... futex resumed>) = 0 [pid 1561] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1565] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1565] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1565] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1561] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1561] exit_group(0 [pid 1565] <... futex resumed>) = ? [pid 1561] <... exit_group resumed>) = ? [pid 1565] +++ exited with 0 +++ [pid 1562] <... sendfile resumed>) = ? [pid 1562] +++ exited with 0 +++ [pid 1561] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1561, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./291", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./291", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./291/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./291/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./291/binderfs") = 0 umount2("./291/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./291/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./291/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./291/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./291/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./291/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./291") = 0 mkdir("./292", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1566 ./strace-static-x86_64: Process 1566 attached [pid 1566] set_robust_list(0x555556b826a0, 24) = 0 [pid 1566] chdir("./292") = 0 [pid 1566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1566] setpgid(0, 0) = 0 [pid 1566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1566] write(3, "1000", 4) = 4 [pid 1566] close(3) = 0 [pid 1566] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1566] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1566] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1566] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1566] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1567]}, 88) = 1567 [pid 1566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1567 attached [pid 1567] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1567] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1567] memfd_create("syzkaller", 0) = 3 [pid 1567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1567] munmap(0x7f9627d89000, 262144) = 0 [pid 1567] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1567] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1567] close(3) = 0 [pid 1567] mkdir("./file0", 0777) = 0 [pid 1567] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1567] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1567] chdir("./file0") = 0 [pid 1567] ioctl(4, LOOP_CLR_FD) = 0 [pid 1567] close(4) = 0 [pid 1567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] <... futex resumed>) = 0 [pid 1566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1567] <... futex resumed>) = 1 [pid 1567] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] <... futex resumed>) = 0 [pid 1566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1567] <... futex resumed>) = 1 [pid 1567] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] <... futex resumed>) = 0 [pid 1566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1567] <... futex resumed>) = 1 [pid 1567] creat("./bus", 000) = 6 [pid 1567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] <... futex resumed>) = 0 [pid 1566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1567] <... futex resumed>) = 1 [pid 1567] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] <... futex resumed>) = 0 [pid 1566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1567] <... futex resumed>) = 1 [pid 1567] open("./bus", O_RDONLY) = 7 [pid 1567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] <... futex resumed>) = 0 [pid 1566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1567] <... futex resumed>) = 1 [ 109.042809][ T1567] loop0: detected capacity change from 0 to 512 [ 109.051563][ T1567] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 109.065110][ T1567] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 109.075627][ T1567] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1567] sendfile(6, 7, NULL, 140737974943952 [pid 1566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1566] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1566] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1569 attached => {parent_tid=[1569]}, 88) = 1569 [pid 1569] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1566] rt_sigprocmask(SIG_SETMASK, [], [pid 1569] rt_sigprocmask(SIG_SETMASK, [], [pid 1566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1566] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1569] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1566] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1569] <... mmap resumed>) = 0x20000000 [pid 1569] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1566] <... futex resumed>) = 0 [pid 1566] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] sendmsg(-1, 0x20000000, 0 [pid 1566] <... futex resumed>) = 0 [pid 1569] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1566] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1569] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1566] <... futex resumed>) = 0 [pid 1569] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1566] exit_group(0) = ? [pid 1569] <... futex resumed>) = ? [pid 1567] <... sendfile resumed>) = ? [pid 1569] +++ exited with 0 +++ [pid 1567] +++ exited with 0 +++ [pid 1566] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1566, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./292", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./292", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./292/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./292/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./292/binderfs") = 0 umount2("./292/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./292/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./292/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./292/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./292/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./292/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./292") = 0 mkdir("./293", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1570 ./strace-static-x86_64: Process 1570 attached [pid 1570] set_robust_list(0x555556b826a0, 24) = 0 [pid 1570] chdir("./293") = 0 [pid 1570] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1570] setpgid(0, 0) = 0 [pid 1570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1570] write(3, "1000", 4) = 4 [pid 1570] close(3) = 0 [pid 1570] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1570] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1570] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1570] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1570] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1570] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1571]}, 88) = 1571 [pid 1570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1571 attached [pid 1571] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1571] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1571] memfd_create("syzkaller", 0) = 3 [pid 1571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1571] munmap(0x7f9627d89000, 262144) = 0 [pid 1571] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1571] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1571] close(3) = 0 [pid 1571] mkdir("./file0", 0777) = 0 [pid 1571] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1571] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1571] chdir("./file0") = 0 [pid 1571] ioctl(4, LOOP_CLR_FD) = 0 [pid 1571] close(4) = 0 [pid 1571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1570] <... futex resumed>) = 0 [pid 1570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1571] <... futex resumed>) = 1 [pid 1571] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1570] <... futex resumed>) = 0 [pid 1570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1571] <... futex resumed>) = 1 [pid 1571] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1570] <... futex resumed>) = 0 [pid 1570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1571] <... futex resumed>) = 1 [pid 1571] creat("./bus", 000) = 6 [pid 1571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1570] <... futex resumed>) = 0 [pid 1570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1571] <... futex resumed>) = 1 [pid 1571] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1570] <... futex resumed>) = 0 [pid 1570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1571] <... futex resumed>) = 1 [pid 1571] open("./bus", O_RDONLY) = 7 [pid 1571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1570] <... futex resumed>) = 0 [pid 1570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1571] <... futex resumed>) = 1 [ 109.340419][ T1571] loop0: detected capacity change from 0 to 512 [ 109.349112][ T1571] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 109.362886][ T1571] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 109.373246][ T1571] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1571] sendfile(6, 7, NULL, 140737974943952 [pid 1570] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1570] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1570] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1570] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1573 attached => {parent_tid=[1573]}, 88) = 1573 [pid 1570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1570] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1570] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1573] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1573] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1573] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1573] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1570] <... futex resumed>) = 0 [pid 1570] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1570] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1573] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1573] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1570] <... futex resumed>) = 0 [pid 1573] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1570] exit_group(0 [pid 1573] <... futex resumed>) = 231 [pid 1570] <... exit_group resumed>) = ? [pid 1571] <... sendfile resumed>) = ? [pid 1571] +++ exited with 0 +++ [pid 1573] +++ exited with 0 +++ [pid 1570] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1570, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- umount2("./293", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./293", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./293/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./293/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./293/binderfs") = 0 umount2("./293/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./293/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./293/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./293/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./293/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./293/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./293") = 0 mkdir("./294", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1574 ./strace-static-x86_64: Process 1574 attached [pid 1574] set_robust_list(0x555556b826a0, 24) = 0 [pid 1574] chdir("./294") = 0 [pid 1574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1574] setpgid(0, 0) = 0 [pid 1574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1574] write(3, "1000", 4) = 4 [pid 1574] close(3) = 0 [pid 1574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1574] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1574] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1574] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1574] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1574] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1574] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1575]}, 88) = 1575 [pid 1574] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 1575 attached NULL, 8) = 0 [pid 1574] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1574] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1575] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1575] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1575] memfd_create("syzkaller", 0) = 3 [pid 1575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1575] munmap(0x7f9627d89000, 262144) = 0 [pid 1575] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1575] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1575] close(3) = 0 [pid 1575] mkdir("./file0", 0777) = 0 [pid 1575] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1575] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1575] chdir("./file0") = 0 [pid 1575] ioctl(4, LOOP_CLR_FD) = 0 [pid 1575] close(4) = 0 [pid 1575] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1575] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1574] <... futex resumed>) = 0 [pid 1574] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1574] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1575] <... futex resumed>) = 0 [pid 1575] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1575] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1574] <... futex resumed>) = 0 [pid 1574] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1574] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1575] <... futex resumed>) = 1 [pid 1575] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1575] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1574] <... futex resumed>) = 0 [pid 1574] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1574] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1575] creat("./bus", 000) = 6 [pid 1575] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1574] <... futex resumed>) = 0 [pid 1574] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1574] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1575] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1575] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1574] <... futex resumed>) = 0 [pid 1574] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1574] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1575] <... futex resumed>) = 1 [pid 1575] open("./bus", O_RDONLY) = 7 [pid 1575] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1574] <... futex resumed>) = 0 [pid 1574] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1574] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1575] <... futex resumed>) = 1 [ 109.628737][ T1575] loop0: detected capacity change from 0 to 512 [ 109.636800][ T1575] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 109.652755][ T1575] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 109.662550][ T1575] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1575] sendfile(6, 7, NULL, 140737974943952 [pid 1574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1574] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1574] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1574] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1574] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1574] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1574] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1577 attached => {parent_tid=[1577]}, 88) = 1577 [pid 1574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1574] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1574] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1577] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1577] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1577] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1574] <... futex resumed>) = 0 [pid 1574] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1574] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1577] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1577] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1574] <... futex resumed>) = 0 [pid 1577] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1574] exit_group(0) = ? [pid 1577] <... futex resumed>) = ? [pid 1577] +++ exited with 0 +++ [pid 1575] <... sendfile resumed>) = ? [pid 1575] +++ exited with 0 +++ [pid 1574] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1574, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./294", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./294", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./294/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./294/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./294/binderfs") = 0 umount2("./294/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./294/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./294/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./294/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./294/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./294/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./294") = 0 mkdir("./295", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1579 ./strace-static-x86_64: Process 1579 attached [pid 1579] set_robust_list(0x555556b826a0, 24) = 0 [pid 1579] chdir("./295") = 0 [pid 1579] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1579] setpgid(0, 0) = 0 [pid 1579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1579] write(3, "1000", 4) = 4 [pid 1579] close(3) = 0 [pid 1579] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1579] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1579] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1579] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1579] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1579] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1579] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1580]}, 88) = 1580 [pid 1579] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1580 attached [pid 1580] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1580] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1580] memfd_create("syzkaller", 0) = 3 [pid 1580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1580] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1580] munmap(0x7f9627d89000, 262144) = 0 [pid 1580] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1580] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1580] close(3) = 0 [pid 1580] mkdir("./file0", 0777) = 0 [pid 1580] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1580] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1580] chdir("./file0") = 0 [pid 1580] ioctl(4, LOOP_CLR_FD) = 0 [pid 1580] close(4) = 0 [pid 1580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1579] <... futex resumed>) = 0 [pid 1579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1580] <... futex resumed>) = 1 [pid 1580] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1579] <... futex resumed>) = 0 [pid 1579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1580] <... futex resumed>) = 1 [pid 1580] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1579] <... futex resumed>) = 0 [pid 1579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1580] <... futex resumed>) = 1 [pid 1580] creat("./bus", 000) = 6 [pid 1580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1579] <... futex resumed>) = 0 [pid 1579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1580] <... futex resumed>) = 1 [pid 1580] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1579] <... futex resumed>) = 0 [pid 1579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1580] open("./bus", O_RDONLY) = 7 [pid 1580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1579] <... futex resumed>) = 0 [pid 1579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 109.967084][ T1580] loop0: detected capacity change from 0 to 512 [ 109.975161][ T1580] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 109.988584][ T1580] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 109.999398][ T1580] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1580] sendfile(6, 7, NULL, 140737974943952 [pid 1579] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1579] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1579] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1579] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1579] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1582]}, 88) = 1582 ./strace-static-x86_64: Process 1582 attached [pid 1579] rt_sigprocmask(SIG_SETMASK, [], [pid 1582] set_robust_list(0x7f9627dc89a0, 24 [pid 1579] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1582] <... set_robust_list resumed>) = 0 [pid 1579] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1582] rt_sigprocmask(SIG_SETMASK, [], [pid 1579] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1582] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1582] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1579] <... futex resumed>) = 0 [pid 1582] <... futex resumed>) = 1 [pid 1579] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1582] sendmsg(-1, 0x20000000, 0 [pid 1579] <... futex resumed>) = 0 [pid 1582] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1582] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1579] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1582] <... futex resumed>) = 0 [pid 1582] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1579] exit_group(0 [pid 1582] <... futex resumed>) = ? [pid 1579] <... exit_group resumed>) = ? [pid 1580] <... sendfile resumed>) = ? [pid 1580] +++ exited with 0 +++ [pid 1582] +++ exited with 0 +++ [pid 1579] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1579, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./295", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./295", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./295/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./295/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./295/binderfs") = 0 umount2("./295/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./295/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./295/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./295/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./295/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./295/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./295") = 0 mkdir("./296", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1583 ./strace-static-x86_64: Process 1583 attached [pid 1583] set_robust_list(0x555556b826a0, 24) = 0 [pid 1583] chdir("./296") = 0 [pid 1583] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1583] setpgid(0, 0) = 0 [pid 1583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1583] write(3, "1000", 4) = 4 [pid 1583] close(3) = 0 [pid 1583] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1583] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1583] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1583] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1583] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1583] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1583] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1584 attached => {parent_tid=[1584]}, 88) = 1584 [pid 1584] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1584] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1583] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1584] <... futex resumed>) = 0 [pid 1584] memfd_create("syzkaller", 0) = 3 [pid 1584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1584] munmap(0x7f9627d89000, 262144) = 0 [pid 1584] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1584] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1584] close(3) = 0 [pid 1584] mkdir("./file0", 0777) = 0 [pid 1584] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1584] chdir("./file0") = 0 [pid 1584] ioctl(4, LOOP_CLR_FD) = 0 [pid 1584] close(4) = 0 [pid 1584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1584] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1583] <... futex resumed>) = 0 [pid 1583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1584] <... futex resumed>) = 0 [pid 1584] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1583] <... futex resumed>) = 0 [pid 1583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1584] <... futex resumed>) = 1 [pid 1584] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1583] <... futex resumed>) = 0 [pid 1583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1584] <... futex resumed>) = 1 [pid 1584] creat("./bus", 000) = 6 [pid 1584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1583] <... futex resumed>) = 0 [pid 1584] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 1583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1584] <... writev resumed>) = 1 [pid 1584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1583] <... futex resumed>) = 0 [pid 1583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1584] <... futex resumed>) = 1 [pid 1584] open("./bus", O_RDONLY) = 7 [pid 1584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1583] <... futex resumed>) = 0 [pid 1583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1584] <... futex resumed>) = 1 [ 110.306463][ T1584] loop0: detected capacity change from 0 to 512 [ 110.314874][ T1584] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 110.328100][ T1584] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 110.337644][ T1584] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1584] sendfile(6, 7, NULL, 140737974943952 [pid 1583] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1583] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1583] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1583] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1583] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1586 attached => {parent_tid=[1586]}, 88) = 1586 [pid 1586] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1586] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1583] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1583] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1586] <... futex resumed>) = 0 [pid 1586] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1583] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1586] <... mmap resumed>) = 0x20000000 [pid 1586] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1586] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1583] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1586] <... futex resumed>) = 0 [pid 1583] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1586] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1586] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1583] <... futex resumed>) = 0 [pid 1586] <... futex resumed>) = 1 [pid 1586] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1583] exit_group(0 [pid 1586] <... futex resumed>) = ? [pid 1583] <... exit_group resumed>) = ? [pid 1586] +++ exited with 0 +++ [pid 1584] <... sendfile resumed>) = ? [pid 1584] +++ exited with 0 +++ [pid 1583] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1583, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./296", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./296", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./296/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./296/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./296/binderfs") = 0 umount2("./296/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./296/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./296/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./296/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./296/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./296/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./296") = 0 mkdir("./297", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1587 ./strace-static-x86_64: Process 1587 attached [pid 1587] set_robust_list(0x555556b826a0, 24) = 0 [pid 1587] chdir("./297") = 0 [pid 1587] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1587] setpgid(0, 0) = 0 [pid 1587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1587] write(3, "1000", 4) = 4 [pid 1587] close(3) = 0 [pid 1587] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1587] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1587] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1587] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1587] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1587] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1587] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1588 attached => {parent_tid=[1588]}, 88) = 1588 [pid 1587] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1587] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1587] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1588] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1588] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1588] memfd_create("syzkaller", 0) = 3 [pid 1588] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1588] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1588] munmap(0x7f9627d89000, 262144) = 0 [pid 1588] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1588] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1588] close(3) = 0 [pid 1588] mkdir("./file0", 0777) = 0 [pid 1588] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1588] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1588] chdir("./file0") = 0 [pid 1588] ioctl(4, LOOP_CLR_FD) = 0 [pid 1588] close(4) = 0 [pid 1588] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1587] <... futex resumed>) = 0 [pid 1587] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1587] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1588] <... futex resumed>) = 1 [pid 1588] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1588] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1587] <... futex resumed>) = 0 [pid 1587] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1588] <... futex resumed>) = 1 [pid 1588] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1587] <... futex resumed>) = 0 [pid 1587] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1588] <... open resumed>) = 5 [pid 1588] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1588] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1587] <... futex resumed>) = 0 [pid 1587] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1587] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1588] <... futex resumed>) = 0 [pid 1588] creat("./bus", 000) = 6 [pid 1588] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1587] <... futex resumed>) = 0 [pid 1587] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1587] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1588] <... futex resumed>) = 1 [pid 1588] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1588] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1587] <... futex resumed>) = 0 [pid 1587] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1587] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1588] <... futex resumed>) = 1 [pid 1588] open("./bus", O_RDONLY) = 7 [pid 1588] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1587] <... futex resumed>) = 0 [pid 1587] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1587] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1588] <... futex resumed>) = 1 [ 110.597752][ T1588] loop0: detected capacity change from 0 to 512 [ 110.605604][ T1588] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 110.618569][ T1588] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 110.628002][ T1588] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1588] sendfile(6, 7, NULL, 140737974943952 [pid 1587] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1587] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1587] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1587] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1587] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1587] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1587] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1590 attached => {parent_tid=[1590]}, 88) = 1590 [pid 1590] set_robust_list(0x7f9627dc89a0, 24 [pid 1587] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1590] <... set_robust_list resumed>) = 0 [pid 1590] rt_sigprocmask(SIG_SETMASK, [], [pid 1587] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1590] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1587] <... futex resumed>) = 0 [pid 1590] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1587] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1590] <... mmap resumed>) = 0x20000000 [pid 1590] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1587] <... futex resumed>) = 0 [pid 1587] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1590] <... futex resumed>) = 1 [pid 1587] <... futex resumed>) = 0 [pid 1587] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1590] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1590] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1587] <... futex resumed>) = 0 [pid 1590] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1587] exit_group(0 [pid 1590] <... futex resumed>) = ? [pid 1587] <... exit_group resumed>) = ? [pid 1590] +++ exited with 0 +++ [pid 1588] <... sendfile resumed>) = ? [pid 1588] +++ exited with 0 +++ [pid 1587] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1587, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./297", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./297", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./297/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./297/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./297/binderfs") = 0 umount2("./297/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./297/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./297/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./297/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./297/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./297/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./297") = 0 mkdir("./298", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1592 ./strace-static-x86_64: Process 1592 attached [pid 1592] set_robust_list(0x555556b826a0, 24) = 0 [pid 1592] chdir("./298") = 0 [pid 1592] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1592] setpgid(0, 0) = 0 [pid 1592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1592] write(3, "1000", 4) = 4 [pid 1592] close(3) = 0 [pid 1592] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1592] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1592] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1592] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1592] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1592] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1592] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1593 attached => {parent_tid=[1593]}, 88) = 1593 [pid 1593] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1593] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1593] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1592] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1593] <... futex resumed>) = 0 [pid 1593] memfd_create("syzkaller", 0 [pid 1592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1593] <... memfd_create resumed>) = 3 [pid 1593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1593] munmap(0x7f9627d89000, 262144) = 0 [pid 1593] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1593] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1593] close(3) = 0 [pid 1593] mkdir("./file0", 0777) = 0 [pid 1593] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1593] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1593] chdir("./file0") = 0 [pid 1593] ioctl(4, LOOP_CLR_FD) = 0 [pid 1593] close(4) = 0 [pid 1593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1592] <... futex resumed>) = 0 [pid 1592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1593] <... futex resumed>) = 1 [pid 1593] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1592] <... futex resumed>) = 0 [pid 1592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1593] <... futex resumed>) = 1 [pid 1593] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1592] <... futex resumed>) = 0 [pid 1592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1593] <... futex resumed>) = 1 [pid 1593] creat("./bus", 000) = 6 [pid 1593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1592] <... futex resumed>) = 0 [pid 1592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1593] <... futex resumed>) = 1 [pid 1593] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1592] <... futex resumed>) = 0 [pid 1592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1593] <... futex resumed>) = 1 [pid 1593] open("./bus", O_RDONLY) = 7 [pid 1593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1592] <... futex resumed>) = 0 [pid 1593] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1593] <... futex resumed>) = 0 [ 110.868276][ T1593] loop0: detected capacity change from 0 to 512 [ 110.876627][ T1593] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 110.889704][ T1593] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 110.900943][ T1593] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1593] sendfile(6, 7, NULL, 140737974943952 [pid 1592] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1592] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1592] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1592] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1592] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1595]}, 88) = 1595 [pid 1592] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1592] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1592] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1595 attached [pid 1595] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1595] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1595] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1595] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1592] <... futex resumed>) = 0 [pid 1592] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1592] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1595] <... futex resumed>) = 1 [pid 1595] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1595] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1592] <... futex resumed>) = 0 [pid 1595] <... futex resumed>) = 1 [pid 1595] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1592] exit_group(0 [pid 1595] <... futex resumed>) = ? [pid 1592] <... exit_group resumed>) = ? [pid 1595] +++ exited with 0 +++ [pid 1593] <... sendfile resumed>) = ? [pid 1593] +++ exited with 0 +++ [pid 1592] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1592, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./298", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./298", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./298/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./298/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./298/binderfs") = 0 umount2("./298/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./298/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./298/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./298/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./298/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./298/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./298") = 0 mkdir("./299", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1596 ./strace-static-x86_64: Process 1596 attached [pid 1596] set_robust_list(0x555556b826a0, 24) = 0 [pid 1596] chdir("./299") = 0 [pid 1596] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1596] setpgid(0, 0) = 0 [pid 1596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1596] write(3, "1000", 4) = 4 [pid 1596] close(3) = 0 [pid 1596] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1596] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1596] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1596] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1596] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1596] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1596] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1597]}, 88) = 1597 [pid 1596] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1596] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1596] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1597 attached [pid 1597] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1597] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1597] memfd_create("syzkaller", 0) = 3 [pid 1597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1597] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1597] munmap(0x7f9627d89000, 262144) = 0 [pid 1597] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1597] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1597] close(3) = 0 [pid 1597] mkdir("./file0", 0777) = 0 [pid 1597] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1597] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1597] chdir("./file0") = 0 [pid 1597] ioctl(4, LOOP_CLR_FD) = 0 [pid 1597] close(4) = 0 [pid 1597] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1597] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1596] <... futex resumed>) = 0 [pid 1596] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1596] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1597] <... futex resumed>) = 0 [pid 1597] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1597] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] <... futex resumed>) = 0 [pid 1596] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1596] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1597] <... futex resumed>) = 1 [pid 1597] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1597] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] <... futex resumed>) = 0 [pid 1596] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1596] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1597] <... futex resumed>) = 1 [pid 1597] creat("./bus", 000) = 6 [pid 1597] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] <... futex resumed>) = 0 [pid 1596] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1596] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1597] <... futex resumed>) = 1 [pid 1597] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1597] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] <... futex resumed>) = 0 [pid 1596] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1597] <... futex resumed>) = 1 [pid 1596] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1597] open("./bus", O_RDONLY) = 7 [pid 1597] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1597] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1596] <... futex resumed>) = 0 [pid 1596] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1596] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1597] <... futex resumed>) = 0 [ 111.211783][ T1597] loop0: detected capacity change from 0 to 512 [ 111.219784][ T1597] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 111.232826][ T1597] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 111.242774][ T1597] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1597] sendfile(6, 7, NULL, 140737974943952 [pid 1596] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1596] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1596] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1596] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1596] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1599 attached => {parent_tid=[1599]}, 88) = 1599 [pid 1596] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1596] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1596] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1599] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1599] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1599] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1599] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] <... futex resumed>) = 0 [pid 1596] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1596] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1599] <... futex resumed>) = 1 [pid 1599] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1599] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1596] <... futex resumed>) = 0 [pid 1599] <... futex resumed>) = 1 [pid 1599] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1596] exit_group(0) = ? [pid 1599] <... futex resumed>) = ? [pid 1599] +++ exited with 0 +++ [pid 1597] <... sendfile resumed>) = ? [pid 1597] +++ exited with 0 +++ [pid 1596] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1596, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./299", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./299", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./299/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./299/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./299/binderfs") = 0 umount2("./299/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./299/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./299/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./299/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./299/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./299/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./299") = 0 mkdir("./300", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1600 ./strace-static-x86_64: Process 1600 attached [pid 1600] set_robust_list(0x555556b826a0, 24) = 0 [pid 1600] chdir("./300") = 0 [pid 1600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1600] setpgid(0, 0) = 0 [pid 1600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1600] write(3, "1000", 4) = 4 [pid 1600] close(3) = 0 [pid 1600] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1600] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1600] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1600] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1600] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1600] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1601 attached => {parent_tid=[1601]}, 88) = 1601 [pid 1600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1600] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1600] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1601] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1601] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1601] memfd_create("syzkaller", 0) = 3 [pid 1601] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1601] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1601] munmap(0x7f9627d89000, 262144) = 0 [pid 1601] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1601] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1601] close(3) = 0 [pid 1601] mkdir("./file0", 0777) = 0 [pid 1601] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1601] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1601] chdir("./file0") = 0 [pid 1601] ioctl(4, LOOP_CLR_FD) = 0 [pid 1601] close(4) = 0 [pid 1601] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1601] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1600] <... futex resumed>) = 0 [pid 1600] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1600] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1601] <... futex resumed>) = 0 [pid 1601] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1601] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1600] <... futex resumed>) = 0 [pid 1600] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1600] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1601] <... futex resumed>) = 1 [pid 1601] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1601] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1600] <... futex resumed>) = 0 [pid 1600] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1600] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1601] <... futex resumed>) = 1 [pid 1601] creat("./bus", 000) = 6 [pid 1601] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1600] <... futex resumed>) = 0 [pid 1600] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1600] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1601] <... futex resumed>) = 1 [pid 1601] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1601] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1600] <... futex resumed>) = 0 [pid 1600] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1600] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1601] <... futex resumed>) = 1 [pid 1601] open("./bus", O_RDONLY) = 7 [pid 1601] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1600] <... futex resumed>) = 0 [pid 1600] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1600] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1601] <... futex resumed>) = 1 [ 111.493704][ T1601] loop0: detected capacity change from 0 to 512 [ 111.502017][ T1601] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 111.515126][ T1601] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 111.525070][ T1601] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1601] sendfile(6, 7, NULL, 140737974943952 [pid 1600] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1600] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1600] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1600] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1603]}, 88) = 1603 [pid 1600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1600] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1600] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1603 attached [pid 1603] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1603] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1603] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1600] <... futex resumed>) = 0 [pid 1600] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1600] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1603] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1603] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1600] <... futex resumed>) = 0 [pid 1603] <... futex resumed>) = 1 [pid 1603] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1600] exit_group(0 [pid 1603] <... futex resumed>) = ? [pid 1600] <... exit_group resumed>) = ? [pid 1601] <... sendfile resumed>) = ? [pid 1601] +++ exited with 0 +++ [pid 1603] +++ exited with 0 +++ [pid 1600] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1600, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./300", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./300/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./300/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./300/binderfs") = 0 umount2("./300/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./300/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./300/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./300/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./300/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./300/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./300") = 0 mkdir("./301", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1604 ./strace-static-x86_64: Process 1604 attached [pid 1604] set_robust_list(0x555556b826a0, 24) = 0 [pid 1604] chdir("./301") = 0 [pid 1604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1604] setpgid(0, 0) = 0 [pid 1604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1604] write(3, "1000", 4) = 4 [pid 1604] close(3) = 0 [pid 1604] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1604] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1604] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1604] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1604] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1604] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1605]}, 88) = 1605 [pid 1604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1604] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1604] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1605 attached [pid 1605] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1605] memfd_create("syzkaller", 0) = 3 [pid 1605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1605] munmap(0x7f9627d89000, 262144) = 0 [pid 1605] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1605] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1605] close(3) = 0 [pid 1605] mkdir("./file0", 0777) = 0 [pid 1605] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1605] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1605] chdir("./file0") = 0 [pid 1605] ioctl(4, LOOP_CLR_FD) = 0 [pid 1605] close(4) = 0 [pid 1605] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1604] <... futex resumed>) = 0 [pid 1604] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1604] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1605] <... futex resumed>) = 1 [pid 1605] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1605] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1604] <... futex resumed>) = 0 [pid 1604] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1604] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1605] <... futex resumed>) = 1 [pid 1605] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1605] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1604] <... futex resumed>) = 0 [pid 1604] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1604] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1605] <... futex resumed>) = 1 [pid 1605] creat("./bus", 000) = 6 [pid 1605] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1604] <... futex resumed>) = 0 [pid 1604] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1604] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1605] <... futex resumed>) = 1 [pid 1605] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1605] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1604] <... futex resumed>) = 0 [pid 1605] open("./bus", O_RDONLY [pid 1604] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1604] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1605] <... open resumed>) = 7 [pid 1605] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1604] <... futex resumed>) = 0 [pid 1604] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1604] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 111.800493][ T1605] loop0: detected capacity change from 0 to 512 [ 111.809148][ T1605] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 111.822281][ T1605] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 111.832041][ T1605] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1605] sendfile(6, 7, NULL, 140737974943952 [pid 1604] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1604] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1604] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1604] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1604] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1604] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1604] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1604] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1608 attached => {parent_tid=[1608]}, 88) = 1608 [pid 1604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1604] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1604] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1608] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1608] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1608] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1608] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1604] <... futex resumed>) = 0 [pid 1608] <... futex resumed>) = 1 [pid 1604] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1604] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1608] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1608] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1604] <... futex resumed>) = 0 [pid 1608] <... futex resumed>) = 1 [pid 1608] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1604] exit_group(0 [pid 1608] <... futex resumed>) = ? [pid 1604] <... exit_group resumed>) = ? [pid 1605] <... sendfile resumed>) = ? [pid 1605] +++ exited with 0 +++ [pid 1608] +++ exited with 0 +++ [pid 1604] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1604, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- umount2("./301", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./301/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./301/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./301/binderfs") = 0 umount2("./301/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./301/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./301/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./301/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./301/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./301/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./301") = 0 mkdir("./302", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1609 ./strace-static-x86_64: Process 1609 attached [pid 1609] set_robust_list(0x555556b826a0, 24) = 0 [pid 1609] chdir("./302") = 0 [pid 1609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1609] setpgid(0, 0) = 0 [pid 1609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1609] write(3, "1000", 4) = 4 [pid 1609] close(3) = 0 [pid 1609] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1609] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1609] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1609] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1610 attached => {parent_tid=[1610]}, 88) = 1610 [pid 1609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1609] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1610] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1610] memfd_create("syzkaller", 0) = 3 [pid 1610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1610] munmap(0x7f9627d89000, 262144) = 0 [pid 1610] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1610] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1610] close(3) = 0 [pid 1610] mkdir("./file0", 0777) = 0 [pid 1610] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1610] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1610] chdir("./file0") = 0 [pid 1610] ioctl(4, LOOP_CLR_FD) = 0 [pid 1610] close(4) = 0 [pid 1610] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] <... futex resumed>) = 0 [pid 1609] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1610] <... futex resumed>) = 1 [pid 1610] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1610] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] <... futex resumed>) = 0 [pid 1609] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1610] <... futex resumed>) = 1 [pid 1610] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1610] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] <... futex resumed>) = 0 [pid 1609] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1610] <... futex resumed>) = 1 [pid 1610] creat("./bus", 000) = 6 [pid 1610] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1610] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1609] <... futex resumed>) = 0 [pid 1609] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1609] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1610] <... futex resumed>) = 0 [pid 1610] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1610] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] <... futex resumed>) = 0 [pid 1609] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1610] <... futex resumed>) = 1 [pid 1610] open("./bus", O_RDONLY) = 7 [pid 1610] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] <... futex resumed>) = 0 [pid 1609] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1610] <... futex resumed>) = 1 [ 112.101684][ T1610] loop0: detected capacity change from 0 to 512 [ 112.109874][ T1610] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 112.122864][ T1610] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 112.132668][ T1610] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1610] sendfile(6, 7, NULL, 140737974943952 [pid 1609] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1609] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1609] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1609] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1609] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1609] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1612]}, 88) = 1612 [pid 1609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1609] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1612 attached [pid 1612] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1612] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1612] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] <... futex resumed>) = 0 [pid 1609] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1612] <... futex resumed>) = 1 [pid 1612] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1612] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] <... futex resumed>) = 0 [pid 1612] <... futex resumed>) = 1 [pid 1612] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1609] exit_group(0) = ? [pid 1612] <... futex resumed>) = ? [pid 1612] +++ exited with 0 +++ [pid 1610] <... sendfile resumed>) = ? [pid 1610] +++ exited with 0 +++ [pid 1609] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1609, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./302", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./302/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./302/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./302/binderfs") = 0 umount2("./302/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./302/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./302/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./302/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./302/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./302/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./302") = 0 mkdir("./303", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1613 ./strace-static-x86_64: Process 1613 attached [pid 1613] set_robust_list(0x555556b826a0, 24) = 0 [pid 1613] chdir("./303") = 0 [pid 1613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1613] setpgid(0, 0) = 0 [pid 1613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1613] write(3, "1000", 4) = 4 [pid 1613] close(3) = 0 [pid 1613] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1613] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1613] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1613] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1613] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1613] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1614]}, 88) = 1614 [pid 1613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1613] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1613] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1614 attached [pid 1614] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1614] memfd_create("syzkaller", 0) = 3 [pid 1614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1614] munmap(0x7f9627d89000, 262144) = 0 [pid 1614] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1614] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1614] close(3) = 0 [pid 1614] mkdir("./file0", 0777) = 0 [pid 1614] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1614] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1614] chdir("./file0") = 0 [pid 1614] ioctl(4, LOOP_CLR_FD) = 0 [pid 1614] close(4) = 0 [pid 1614] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1613] <... futex resumed>) = 0 [pid 1613] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1614] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1613] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1614] <... open resumed>) = 4 [pid 1614] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] <... futex resumed>) = 0 [pid 1614] <... futex resumed>) = 1 [pid 1614] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1613] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1613] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1614] <... open resumed>) = 5 [pid 1614] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] <... futex resumed>) = 0 [pid 1614] <... futex resumed>) = 1 [pid 1614] creat("./bus", 000 [pid 1613] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1613] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1614] <... creat resumed>) = 6 [pid 1614] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1613] <... futex resumed>) = 0 [pid 1614] <... futex resumed>) = 1 [pid 1614] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 1613] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1613] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1614] <... writev resumed>) = 1 [pid 1614] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1613] <... futex resumed>) = 0 [pid 1613] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1614] open("./bus", O_RDONLY [pid 1613] <... futex resumed>) = 0 [pid 1613] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1614] <... open resumed>) = 7 [pid 1614] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1613] <... futex resumed>) = 0 [pid 1613] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1613] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 112.392285][ T1614] loop0: detected capacity change from 0 to 512 [ 112.400270][ T1614] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 112.413478][ T1614] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 112.423699][ T1614] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1614] sendfile(6, 7, NULL, 140737974943952 [pid 1613] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1613] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1613] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1613] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1616]}, 88) = 1616 ./strace-static-x86_64: Process 1616 attached [pid 1613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1613] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1613] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1616] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1616] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1616] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1616] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1613] <... futex resumed>) = 0 [pid 1613] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1613] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1616] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1616] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1613] <... futex resumed>) = 0 [pid 1616] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1613] exit_group(0 [pid 1616] <... futex resumed>) = 230 [pid 1613] <... exit_group resumed>) = ? [pid 1616] +++ exited with 0 +++ [pid 1614] <... sendfile resumed>) = ? [pid 1614] +++ exited with 0 +++ [pid 1613] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1613, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./303", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./303/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./303/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./303/binderfs") = 0 umount2("./303/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./303/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./303/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./303/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./303/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./303/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./303") = 0 mkdir("./304", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1617 ./strace-static-x86_64: Process 1617 attached [pid 1617] set_robust_list(0x555556b826a0, 24) = 0 [pid 1617] chdir("./304") = 0 [pid 1617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1617] setpgid(0, 0) = 0 [pid 1617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1617] write(3, "1000", 4) = 4 [pid 1617] close(3) = 0 [pid 1617] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1617] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1617] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1617] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1617] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1617] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1617] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1618]}, 88) = 1618 [pid 1617] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1617] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1617] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1618 attached [pid 1618] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1618] memfd_create("syzkaller", 0) = 3 [pid 1618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1618] munmap(0x7f9627d89000, 262144) = 0 [pid 1618] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1618] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1618] close(3) = 0 [pid 1618] mkdir("./file0", 0777) = 0 [pid 1618] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1618] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1618] chdir("./file0") = 0 [pid 1618] ioctl(4, LOOP_CLR_FD) = 0 [pid 1618] close(4) = 0 [pid 1618] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1618] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1617] <... futex resumed>) = 0 [pid 1617] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1617] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1618] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1618] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1617] <... futex resumed>) = 0 [pid 1617] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1617] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1618] <... futex resumed>) = 1 [pid 1618] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1618] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1617] <... futex resumed>) = 0 [pid 1617] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1617] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1618] <... futex resumed>) = 1 [pid 1618] creat("./bus", 000) = 6 [pid 1618] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1617] <... futex resumed>) = 0 [pid 1617] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1617] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1618] <... futex resumed>) = 1 [pid 1618] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1618] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1617] <... futex resumed>) = 0 [pid 1617] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1617] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1618] <... futex resumed>) = 1 [pid 1618] open("./bus", O_RDONLY) = 7 [pid 1618] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1617] <... futex resumed>) = 0 [pid 1617] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1617] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1618] <... futex resumed>) = 1 [ 112.686234][ T1618] loop0: detected capacity change from 0 to 512 [ 112.695041][ T1618] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 112.708602][ T1618] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1618] sendfile(6, 7, NULL, 140737974943952 [pid 1617] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1617] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1617] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1617] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1617] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1617] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1617] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1617] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1621]}, 88) = 1621 [pid 1617] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1617] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1617] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1621 attached [pid 1621] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1621] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1621] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1617] <... futex resumed>) = 0 [pid 1617] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1617] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1621] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1621] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1617] <... futex resumed>) = 0 [pid 1621] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1617] exit_group(0) = ? [pid 1621] <... futex resumed>) = -1 (errno 18446744073709551555) [pid 1621] +++ exited with 0 +++ [pid 1618] <... sendfile resumed>) = ? [pid 1618] +++ exited with 0 +++ [pid 1617] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1617, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./304", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./304/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./304/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./304/binderfs") = 0 umount2("./304/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./304/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./304/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./304/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./304/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./304/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./304") = 0 mkdir("./305", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1623 ./strace-static-x86_64: Process 1623 attached [pid 1623] set_robust_list(0x555556b826a0, 24) = 0 [pid 1623] chdir("./305") = 0 [pid 1623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1623] setpgid(0, 0) = 0 [pid 1623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1623] write(3, "1000", 4) = 4 [pid 1623] close(3) = 0 [pid 1623] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1623] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1623] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1623] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1623] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1623] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1623] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1624 attached => {parent_tid=[1624]}, 88) = 1624 [pid 1623] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1624] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1624] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1624] memfd_create("syzkaller", 0) = 3 [pid 1624] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1624] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1624] munmap(0x7f9627d89000, 262144) = 0 [pid 1624] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1624] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1624] close(3) = 0 [pid 1624] mkdir("./file0", 0777) = 0 [pid 1624] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1624] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1624] chdir("./file0") = 0 [pid 1624] ioctl(4, LOOP_CLR_FD) = 0 [pid 1624] close(4) = 0 [pid 1624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1623] <... futex resumed>) = 0 [pid 1623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1624] <... futex resumed>) = 1 [pid 1624] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1623] <... futex resumed>) = 0 [pid 1623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1624] <... futex resumed>) = 1 [pid 1624] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1623] <... futex resumed>) = 0 [pid 1623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1624] <... futex resumed>) = 1 [pid 1624] creat("./bus", 000) = 6 [pid 1624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1623] <... futex resumed>) = 0 [pid 1623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1624] <... futex resumed>) = 1 [pid 1624] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1623] <... futex resumed>) = 0 [pid 1623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1624] <... futex resumed>) = 1 [pid 1624] open("./bus", O_RDONLY) = 7 [pid 1624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1623] <... futex resumed>) = 0 [pid 1623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1624] <... futex resumed>) = 1 [ 112.951220][ T1624] loop0: detected capacity change from 0 to 512 [ 112.960084][ T1624] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 112.973497][ T1624] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1624] sendfile(6, 7, NULL, 140737974943952 [pid 1623] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1623] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1623] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1623] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1623] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1626 attached => {parent_tid=[1626]}, 88) = 1626 [pid 1623] rt_sigprocmask(SIG_SETMASK, [], [pid 1626] set_robust_list(0x7f9627dc89a0, 24 [pid 1623] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1623] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1626] <... set_robust_list resumed>) = 0 [pid 1623] <... futex resumed>) = 0 [pid 1626] rt_sigprocmask(SIG_SETMASK, [], [pid 1623] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1626] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1626] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1626] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1623] <... futex resumed>) = 0 [pid 1626] <... futex resumed>) = 1 [pid 1623] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1623] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1626] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1626] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1623] <... futex resumed>) = 0 [pid 1626] <... futex resumed>) = 1 [pid 1626] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1623] exit_group(0 [pid 1626] <... futex resumed>) = ? [pid 1623] <... exit_group resumed>) = ? [pid 1626] +++ exited with 0 +++ [pid 1624] <... sendfile resumed>) = ? [pid 1624] +++ exited with 0 +++ [pid 1623] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1623, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./305", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./305/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./305/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./305/binderfs") = 0 umount2("./305/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./305/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./305/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./305/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./305/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./305/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./305") = 0 mkdir("./306", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1627 ./strace-static-x86_64: Process 1627 attached [pid 1627] set_robust_list(0x555556b826a0, 24) = 0 [pid 1627] chdir("./306") = 0 [pid 1627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1627] setpgid(0, 0) = 0 [pid 1627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1627] write(3, "1000", 4) = 4 [pid 1627] close(3) = 0 [pid 1627] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1627] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1627] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1627] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1627] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1627] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1628 attached => {parent_tid=[1628]}, 88) = 1628 [pid 1627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1628] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1628] memfd_create("syzkaller", 0) = 3 [pid 1628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1628] munmap(0x7f9627d89000, 262144) = 0 [pid 1628] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1628] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1628] close(3) = 0 [pid 1628] mkdir("./file0", 0777) = 0 [pid 1628] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1628] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1628] chdir("./file0") = 0 [pid 1628] ioctl(4, LOOP_CLR_FD) = 0 [pid 1628] close(4) = 0 [pid 1628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1627] <... futex resumed>) = 0 [pid 1627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1628] <... futex resumed>) = 1 [pid 1628] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1627] <... futex resumed>) = 0 [pid 1627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1628] <... futex resumed>) = 1 [pid 1628] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1627] <... futex resumed>) = 0 [pid 1627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1628] <... futex resumed>) = 1 [pid 1628] creat("./bus", 000) = 6 [pid 1628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1627] <... futex resumed>) = 0 [pid 1627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1628] <... futex resumed>) = 1 [pid 1628] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1627] <... futex resumed>) = 0 [pid 1627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1628] <... futex resumed>) = 1 [pid 1627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1628] open("./bus", O_RDONLY) = 7 [pid 1628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1627] <... futex resumed>) = 0 [pid 1627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1628] <... futex resumed>) = 1 [ 113.232285][ T1628] loop0: detected capacity change from 0 to 512 [ 113.240220][ T1628] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 113.253560][ T1628] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1628] sendfile(6, 7, NULL, 140737974943952 [pid 1627] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1627] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1627] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1627] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1630]}, 88) = 1630 [pid 1627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1627] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1627] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1630 attached [pid 1630] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1630] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1630] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1627] <... futex resumed>) = 0 [pid 1627] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1627] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1630] <... futex resumed>) = 1 [pid 1630] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1630] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1627] <... futex resumed>) = 0 [pid 1630] <... futex resumed>) = 1 [pid 1630] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1627] exit_group(0 [pid 1630] <... futex resumed>) = ? [pid 1627] <... exit_group resumed>) = ? [pid 1628] <... sendfile resumed>) = ? [pid 1628] +++ exited with 0 +++ [pid 1630] +++ exited with 0 +++ [pid 1627] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1627, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./306", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./306/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./306/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./306/binderfs") = 0 umount2("./306/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./306/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./306/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./306/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./306/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./306/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./306") = 0 mkdir("./307", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1631 ./strace-static-x86_64: Process 1631 attached [pid 1631] set_robust_list(0x555556b826a0, 24) = 0 [pid 1631] chdir("./307") = 0 [pid 1631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1631] setpgid(0, 0) = 0 [pid 1631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1631] write(3, "1000", 4) = 4 [pid 1631] close(3) = 0 [pid 1631] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1631] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1631] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1631] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1631] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1631] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1632 attached => {parent_tid=[1632]}, 88) = 1632 [pid 1632] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1632] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1631] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1632] <... futex resumed>) = 0 [pid 1632] memfd_create("syzkaller", 0) = 3 [pid 1632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1631] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1632] munmap(0x7f9627d89000, 262144) = 0 [pid 1632] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1632] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1632] close(3) = 0 [pid 1632] mkdir("./file0", 0777) = 0 [pid 1632] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1632] chdir("./file0") = 0 [pid 1632] ioctl(4, LOOP_CLR_FD) = 0 [pid 1632] close(4) = 0 [pid 1632] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1631] <... futex resumed>) = 0 [pid 1631] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1631] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1632] <... futex resumed>) = 1 [pid 1632] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1632] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1631] <... futex resumed>) = 0 [pid 1631] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1631] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1632] <... futex resumed>) = 1 [pid 1632] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1632] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1632] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1631] <... futex resumed>) = 0 [pid 1631] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1631] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1632] <... futex resumed>) = 0 [pid 1632] creat("./bus", 000) = 6 [pid 1632] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1631] <... futex resumed>) = 0 [pid 1631] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1631] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1632] <... futex resumed>) = 1 [pid 1632] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1632] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1631] <... futex resumed>) = 0 [pid 1631] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1631] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1632] <... futex resumed>) = 1 [pid 1632] open("./bus", O_RDONLY) = 7 [pid 1632] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1631] <... futex resumed>) = 0 [pid 1631] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1631] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1632] <... futex resumed>) = 1 [ 113.493633][ T1632] loop0: detected capacity change from 0 to 512 [ 113.502318][ T1632] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 113.515488][ T1632] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1632] sendfile(6, 7, NULL, 140737974943952 [pid 1631] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1631] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1631] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1631] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1631] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1634 attached => {parent_tid=[1634]}, 88) = 1634 [pid 1631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1631] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1631] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1634] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1634] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1634] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1631] <... futex resumed>) = 0 [pid 1631] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1631] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1634] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1634] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1631] <... futex resumed>) = 0 [pid 1634] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1631] exit_group(0 [pid 1634] <... futex resumed>) = ? [pid 1631] <... exit_group resumed>) = ? [pid 1634] +++ exited with 0 +++ [pid 1632] <... sendfile resumed>) = ? [pid 1632] +++ exited with 0 +++ [pid 1631] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1631, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./307", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./307/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./307/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./307/binderfs") = 0 umount2("./307/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./307/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./307/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./307/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./307/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./307/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./307") = 0 mkdir("./308", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1635 ./strace-static-x86_64: Process 1635 attached [pid 1635] set_robust_list(0x555556b826a0, 24) = 0 [pid 1635] chdir("./308") = 0 [pid 1635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1635] setpgid(0, 0) = 0 [pid 1635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1635] write(3, "1000", 4) = 4 [pid 1635] close(3) = 0 [pid 1635] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1635] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1635] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1635] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1635] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1635] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1635] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1636]}, 88) = 1636 ./strace-static-x86_64: Process 1636 attached [pid 1635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1635] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1635] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1636] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1636] memfd_create("syzkaller", 0) = 3 [pid 1636] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1636] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1636] munmap(0x7f9627d89000, 262144) = 0 [pid 1636] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1636] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1636] close(3) = 0 [pid 1636] mkdir("./file0", 0777) = 0 [pid 1636] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1636] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1636] chdir("./file0") = 0 [pid 1636] ioctl(4, LOOP_CLR_FD) = 0 [pid 1636] close(4) = 0 [pid 1636] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1636] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1635] <... futex resumed>) = 0 [pid 1635] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1635] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1636] <... futex resumed>) = 0 [pid 1636] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1636] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1635] <... futex resumed>) = 0 [pid 1635] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1635] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1636] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1636] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1635] <... futex resumed>) = 0 [pid 1635] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1635] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1636] <... futex resumed>) = 1 [pid 1636] creat("./bus", 000) = 6 [pid 1636] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1635] <... futex resumed>) = 0 [pid 1635] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1635] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1636] <... futex resumed>) = 1 [pid 1636] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1636] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1635] <... futex resumed>) = 0 [pid 1635] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1635] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1636] open("./bus", O_RDONLY) = 7 [pid 1636] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1635] <... futex resumed>) = 0 [pid 1635] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1635] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 113.793528][ T1636] loop0: detected capacity change from 0 to 512 [ 113.801605][ T1636] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 113.814566][ T1636] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1636] sendfile(6, 7, NULL, 140737974943952 [pid 1635] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1635] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1635] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1635] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1635] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1639]}, 88) = 1639 ./strace-static-x86_64: Process 1639 attached [pid 1635] rt_sigprocmask(SIG_SETMASK, [], [pid 1639] set_robust_list(0x7f9627dc89a0, 24 [pid 1635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1639] <... set_robust_list resumed>) = 0 [pid 1635] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1639] rt_sigprocmask(SIG_SETMASK, [], [pid 1635] <... futex resumed>) = 0 [pid 1639] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1635] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1639] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1639] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1635] <... futex resumed>) = 0 [pid 1635] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1635] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1639] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1639] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1635] <... futex resumed>) = 0 [pid 1639] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1635] exit_group(0 [pid 1639] <... futex resumed>) = ? [pid 1635] <... exit_group resumed>) = ? [pid 1639] +++ exited with 0 +++ [pid 1636] <... sendfile resumed>) = ? [pid 1636] +++ exited with 0 +++ [pid 1635] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1635, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./308", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./308/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./308/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./308/binderfs") = 0 umount2("./308/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./308/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./308/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./308/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./308/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./308/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./308") = 0 mkdir("./309", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1640 ./strace-static-x86_64: Process 1640 attached [pid 1640] set_robust_list(0x555556b826a0, 24) = 0 [pid 1640] chdir("./309") = 0 [pid 1640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1640] setpgid(0, 0) = 0 [pid 1640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1640] write(3, "1000", 4) = 4 [pid 1640] close(3) = 0 [pid 1640] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1640] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1640] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1640] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1640] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1640] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1641]}, 88) = 1641 [pid 1640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1641 attached [pid 1641] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1641] memfd_create("syzkaller", 0) = 3 [pid 1641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1641] munmap(0x7f9627d89000, 262144) = 0 [pid 1641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1641] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1641] close(3) = 0 [pid 1641] mkdir("./file0", 0777) = 0 [pid 1641] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1641] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1641] chdir("./file0") = 0 [pid 1641] ioctl(4, LOOP_CLR_FD) = 0 [pid 1641] close(4) = 0 [pid 1641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] <... futex resumed>) = 0 [pid 1640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1641] <... futex resumed>) = 1 [pid 1641] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] <... futex resumed>) = 0 [pid 1640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1641] <... futex resumed>) = 1 [pid 1641] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] <... futex resumed>) = 0 [pid 1640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1641] <... futex resumed>) = 1 [pid 1641] creat("./bus", 000) = 6 [pid 1641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] <... futex resumed>) = 0 [pid 1640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1641] <... futex resumed>) = 1 [pid 1641] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] <... futex resumed>) = 0 [pid 1640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1641] <... futex resumed>) = 1 [pid 1641] open("./bus", O_RDONLY) = 7 [pid 1641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] <... futex resumed>) = 0 [pid 1640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1641] <... futex resumed>) = 1 [ 114.088625][ T1641] loop0: detected capacity change from 0 to 512 [ 114.096943][ T1641] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 114.110304][ T1641] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1641] sendfile(6, 7, NULL, 140737974943952 [pid 1640] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1640] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1640] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1640] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1643 attached [pid 1643] set_robust_list(0x7f9627dc89a0, 24 [pid 1640] <... clone3 resumed> => {parent_tid=[1643]}, 88) = 1643 [pid 1643] <... set_robust_list resumed>) = 0 [pid 1640] rt_sigprocmask(SIG_SETMASK, [], [pid 1643] rt_sigprocmask(SIG_SETMASK, [], [pid 1640] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1640] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1640] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1643] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1643] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1643] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] <... futex resumed>) = 0 [pid 1643] <... futex resumed>) = 1 [pid 1640] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1640] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1643] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1643] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1640] <... futex resumed>) = 0 [pid 1643] <... futex resumed>) = 1 [pid 1643] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1640] exit_group(0 [pid 1643] <... futex resumed>) = ? [pid 1640] <... exit_group resumed>) = ? [pid 1643] +++ exited with 0 +++ [pid 1641] <... sendfile resumed>) = ? [pid 1641] +++ exited with 0 +++ [pid 1640] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1640, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./309", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./309/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./309/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./309/binderfs") = 0 umount2("./309/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./309/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./309/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./309/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./309/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./309/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./309") = 0 mkdir("./310", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1644 ./strace-static-x86_64: Process 1644 attached [pid 1644] set_robust_list(0x555556b826a0, 24) = 0 [pid 1644] chdir("./310") = 0 [pid 1644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1644] setpgid(0, 0) = 0 [pid 1644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1644] write(3, "1000", 4) = 4 [pid 1644] close(3) = 0 [pid 1644] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1644] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1644] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1644] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1644] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1644] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1644] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1645]}, 88) = 1645 [pid 1644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1644] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1644] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1645 attached [pid 1645] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1645] memfd_create("syzkaller", 0) = 3 [pid 1645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1645] munmap(0x7f9627d89000, 262144) = 0 [pid 1645] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1645] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1645] close(3) = 0 [pid 1645] mkdir("./file0", 0777) = 0 [pid 1645] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1645] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1645] chdir("./file0") = 0 [pid 1645] ioctl(4, LOOP_CLR_FD) = 0 [pid 1645] close(4) = 0 [pid 1645] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1644] <... futex resumed>) = 0 [pid 1644] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1644] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1645] <... futex resumed>) = 1 [pid 1645] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1645] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1644] <... futex resumed>) = 0 [pid 1644] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1644] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1645] <... futex resumed>) = 1 [pid 1645] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1645] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1644] <... futex resumed>) = 0 [pid 1644] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1644] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1645] <... futex resumed>) = 1 [pid 1645] creat("./bus", 000) = 6 [pid 1645] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1644] <... futex resumed>) = 0 [pid 1644] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1644] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1645] <... futex resumed>) = 1 [pid 1645] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1645] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1644] <... futex resumed>) = 0 [pid 1644] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1644] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1645] <... futex resumed>) = 1 [pid 1645] open("./bus", O_RDONLY) = 7 [pid 1645] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1644] <... futex resumed>) = 0 [pid 1644] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1644] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1645] <... futex resumed>) = 1 [ 114.360570][ T1645] loop0: detected capacity change from 0 to 512 [ 114.370050][ T1645] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 114.383450][ T1645] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1645] sendfile(6, 7, NULL, 140737974943952 [pid 1644] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1644] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1644] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1644] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1644] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1644] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1644] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1644] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1644] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1647]}, 88) = 1647 [pid 1644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1644] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1644] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1647 attached [pid 1647] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1647] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1647] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1644] <... futex resumed>) = 0 [pid 1644] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1644] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1647] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1647] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1644] <... futex resumed>) = 0 [pid 1647] <... futex resumed>) = 1 [pid 1647] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1644] exit_group(0 [pid 1647] <... futex resumed>) = ? [pid 1644] <... exit_group resumed>) = ? [pid 1647] +++ exited with 0 +++ [pid 1645] <... sendfile resumed>) = ? [pid 1645] +++ exited with 0 +++ [pid 1644] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1644, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./310", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./310/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./310/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./310/binderfs") = 0 umount2("./310/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./310/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./310/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./310/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./310/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./310/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./310") = 0 mkdir("./311", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 1648 attached , child_tidptr=0x555556b82690) = 1648 [pid 1648] set_robust_list(0x555556b826a0, 24) = 0 [pid 1648] chdir("./311") = 0 [pid 1648] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1648] setpgid(0, 0) = 0 [pid 1648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1648] write(3, "1000", 4) = 4 [pid 1648] close(3) = 0 [pid 1648] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1648] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1648] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1648] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1648] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1648] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1648] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1649]}, 88) = 1649 [pid 1648] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1648] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1648] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1649 attached [pid 1649] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1649] memfd_create("syzkaller", 0) = 3 [pid 1649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1649] munmap(0x7f9627d89000, 262144) = 0 [pid 1649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1649] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1649] close(3) = 0 [pid 1649] mkdir("./file0", 0777) = 0 [pid 1649] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1649] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1649] chdir("./file0") = 0 [pid 1649] ioctl(4, LOOP_CLR_FD) = 0 [pid 1649] close(4) = 0 [pid 1649] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1649] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1648] <... futex resumed>) = 0 [pid 1648] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1648] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1649] <... futex resumed>) = 0 [pid 1649] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1649] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1648] <... futex resumed>) = 0 [pid 1648] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1648] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1649] <... futex resumed>) = 1 [pid 1649] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1649] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1648] <... futex resumed>) = 0 [pid 1648] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1648] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1649] <... futex resumed>) = 1 [pid 1649] creat("./bus", 000) = 6 [pid 1649] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1648] <... futex resumed>) = 0 [pid 1648] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1648] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1649] <... futex resumed>) = 1 [pid 1649] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1649] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1648] <... futex resumed>) = 0 [pid 1648] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1648] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1649] <... futex resumed>) = 1 [pid 1649] open("./bus", O_RDONLY) = 7 [pid 1649] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1648] <... futex resumed>) = 0 [pid 1648] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1648] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1649] <... futex resumed>) = 1 [ 114.623916][ T1649] loop0: detected capacity change from 0 to 512 [ 114.632074][ T1649] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 114.645743][ T1649] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1649] sendfile(6, 7, NULL, 140737974943952 [pid 1648] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1648] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1648] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1648] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1648] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1648] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1651]}, 88) = 1651 [pid 1648] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1648] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1648] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1651 attached [pid 1651] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1651] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1651] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1651] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1648] <... futex resumed>) = 0 [pid 1648] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1648] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1651] <... futex resumed>) = 1 [pid 1651] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1651] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1648] <... futex resumed>) = 0 [pid 1651] <... futex resumed>) = 1 [pid 1651] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1648] exit_group(0) = ? [pid 1651] <... futex resumed>) = ? [pid 1651] +++ exited with 0 +++ [pid 1649] <... sendfile resumed>) = ? [pid 1649] +++ exited with 0 +++ [pid 1648] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1648, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./311", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./311/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./311/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./311/binderfs") = 0 umount2("./311/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./311/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./311/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./311/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./311/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./311/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./311") = 0 mkdir("./312", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1653 ./strace-static-x86_64: Process 1653 attached [pid 1653] set_robust_list(0x555556b826a0, 24) = 0 [pid 1653] chdir("./312") = 0 [pid 1653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1653] setpgid(0, 0) = 0 [pid 1653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1653] write(3, "1000", 4) = 4 [pid 1653] close(3) = 0 [pid 1653] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1653] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1653] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1653] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1653] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1653] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1654]}, 88) = 1654 ./strace-static-x86_64: Process 1654 attached [pid 1653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1654] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1654] memfd_create("syzkaller", 0) = 3 [pid 1654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1654] munmap(0x7f9627d89000, 262144) = 0 [pid 1654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1654] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1654] close(3) = 0 [pid 1654] mkdir("./file0", 0777) = 0 [pid 1654] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1654] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1654] chdir("./file0") = 0 [pid 1654] ioctl(4, LOOP_CLR_FD) = 0 [pid 1654] close(4) = 0 [pid 1654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1653] <... futex resumed>) = 0 [pid 1653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1654] <... futex resumed>) = 1 [pid 1654] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1654] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1653] <... futex resumed>) = 0 [pid 1653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1654] <... futex resumed>) = 0 [pid 1654] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1653] <... futex resumed>) = 0 [pid 1653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1654] <... futex resumed>) = 1 [pid 1654] creat("./bus", 000) = 6 [pid 1654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1653] <... futex resumed>) = 0 [pid 1653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1654] <... futex resumed>) = 1 [pid 1654] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1654] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1653] <... futex resumed>) = 0 [pid 1653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1654] <... futex resumed>) = 0 [pid 1654] open("./bus", O_RDONLY) = 7 [pid 1654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1653] <... futex resumed>) = 0 [pid 1653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1654] <... futex resumed>) = 1 [ 114.908907][ T1654] loop0: detected capacity change from 0 to 512 [ 114.916999][ T1654] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 114.930031][ T1654] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1654] sendfile(6, 7, NULL, 140737974943952 [pid 1653] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1653] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1653] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1653] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1656]}, 88) = 1656 [pid 1653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1653] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1653] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1656 attached [pid 1656] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1656] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1656] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1656] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1653] <... futex resumed>) = 0 [pid 1656] <... futex resumed>) = 1 [pid 1653] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1653] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1656] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1656] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1653] <... futex resumed>) = 0 [pid 1656] <... futex resumed>) = 1 [pid 1656] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1653] exit_group(0 [pid 1656] <... futex resumed>) = ? [pid 1653] <... exit_group resumed>) = ? [pid 1656] +++ exited with 0 +++ [pid 1654] <... sendfile resumed>) = ? [pid 1654] +++ exited with 0 +++ [pid 1653] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1653, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./312", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./312/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./312/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./312/binderfs") = 0 umount2("./312/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./312/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./312/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./312/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./312/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./312/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./312") = 0 mkdir("./313", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1657 ./strace-static-x86_64: Process 1657 attached [pid 1657] set_robust_list(0x555556b826a0, 24) = 0 [pid 1657] chdir("./313") = 0 [pid 1657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1657] setpgid(0, 0) = 0 [pid 1657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1657] write(3, "1000", 4) = 4 [pid 1657] close(3) = 0 [pid 1657] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1657] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1657] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1657] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1657] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1657] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1657] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1658 attached [pid 1658] set_robust_list(0x7f96301a99a0, 24 [pid 1657] <... clone3 resumed> => {parent_tid=[1658]}, 88) = 1658 [pid 1658] <... set_robust_list resumed>) = 0 [pid 1657] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1657] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1657] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1658] memfd_create("syzkaller", 0) = 3 [pid 1658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1658] munmap(0x7f9627d89000, 262144) = 0 [pid 1658] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1658] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1658] close(3) = 0 [pid 1658] mkdir("./file0", 0777) = 0 [pid 1658] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1658] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1658] chdir("./file0") = 0 [pid 1658] ioctl(4, LOOP_CLR_FD) = 0 [pid 1658] close(4) = 0 [pid 1658] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1657] <... futex resumed>) = 0 [pid 1657] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1657] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1658] <... futex resumed>) = 1 [pid 1658] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1658] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1657] <... futex resumed>) = 0 [pid 1657] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1657] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1658] <... futex resumed>) = 1 [pid 1658] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1658] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1657] <... futex resumed>) = 0 [pid 1657] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1657] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1658] <... futex resumed>) = 1 [pid 1658] creat("./bus", 000) = 6 [pid 1658] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1657] <... futex resumed>) = 0 [pid 1657] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1657] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1658] <... futex resumed>) = 1 [pid 1658] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1658] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1657] <... futex resumed>) = 0 [pid 1657] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1657] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1658] open("./bus", O_RDONLY) = 7 [pid 1658] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1657] <... futex resumed>) = 0 [pid 1657] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1657] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1658] <... futex resumed>) = 1 [ 115.175062][ T1658] loop0: detected capacity change from 0 to 512 [ 115.183740][ T1658] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 115.196822][ T1658] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1658] sendfile(6, 7, NULL, 140737974943952 [pid 1657] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1657] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1657] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1657] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1657] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1657] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1657] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1660 attached => {parent_tid=[1660]}, 88) = 1660 [pid 1657] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1657] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1657] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1660] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1660] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1660] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1660] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1657] <... futex resumed>) = 0 [pid 1657] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1657] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1660] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1660] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1657] <... futex resumed>) = 0 [pid 1660] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1657] exit_group(0 [pid 1660] <... futex resumed>) = ? [pid 1657] <... exit_group resumed>) = ? [pid 1660] +++ exited with 0 +++ [pid 1658] <... sendfile resumed>) = ? [pid 1658] +++ exited with 0 +++ [pid 1657] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1657, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- umount2("./313", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./313/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./313/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./313/binderfs") = 0 umount2("./313/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./313/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./313/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./313/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./313/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./313/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./313") = 0 mkdir("./314", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1661 ./strace-static-x86_64: Process 1661 attached [pid 1661] set_robust_list(0x555556b826a0, 24) = 0 [pid 1661] chdir("./314") = 0 [pid 1661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1661] setpgid(0, 0) = 0 [pid 1661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1661] write(3, "1000", 4) = 4 [pid 1661] close(3) = 0 [pid 1661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1661] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1661] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1661] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1661] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1661] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1661] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1662]}, 88) = 1662 [pid 1661] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1661] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1661] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1662 attached [pid 1662] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1662] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1662] memfd_create("syzkaller", 0) = 3 [pid 1662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1662] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1662] munmap(0x7f9627d89000, 262144) = 0 [pid 1662] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1662] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1662] close(3) = 0 [pid 1662] mkdir("./file0", 0777) = 0 [pid 1662] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1662] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1662] chdir("./file0") = 0 [pid 1662] ioctl(4, LOOP_CLR_FD) = 0 [pid 1662] close(4) = 0 [pid 1662] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1661] <... futex resumed>) = 0 [pid 1661] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1661] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1662] <... futex resumed>) = 1 [pid 1662] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1662] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1661] <... futex resumed>) = 0 [pid 1661] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1661] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1662] <... futex resumed>) = 1 [pid 1662] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1662] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1661] <... futex resumed>) = 0 [pid 1661] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1661] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1662] <... futex resumed>) = 1 [pid 1662] creat("./bus", 000) = 6 [pid 1662] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1661] <... futex resumed>) = 0 [pid 1661] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1661] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1662] <... futex resumed>) = 1 [pid 1662] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1662] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1661] <... futex resumed>) = 0 [pid 1661] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1661] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1662] <... futex resumed>) = 1 [pid 1662] open("./bus", O_RDONLY) = 7 [pid 1662] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1661] <... futex resumed>) = 0 [pid 1661] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1661] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1662] <... futex resumed>) = 1 [ 115.491593][ T1662] loop0: detected capacity change from 0 to 512 [ 115.499438][ T1662] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 115.512345][ T1662] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1662] sendfile(6, 7, NULL, 140737974943952 [pid 1661] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1661] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1661] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1661] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1661] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1664]}, 88) = 1664 [pid 1661] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1661] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1661] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1664 attached [pid 1664] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1664] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1664] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1661] <... futex resumed>) = 0 [pid 1664] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1661] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1661] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1664] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1664] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1661] <... futex resumed>) = 0 [pid 1664] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1661] exit_group(0 [pid 1664] <... futex resumed>) = ? [pid 1661] <... exit_group resumed>) = ? [pid 1664] +++ exited with 0 +++ [pid 1662] <... sendfile resumed>) = ? [pid 1662] +++ exited with 0 +++ [pid 1661] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1661, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./314", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./314/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./314/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./314/binderfs") = 0 umount2("./314/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./314/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./314/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./314/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./314/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./314/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./314") = 0 mkdir("./315", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1665 ./strace-static-x86_64: Process 1665 attached [pid 1665] set_robust_list(0x555556b826a0, 24) = 0 [pid 1665] chdir("./315") = 0 [pid 1665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1665] setpgid(0, 0) = 0 [pid 1665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1665] write(3, "1000", 4) = 4 [pid 1665] close(3) = 0 [pid 1665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1665] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1665] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1665] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1665] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1665] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1666]}, 88) = 1666 [pid 1665] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1665] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1665] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1666 attached [pid 1666] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1666] memfd_create("syzkaller", 0) = 3 [pid 1666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1666] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1666] munmap(0x7f9627d89000, 262144) = 0 [pid 1666] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1666] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1666] close(3) = 0 [pid 1666] mkdir("./file0", 0777) = 0 [pid 1666] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1666] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1666] chdir("./file0") = 0 [pid 1666] ioctl(4, LOOP_CLR_FD) = 0 [pid 1666] close(4) = 0 [pid 1666] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1665] <... futex resumed>) = 0 [pid 1665] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1665] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1666] <... futex resumed>) = 1 [pid 1666] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1666] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1665] <... futex resumed>) = 0 [pid 1665] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1665] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1666] <... futex resumed>) = 1 [pid 1666] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1666] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1665] <... futex resumed>) = 0 [pid 1665] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1665] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1666] <... futex resumed>) = 1 [pid 1666] creat("./bus", 000) = 6 [pid 1666] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1665] <... futex resumed>) = 0 [pid 1665] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1665] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1666] <... futex resumed>) = 1 [pid 1666] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1666] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1665] <... futex resumed>) = 0 [pid 1665] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1665] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1666] <... futex resumed>) = 1 [pid 1666] open("./bus", O_RDONLY) = 7 [pid 1666] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1665] <... futex resumed>) = 0 [pid 1665] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1665] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1666] <... futex resumed>) = 1 [ 115.771558][ T1666] loop0: detected capacity change from 0 to 512 [ 115.780306][ T1666] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 115.794156][ T1666] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1666] sendfile(6, 7, NULL, 140737974943952 [pid 1665] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1665] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1665] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1665] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1665] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1669 attached => {parent_tid=[1669]}, 88) = 1669 [pid 1669] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1665] rt_sigprocmask(SIG_SETMASK, [], [pid 1669] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1665] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1669] <... futex resumed>) = 0 [pid 1665] <... futex resumed>) = 1 [pid 1665] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1669] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1669] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1665] <... futex resumed>) = 0 [pid 1665] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1665] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1669] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1669] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1665] <... futex resumed>) = 0 [pid 1669] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1665] exit_group(0 [pid 1669] <... futex resumed>) = ? [pid 1665] <... exit_group resumed>) = ? [pid 1669] +++ exited with 0 +++ [pid 1666] <... sendfile resumed>) = ? [pid 1666] +++ exited with 0 +++ [pid 1665] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1665, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./315", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./315/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./315/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./315/binderfs") = 0 umount2("./315/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./315/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./315/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./315/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./315/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./315/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./315") = 0 mkdir("./316", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1670 ./strace-static-x86_64: Process 1670 attached [pid 1670] set_robust_list(0x555556b826a0, 24) = 0 [pid 1670] chdir("./316") = 0 [pid 1670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1670] setpgid(0, 0) = 0 [pid 1670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1670] write(3, "1000", 4) = 4 [pid 1670] close(3) = 0 [pid 1670] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1670] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1670] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1670] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1670] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1670] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1670] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1671 attached => {parent_tid=[1671]}, 88) = 1671 [pid 1671] set_robust_list(0x7f96301a99a0, 24 [pid 1670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1670] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1670] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1671] <... set_robust_list resumed>) = 0 [pid 1671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1671] memfd_create("syzkaller", 0) = 3 [pid 1671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1671] munmap(0x7f9627d89000, 262144) = 0 [pid 1671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1671] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1671] close(3) = 0 [pid 1671] mkdir("./file0", 0777) = 0 [pid 1671] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1671] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1671] chdir("./file0") = 0 [pid 1671] ioctl(4, LOOP_CLR_FD) = 0 [pid 1671] close(4) = 0 [pid 1671] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1670] <... futex resumed>) = 0 [pid 1670] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1670] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1671] <... futex resumed>) = 1 [pid 1671] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1671] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1670] <... futex resumed>) = 0 [pid 1670] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1671] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1670] <... futex resumed>) = 0 [pid 1670] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1671] <... open resumed>) = 5 [pid 1671] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1670] <... futex resumed>) = 0 [pid 1670] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1670] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1671] creat("./bus", 000) = 6 [pid 1671] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1670] <... futex resumed>) = 0 [pid 1670] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1670] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1671] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1671] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1670] <... futex resumed>) = 0 [pid 1670] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1670] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1671] <... futex resumed>) = 1 [pid 1671] open("./bus", O_RDONLY) = 7 [pid 1671] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1670] <... futex resumed>) = 0 [pid 1670] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1670] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 116.085831][ T1671] loop0: detected capacity change from 0 to 512 [ 116.094040][ T1671] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 116.106992][ T1671] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1671] sendfile(6, 7, NULL, 140737974943952 [pid 1670] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1670] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1670] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1670] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1670] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1670] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1670] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1673]}, 88) = 1673 [pid 1670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1670] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1670] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1673 attached [pid 1673] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1673] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1673] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1673] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1670] <... futex resumed>) = 0 [pid 1670] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1670] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1673] <... futex resumed>) = 1 [pid 1673] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1673] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1670] <... futex resumed>) = 0 [pid 1673] <... futex resumed>) = 1 [pid 1673] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1670] exit_group(0 [pid 1673] <... futex resumed>) = ? [pid 1670] <... exit_group resumed>) = ? [pid 1673] +++ exited with 0 +++ [pid 1671] <... sendfile resumed>) = ? [pid 1671] +++ exited with 0 +++ [pid 1670] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1670, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./316", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./316/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./316/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./316/binderfs") = 0 umount2("./316/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./316/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./316/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./316/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./316/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./316/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./316") = 0 mkdir("./317", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1674 ./strace-static-x86_64: Process 1674 attached [pid 1674] set_robust_list(0x555556b826a0, 24) = 0 [pid 1674] chdir("./317") = 0 [pid 1674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1674] setpgid(0, 0) = 0 [pid 1674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1674] write(3, "1000", 4) = 4 [pid 1674] close(3) = 0 [pid 1674] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1674] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1674] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1674] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1674] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1674] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1674] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1675 attached => {parent_tid=[1675]}, 88) = 1675 [pid 1675] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1675] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1675] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1674] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1674] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1675] <... futex resumed>) = 0 [pid 1675] memfd_create("syzkaller", 0 [pid 1674] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1675] <... memfd_create resumed>) = 3 [pid 1675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1675] munmap(0x7f9627d89000, 262144) = 0 [pid 1675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1675] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1675] close(3) = 0 [pid 1675] mkdir("./file0", 0777) = 0 [pid 1675] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1675] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1675] chdir("./file0") = 0 [pid 1675] ioctl(4, LOOP_CLR_FD) = 0 [pid 1675] close(4) = 0 [pid 1675] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1674] <... futex resumed>) = 0 [pid 1675] <... futex resumed>) = 1 [pid 1674] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1675] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1675] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1675] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1674] <... futex resumed>) = 1 [pid 1674] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1674] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1674] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1675] <... futex resumed>) = 0 [pid 1675] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1675] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1674] <... futex resumed>) = 0 [pid 1674] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1674] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1675] <... futex resumed>) = 1 [pid 1675] creat("./bus", 000) = 6 [pid 1675] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1675] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1674] <... futex resumed>) = 0 [pid 1674] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1674] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1675] <... futex resumed>) = 0 [pid 1675] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1675] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1674] <... futex resumed>) = 0 [pid 1674] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1674] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1675] <... futex resumed>) = 1 [pid 1675] open("./bus", O_RDONLY) = 7 [pid 1675] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1674] <... futex resumed>) = 0 [pid 1674] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1674] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1675] <... futex resumed>) = 1 [ 116.405666][ T1675] loop0: detected capacity change from 0 to 512 [ 116.413645][ T1675] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 116.426870][ T1675] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1675] sendfile(6, 7, NULL, 140737974943952 [pid 1674] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1674] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1674] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1674] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1674] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1674] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1677 attached => {parent_tid=[1677]}, 88) = 1677 [pid 1674] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1674] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1674] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1677] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1677] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1677] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1674] <... futex resumed>) = 0 [pid 1677] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1674] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1674] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1677] <... futex resumed>) = 0 [pid 1677] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1677] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1674] <... futex resumed>) = 0 [pid 1677] <... futex resumed>) = 1 [pid 1677] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1674] exit_group(0 [pid 1677] <... futex resumed>) = ? [pid 1674] <... exit_group resumed>) = ? [pid 1677] +++ exited with 0 +++ [pid 1675] <... sendfile resumed>) = ? [pid 1675] +++ exited with 0 +++ [pid 1674] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1674, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./317", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./317/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./317/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./317/binderfs") = 0 umount2("./317/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./317/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./317/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./317/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./317/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./317/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./317") = 0 mkdir("./318", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1678 ./strace-static-x86_64: Process 1678 attached [pid 1678] set_robust_list(0x555556b826a0, 24) = 0 [pid 1678] chdir("./318") = 0 [pid 1678] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1678] setpgid(0, 0) = 0 [pid 1678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1678] write(3, "1000", 4) = 4 [pid 1678] close(3) = 0 [pid 1678] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1678] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1678] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1678] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1678] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1678] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1678] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1679]}, 88) = 1679 [pid 1678] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1678] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1679 attached ) = 0 [pid 1679] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1679] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1678] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1679] memfd_create("syzkaller", 0) = 3 [pid 1679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1679] munmap(0x7f9627d89000, 262144) = 0 [pid 1679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1679] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1679] close(3) = 0 [pid 1679] mkdir("./file0", 0777) = 0 [pid 1679] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1679] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1679] chdir("./file0") = 0 [pid 1679] ioctl(4, LOOP_CLR_FD) = 0 [pid 1679] close(4) = 0 [pid 1679] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1678] <... futex resumed>) = 0 [pid 1678] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1678] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1679] <... futex resumed>) = 1 [pid 1679] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1679] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1678] <... futex resumed>) = 0 [pid 1678] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1678] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1679] <... futex resumed>) = 1 [pid 1679] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1679] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1679] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1678] <... futex resumed>) = 0 [pid 1678] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1678] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1679] <... futex resumed>) = 0 [pid 1679] creat("./bus", 000) = 6 [pid 1679] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1678] <... futex resumed>) = 0 [pid 1678] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1678] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1679] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1679] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1678] <... futex resumed>) = 0 [pid 1678] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1678] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1679] <... futex resumed>) = 1 [pid 1679] open("./bus", O_RDONLY) = 7 [pid 1679] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1678] <... futex resumed>) = 0 [pid 1678] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1678] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1679] <... futex resumed>) = 1 [ 116.685591][ T1679] loop0: detected capacity change from 0 to 512 [ 116.695244][ T1679] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 116.708360][ T1679] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1679] sendfile(6, 7, NULL, 140737974943952 [pid 1678] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1678] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1678] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1678] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1678] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1678] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1681 attached => {parent_tid=[1681]}, 88) = 1681 [pid 1681] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1681] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1681] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1678] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1678] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1681] <... futex resumed>) = 0 [pid 1681] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1678] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1681] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1681] <... futex resumed>) = 0 [pid 1678] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1678] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1681] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1681] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1678] <... futex resumed>) = 0 [pid 1681] <... futex resumed>) = 1 [pid 1681] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1678] exit_group(0 [pid 1681] <... futex resumed>) = ? [pid 1678] <... exit_group resumed>) = ? [pid 1681] +++ exited with 0 +++ [pid 1679] <... sendfile resumed>) = ? [pid 1679] +++ exited with 0 +++ [pid 1678] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1678, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./318", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./318/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./318/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./318/binderfs") = 0 umount2("./318/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./318/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./318/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./318/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./318/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./318/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./318") = 0 mkdir("./319", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1683 ./strace-static-x86_64: Process 1683 attached [pid 1683] set_robust_list(0x555556b826a0, 24) = 0 [pid 1683] chdir("./319") = 0 [pid 1683] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1683] setpgid(0, 0) = 0 [pid 1683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1683] write(3, "1000", 4) = 4 [pid 1683] close(3) = 0 [pid 1683] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1683] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1683] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1683] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1683] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1683] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1683] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1684]}, 88) = 1684 ./strace-static-x86_64: Process 1684 attached [pid 1683] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1683] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1683] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1684] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1684] memfd_create("syzkaller", 0) = 3 [pid 1684] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1684] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1684] munmap(0x7f9627d89000, 262144) = 0 [pid 1684] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1684] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1684] close(3) = 0 [pid 1684] mkdir("./file0", 0777) = 0 [pid 1684] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1684] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1684] chdir("./file0") = 0 [pid 1684] ioctl(4, LOOP_CLR_FD) = 0 [pid 1684] close(4) = 0 [pid 1684] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1683] <... futex resumed>) = 0 [pid 1683] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1683] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1684] <... futex resumed>) = 1 [pid 1684] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1684] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1683] <... futex resumed>) = 0 [pid 1683] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1683] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1684] <... futex resumed>) = 1 [pid 1684] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1684] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1683] <... futex resumed>) = 0 [pid 1683] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1684] <... futex resumed>) = 1 [pid 1683] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1684] creat("./bus", 000) = 6 [pid 1684] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1683] <... futex resumed>) = 0 [pid 1683] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1684] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 1683] <... futex resumed>) = 0 [pid 1683] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1684] <... writev resumed>) = 1 [pid 1684] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1683] <... futex resumed>) = 0 [pid 1684] open("./bus", O_RDONLY [pid 1683] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1684] <... open resumed>) = 7 [pid 1683] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1684] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1683] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1684] <... futex resumed>) = 0 [pid 1683] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1684] sendfile(6, 7, NULL, 140737974943952 [pid 1683] <... futex resumed>) = 0 [ 116.999165][ T1684] loop0: detected capacity change from 0 to 512 [ 117.007301][ T1684] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 117.020631][ T1684] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1683] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1683] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1683] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1683] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1683] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1683] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1683] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1686 attached [pid 1686] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1683] <... clone3 resumed> => {parent_tid=[1686]}, 88) = 1686 [pid 1686] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1686] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1683] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1683] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1683] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1686] <... futex resumed>) = 0 [pid 1686] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1686] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1683] <... futex resumed>) = 0 [pid 1683] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1683] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1686] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1686] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1683] <... futex resumed>) = 0 [pid 1686] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1683] exit_group(0) = ? [pid 1686] <... futex resumed>) = ? [pid 1686] +++ exited with 0 +++ [pid 1684] <... sendfile resumed>) = ? [pid 1684] +++ exited with 0 +++ [pid 1683] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1683, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- umount2("./319", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./319/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./319/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./319/binderfs") = 0 umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./319/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./319/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./319/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./319") = 0 mkdir("./320", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1687 ./strace-static-x86_64: Process 1687 attached [pid 1687] set_robust_list(0x555556b826a0, 24) = 0 [pid 1687] chdir("./320") = 0 [pid 1687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1687] setpgid(0, 0) = 0 [pid 1687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1687] write(3, "1000", 4) = 4 [pid 1687] close(3) = 0 [pid 1687] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1687] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1687] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1687] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1687] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1687] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1687] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1688 attached [pid 1688] set_robust_list(0x7f96301a99a0, 24 [pid 1687] <... clone3 resumed> => {parent_tid=[1688]}, 88) = 1688 [pid 1688] <... set_robust_list resumed>) = 0 [pid 1687] rt_sigprocmask(SIG_SETMASK, [], [pid 1688] rt_sigprocmask(SIG_SETMASK, [], [pid 1687] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1687] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1687] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1688] memfd_create("syzkaller", 0) = 3 [pid 1688] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1688] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1688] munmap(0x7f9627d89000, 262144) = 0 [pid 1688] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1688] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1688] close(3) = 0 [pid 1688] mkdir("./file0", 0777) = 0 [pid 1688] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1688] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1688] chdir("./file0") = 0 [pid 1688] ioctl(4, LOOP_CLR_FD) = 0 [pid 1688] close(4) = 0 [pid 1688] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1687] <... futex resumed>) = 0 [pid 1687] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1687] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1688] <... futex resumed>) = 1 [pid 1688] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1688] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1687] <... futex resumed>) = 0 [pid 1687] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1687] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1688] <... futex resumed>) = 1 [pid 1688] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1688] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1687] <... futex resumed>) = 0 [pid 1687] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1687] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1688] <... futex resumed>) = 1 [pid 1688] creat("./bus", 000) = 6 [pid 1688] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1687] <... futex resumed>) = 0 [pid 1687] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1687] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1688] <... futex resumed>) = 1 [pid 1688] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1688] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1687] <... futex resumed>) = 0 [pid 1688] open("./bus", O_RDONLY [pid 1687] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... open resumed>) = 7 [pid 1687] <... futex resumed>) = 0 [pid 1688] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1687] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1688] <... futex resumed>) = 0 [pid 1687] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1688] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1687] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1687] <... futex resumed>) = 0 [pid 1688] sendfile(6, 7, NULL, 140737974943952 [ 117.325221][ T1688] loop0: detected capacity change from 0 to 512 [ 117.333227][ T1688] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 117.349705][ T1688] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1687] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1687] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1687] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1687] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1687] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1690 attached => {parent_tid=[1690]}, 88) = 1690 [pid 1687] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1687] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1687] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1690] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1690] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1690] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1687] <... futex resumed>) = 0 [pid 1687] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1687] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1690] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1690] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1687] <... futex resumed>) = 0 [pid 1690] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1687] exit_group(0) = ? [pid 1690] <... futex resumed>) = ? [pid 1690] +++ exited with 0 +++ [pid 1688] <... sendfile resumed>) = ? [pid 1688] +++ exited with 0 +++ [pid 1687] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1687, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./320", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./320/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./320/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./320/binderfs") = 0 umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./320/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./320/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./320/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./320") = 0 mkdir("./321", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1691 ./strace-static-x86_64: Process 1691 attached [pid 1691] set_robust_list(0x555556b826a0, 24) = 0 [pid 1691] chdir("./321") = 0 [pid 1691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1691] setpgid(0, 0) = 0 [pid 1691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1691] write(3, "1000", 4) = 4 [pid 1691] close(3) = 0 [pid 1691] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1691] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1691] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1691] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1691] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1691] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1692]}, 88) = 1692 [pid 1691] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1691] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1691] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1692 attached [pid 1692] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1692] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1692] memfd_create("syzkaller", 0) = 3 [pid 1692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1692] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1692] munmap(0x7f9627d89000, 262144) = 0 [pid 1692] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1692] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1692] close(3) = 0 [pid 1692] mkdir("./file0", 0777) = 0 [pid 1692] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1692] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1692] chdir("./file0") = 0 [pid 1692] ioctl(4, LOOP_CLR_FD) = 0 [pid 1692] close(4) = 0 [pid 1692] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1692] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1691] <... futex resumed>) = 0 [pid 1691] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1691] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1692] <... futex resumed>) = 0 [pid 1692] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1692] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1691] <... futex resumed>) = 0 [pid 1691] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1691] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1692] <... futex resumed>) = 1 [pid 1692] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1692] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1691] <... futex resumed>) = 0 [pid 1691] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1691] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1692] <... futex resumed>) = 1 [pid 1692] creat("./bus", 000) = 6 [pid 1692] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1691] <... futex resumed>) = 0 [pid 1691] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1691] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1692] <... futex resumed>) = 1 [pid 1692] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1692] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1691] <... futex resumed>) = 0 [pid 1691] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1691] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1692] <... futex resumed>) = 1 [pid 1692] open("./bus", O_RDONLY) = 7 [pid 1692] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1691] <... futex resumed>) = 0 [pid 1691] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1691] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1692] <... futex resumed>) = 1 [ 117.600510][ T1692] loop0: detected capacity change from 0 to 512 [ 117.608561][ T1692] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 117.621482][ T1692] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1692] sendfile(6, 7, NULL, 140737974943952 [pid 1691] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1691] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1691] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1691] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1694 attached => {parent_tid=[1694]}, 88) = 1694 [pid 1691] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1691] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1691] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1694] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1694] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1694] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1694] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1691] <... futex resumed>) = 0 [pid 1691] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1691] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1694] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1694] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1691] <... futex resumed>) = 0 [pid 1694] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1691] exit_group(0 [pid 1694] <... futex resumed>) = ? [pid 1691] <... exit_group resumed>) = ? [pid 1694] +++ exited with 0 +++ [pid 1692] <... sendfile resumed>) = ? [pid 1692] +++ exited with 0 +++ [pid 1691] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1691, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./321", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./321/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./321/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./321/binderfs") = 0 umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./321/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./321/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./321/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./321") = 0 mkdir("./322", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1696 ./strace-static-x86_64: Process 1696 attached [pid 1696] set_robust_list(0x555556b826a0, 24) = 0 [pid 1696] chdir("./322") = 0 [pid 1696] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1696] setpgid(0, 0) = 0 [pid 1696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1696] write(3, "1000", 4) = 4 [pid 1696] close(3) = 0 [pid 1696] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1696] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1696] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1696] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1696] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1696] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1696] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1696] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1697]}, 88) = 1697 ./strace-static-x86_64: Process 1697 attached [pid 1696] rt_sigprocmask(SIG_SETMASK, [], [pid 1697] set_robust_list(0x7f96301a99a0, 24 [pid 1696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1696] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1696] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1697] <... set_robust_list resumed>) = 0 [pid 1697] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1697] memfd_create("syzkaller", 0) = 3 [pid 1697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1697] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1697] munmap(0x7f9627d89000, 262144) = 0 [pid 1697] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1697] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1697] close(3) = 0 [pid 1697] mkdir("./file0", 0777) = 0 [pid 1697] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1697] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1697] chdir("./file0") = 0 [pid 1697] ioctl(4, LOOP_CLR_FD) = 0 [pid 1697] close(4) = 0 [pid 1697] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1696] <... futex resumed>) = 0 [pid 1696] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1696] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1697] <... futex resumed>) = 1 [pid 1697] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1697] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1696] <... futex resumed>) = 0 [pid 1696] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1696] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1697] <... futex resumed>) = 1 [pid 1697] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1697] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1696] <... futex resumed>) = 0 [pid 1696] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1697] <... futex resumed>) = 1 [pid 1696] <... futex resumed>) = 0 [pid 1697] creat("./bus", 000) = 6 [pid 1696] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1697] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1697] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1696] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1696] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1697] <... futex resumed>) = 0 [pid 1697] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1697] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1696] <... futex resumed>) = 0 [pid 1697] open("./bus", O_RDONLY [pid 1696] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1697] <... open resumed>) = 7 [pid 1696] <... futex resumed>) = 0 [pid 1697] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1696] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1697] <... futex resumed>) = 0 [pid 1696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1697] sendfile(6, 7, NULL, 140737974943952 [pid 1696] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 117.867888][ T1697] loop0: detected capacity change from 0 to 512 [ 117.879712][ T1697] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 117.893141][ T1697] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1696] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1696] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1696] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1696] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1696] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1696] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1696] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1699 attached => {parent_tid=[1699]}, 88) = 1699 [pid 1699] set_robust_list(0x7f9627dc89a0, 24 [pid 1696] rt_sigprocmask(SIG_SETMASK, [], [pid 1699] <... set_robust_list resumed>) = 0 [pid 1696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1696] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1699] rt_sigprocmask(SIG_SETMASK, [], [pid 1696] <... futex resumed>) = 0 [pid 1696] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1699] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1699] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1699] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1696] <... futex resumed>) = 0 [pid 1696] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1696] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1699] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1699] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1696] <... futex resumed>) = 0 [pid 1699] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1696] exit_group(0 [pid 1699] <... futex resumed>) = ? [pid 1696] <... exit_group resumed>) = ? [pid 1699] +++ exited with 0 +++ [pid 1697] <... sendfile resumed>) = ? [pid 1697] +++ exited with 0 +++ [pid 1696] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1696, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./322", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./322/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./322/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./322/binderfs") = 0 umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./322/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./322/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./322/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./322") = 0 mkdir("./323", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1700 ./strace-static-x86_64: Process 1700 attached [pid 1700] set_robust_list(0x555556b826a0, 24) = 0 [pid 1700] chdir("./323") = 0 [pid 1700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1700] setpgid(0, 0) = 0 [pid 1700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1700] write(3, "1000", 4) = 4 [pid 1700] close(3) = 0 [pid 1700] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1700] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1700] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1700] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1700] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1700] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1700] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1701]}, 88) = 1701 [pid 1700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1700] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1700] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1701 attached [pid 1701] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1701] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1701] memfd_create("syzkaller", 0) = 3 [pid 1701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1701] munmap(0x7f9627d89000, 262144) = 0 [pid 1701] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1701] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1701] close(3) = 0 [pid 1701] mkdir("./file0", 0777) = 0 [pid 1701] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1701] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1701] chdir("./file0") = 0 [pid 1701] ioctl(4, LOOP_CLR_FD) = 0 [pid 1701] close(4) = 0 [pid 1701] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1700] <... futex resumed>) = 0 [pid 1700] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1700] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1701] <... futex resumed>) = 1 [pid 1701] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1701] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1700] <... futex resumed>) = 0 [pid 1700] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1700] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1701] <... futex resumed>) = 1 [pid 1701] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1701] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1700] <... futex resumed>) = 0 [pid 1700] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1700] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1701] <... futex resumed>) = 1 [pid 1701] creat("./bus", 000) = 6 [pid 1701] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1700] <... futex resumed>) = 0 [pid 1700] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1700] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1701] <... futex resumed>) = 1 [pid 1701] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1701] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1700] <... futex resumed>) = 0 [pid 1700] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1700] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1701] <... futex resumed>) = 1 [pid 1701] open("./bus", O_RDONLY) = 7 [pid 1701] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1700] <... futex resumed>) = 0 [pid 1700] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1700] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1701] <... futex resumed>) = 1 [ 118.173474][ T1701] loop0: detected capacity change from 0 to 512 [ 118.182254][ T1701] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 118.195363][ T1701] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1701] sendfile(6, 7, NULL, 140737974943952 [pid 1700] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1700] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1700] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1700] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1700] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1703]}, 88) = 1703 [pid 1700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1700] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1700] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1703 attached [pid 1703] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1703] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1703] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1700] <... futex resumed>) = 0 [pid 1700] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1700] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1703] <... futex resumed>) = 1 [pid 1703] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1703] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1700] <... futex resumed>) = 0 [pid 1703] <... futex resumed>) = 1 [pid 1703] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1700] exit_group(0 [pid 1703] <... futex resumed>) = ? [pid 1700] <... exit_group resumed>) = ? [pid 1703] +++ exited with 0 +++ [pid 1701] <... sendfile resumed>) = ? [pid 1701] +++ exited with 0 +++ [pid 1700] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1700, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./323", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./323/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./323/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./323/binderfs") = 0 umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./323/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./323/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./323/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./323") = 0 mkdir("./324", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1704 ./strace-static-x86_64: Process 1704 attached [pid 1704] set_robust_list(0x555556b826a0, 24) = 0 [pid 1704] chdir("./324") = 0 [pid 1704] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1704] setpgid(0, 0) = 0 [pid 1704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1704] write(3, "1000", 4) = 4 [pid 1704] close(3) = 0 [pid 1704] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1704] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1704] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1704] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1704] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1704] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1704] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1705]}, 88) = 1705 [pid 1704] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1704] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1704] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1705 attached [pid 1705] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1705] memfd_create("syzkaller", 0) = 3 [pid 1705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1705] munmap(0x7f9627d89000, 262144) = 0 [pid 1705] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1705] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1705] close(3) = 0 [pid 1705] mkdir("./file0", 0777) = 0 [pid 1705] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1705] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1705] chdir("./file0") = 0 [pid 1705] ioctl(4, LOOP_CLR_FD) = 0 [pid 1705] close(4) = 0 [pid 1705] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1704] <... futex resumed>) = 0 [pid 1704] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1704] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1705] <... futex resumed>) = 1 [pid 1705] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1705] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1704] <... futex resumed>) = 0 [pid 1704] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1704] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1705] <... futex resumed>) = 1 [pid 1705] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1705] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1704] <... futex resumed>) = 0 [pid 1704] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1704] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1705] <... futex resumed>) = 1 [pid 1705] creat("./bus", 000) = 6 [pid 1705] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1704] <... futex resumed>) = 0 [pid 1704] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1704] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1705] <... futex resumed>) = 1 [pid 1705] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1705] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1704] <... futex resumed>) = 0 [pid 1704] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1704] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1705] <... futex resumed>) = 1 [pid 1705] open("./bus", O_RDONLY) = 7 [pid 1705] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1704] <... futex resumed>) = 0 [pid 1704] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1704] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1705] <... futex resumed>) = 1 [ 118.461987][ T1705] loop0: detected capacity change from 0 to 512 [ 118.472684][ T1705] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 118.486021][ T1705] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1705] sendfile(6, 7, NULL, 140737974943952 [pid 1704] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1704] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1704] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1704] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1704] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1707]}, 88) = 1707 [pid 1704] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1704] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1704] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1707 attached [pid 1707] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1707] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1707] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1707] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1704] <... futex resumed>) = 0 [pid 1704] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1704] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1707] <... futex resumed>) = 1 [pid 1707] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1707] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1704] <... futex resumed>) = 0 [pid 1707] <... futex resumed>) = 1 [pid 1707] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1704] exit_group(0) = ? [pid 1707] <... futex resumed>) = ? [pid 1705] <... sendfile resumed>) = ? [pid 1705] +++ exited with 0 +++ [pid 1707] +++ exited with 0 +++ [pid 1704] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1704, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./324", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./324/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./324/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./324/binderfs") = 0 umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./324/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./324/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./324/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./324") = 0 mkdir("./325", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1708 ./strace-static-x86_64: Process 1708 attached [pid 1708] set_robust_list(0x555556b826a0, 24) = 0 [pid 1708] chdir("./325") = 0 [pid 1708] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1708] setpgid(0, 0) = 0 [pid 1708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1708] write(3, "1000", 4) = 4 [pid 1708] close(3) = 0 [pid 1708] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1708] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1708] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1708] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1708] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1708] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1708] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1709 attached => {parent_tid=[1709]}, 88) = 1709 [pid 1708] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1708] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1708] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1709] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1709] memfd_create("syzkaller", 0) = 3 [pid 1709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1709] munmap(0x7f9627d89000, 262144) = 0 [pid 1709] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1709] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1709] close(3) = 0 [pid 1709] mkdir("./file0", 0777) = 0 [pid 1709] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1709] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1709] chdir("./file0") = 0 [pid 1709] ioctl(4, LOOP_CLR_FD) = 0 [pid 1709] close(4) = 0 [pid 1709] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1708] <... futex resumed>) = 0 [pid 1708] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1708] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1709] <... futex resumed>) = 1 [pid 1709] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1709] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1708] <... futex resumed>) = 0 [pid 1708] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1708] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1709] <... futex resumed>) = 1 [pid 1709] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1709] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1708] <... futex resumed>) = 0 [pid 1708] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1708] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1709] <... futex resumed>) = 1 [pid 1709] creat("./bus", 000) = 6 [pid 1709] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1708] <... futex resumed>) = 0 [pid 1708] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1708] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1709] <... futex resumed>) = 1 [pid 1709] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1709] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1708] <... futex resumed>) = 0 [pid 1708] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1708] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1709] <... futex resumed>) = 1 [pid 1709] open("./bus", O_RDONLY) = 7 [pid 1709] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1708] <... futex resumed>) = 0 [pid 1708] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1708] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 118.774246][ T1709] loop0: detected capacity change from 0 to 512 [ 118.784239][ T1709] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 118.799192][ T1709] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1709] sendfile(6, 7, NULL, 140737974943952 [pid 1708] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1708] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1708] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1708] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1708] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1708] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1708] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1712]}, 88) = 1712 ./strace-static-x86_64: Process 1712 attached [pid 1712] set_robust_list(0x7f9627dc89a0, 24 [pid 1708] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1712] <... set_robust_list resumed>) = 0 [pid 1708] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1712] rt_sigprocmask(SIG_SETMASK, [], [pid 1708] <... futex resumed>) = 0 [pid 1712] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1708] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1712] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1712] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1708] <... futex resumed>) = 0 [pid 1708] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1708] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1712] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1712] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1708] <... futex resumed>) = 0 [pid 1712] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1708] exit_group(0 [pid 1712] <... futex resumed>) = ? [pid 1708] <... exit_group resumed>) = ? [pid 1712] +++ exited with 0 +++ [pid 1709] <... sendfile resumed>) = ? [pid 1709] +++ exited with 0 +++ [pid 1708] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1708, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./325", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./325/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./325/binderfs") = 0 umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./325/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./325/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./325") = 0 mkdir("./326", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1713 ./strace-static-x86_64: Process 1713 attached [pid 1713] set_robust_list(0x555556b826a0, 24) = 0 [pid 1713] chdir("./326") = 0 [pid 1713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1713] setpgid(0, 0) = 0 [pid 1713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1713] write(3, "1000", 4) = 4 [pid 1713] close(3) = 0 [pid 1713] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1713] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1713] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1713] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1713] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1713] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1713] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1714 attached => {parent_tid=[1714]}, 88) = 1714 [pid 1714] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1714] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1714] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1713] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1713] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1714] <... futex resumed>) = 0 [pid 1714] memfd_create("syzkaller", 0) = 3 [pid 1714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1713] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1714] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1714] munmap(0x7f9627d89000, 262144) = 0 [pid 1714] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1714] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1714] close(3) = 0 [pid 1714] mkdir("./file0", 0777) = 0 [pid 1714] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1714] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1714] chdir("./file0") = 0 [pid 1714] ioctl(4, LOOP_CLR_FD) = 0 [pid 1714] close(4) = 0 [pid 1714] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1713] <... futex resumed>) = 0 [pid 1713] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1713] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1714] <... futex resumed>) = 1 [pid 1714] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1714] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1713] <... futex resumed>) = 0 [pid 1713] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1713] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1714] <... futex resumed>) = 1 [pid 1714] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1714] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1713] <... futex resumed>) = 0 [pid 1713] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1713] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1714] <... futex resumed>) = 1 [pid 1714] creat("./bus", 000) = 6 [pid 1714] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1713] <... futex resumed>) = 0 [pid 1713] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1713] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1714] <... futex resumed>) = 1 [pid 1714] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1714] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1713] <... futex resumed>) = 0 [pid 1713] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1713] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1714] <... futex resumed>) = 1 [pid 1714] open("./bus", O_RDONLY) = 7 [pid 1714] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1713] <... futex resumed>) = 0 [pid 1713] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1713] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1714] <... futex resumed>) = 1 [ 119.100600][ T1714] loop0: detected capacity change from 0 to 512 [ 119.108887][ T1714] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 119.121891][ T1714] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1714] sendfile(6, 7, NULL, 140737974943952 [pid 1713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1713] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1713] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1713] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1713] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1713] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1717 attached [pid 1717] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1717] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1717] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1713] <... clone3 resumed> => {parent_tid=[1717]}, 88) = 1717 [pid 1713] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1713] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1713] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1717] <... futex resumed>) = 0 [pid 1717] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1717] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1713] <... futex resumed>) = 0 [pid 1713] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1713] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1717] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1717] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1713] <... futex resumed>) = 0 [pid 1717] <... futex resumed>) = 1 [pid 1717] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1713] exit_group(0 [pid 1717] <... futex resumed>) = ? [pid 1713] <... exit_group resumed>) = ? [pid 1717] +++ exited with 0 +++ [pid 1714] <... sendfile resumed>) = ? [pid 1714] +++ exited with 0 +++ [pid 1713] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1713, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./326/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./326/binderfs") = 0 umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./326/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./326/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./326") = 0 mkdir("./327", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1718 ./strace-static-x86_64: Process 1718 attached [pid 1718] set_robust_list(0x555556b826a0, 24) = 0 [pid 1718] chdir("./327") = 0 [pid 1718] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1718] setpgid(0, 0) = 0 [pid 1718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1718] write(3, "1000", 4) = 4 [pid 1718] close(3) = 0 [pid 1718] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1718] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1718] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1718] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1718] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1718] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1719]}, 88) = 1719 [pid 1718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1718] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1718] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1719 attached [pid 1719] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1719] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1719] memfd_create("syzkaller", 0) = 3 [pid 1719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1719] munmap(0x7f9627d89000, 262144) = 0 [pid 1719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1719] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1719] close(3) = 0 [pid 1719] mkdir("./file0", 0777) = 0 [pid 1719] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1719] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1719] chdir("./file0") = 0 [pid 1719] ioctl(4, LOOP_CLR_FD) = 0 [pid 1719] close(4) = 0 [pid 1719] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1718] <... futex resumed>) = 0 [pid 1718] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1718] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1719] <... futex resumed>) = 1 [pid 1719] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1719] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1718] <... futex resumed>) = 0 [pid 1718] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1718] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1719] <... futex resumed>) = 1 [pid 1719] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1719] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1718] <... futex resumed>) = 0 [pid 1718] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1718] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1719] creat("./bus", 000) = 6 [pid 1719] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1718] <... futex resumed>) = 0 [pid 1718] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1718] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1719] <... futex resumed>) = 1 [pid 1719] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1719] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1718] <... futex resumed>) = 0 [pid 1718] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1718] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1719] <... futex resumed>) = 1 [pid 1719] open("./bus", O_RDONLY) = 7 [pid 1719] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1718] <... futex resumed>) = 0 [pid 1718] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1718] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1719] <... futex resumed>) = 1 [ 119.412183][ T1719] loop0: detected capacity change from 0 to 512 [ 119.420283][ T1719] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 119.433260][ T1719] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1719] sendfile(6, 7, NULL, 140737974943952 [pid 1718] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1718] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1718] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1718] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1721]}, 88) = 1721 [pid 1718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1718] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1718] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1721 attached [pid 1721] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1721] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1721] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1721] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1718] <... futex resumed>) = 0 [pid 1718] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1718] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1721] <... futex resumed>) = 1 [pid 1721] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1721] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1718] <... futex resumed>) = 0 [pid 1721] <... futex resumed>) = 1 [pid 1721] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1718] exit_group(0 [pid 1721] <... futex resumed>) = ? [pid 1718] <... exit_group resumed>) = ? [pid 1721] +++ exited with 0 +++ [pid 1719] <... sendfile resumed>) = ? [pid 1719] +++ exited with 0 +++ [pid 1718] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1718, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./327/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./327/binderfs") = 0 umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./327/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./327/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./327") = 0 mkdir("./328", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1722 ./strace-static-x86_64: Process 1722 attached [pid 1722] set_robust_list(0x555556b826a0, 24) = 0 [pid 1722] chdir("./328") = 0 [pid 1722] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1722] setpgid(0, 0) = 0 [pid 1722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1722] write(3, "1000", 4) = 4 [pid 1722] close(3) = 0 [pid 1722] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1722] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1722] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1722] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1722] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1722] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1722] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1723]}, 88) = 1723 ./strace-static-x86_64: Process 1723 attached [pid 1722] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1722] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1722] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1723] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1723] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1723] memfd_create("syzkaller", 0) = 3 [pid 1723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1723] munmap(0x7f9627d89000, 262144) = 0 [pid 1723] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1723] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1723] close(3) = 0 [pid 1723] mkdir("./file0", 0777) = 0 [pid 1723] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1723] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1723] chdir("./file0") = 0 [pid 1723] ioctl(4, LOOP_CLR_FD) = 0 [pid 1723] close(4) = 0 [pid 1723] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1723] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1722] <... futex resumed>) = 0 [pid 1722] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1722] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1723] <... futex resumed>) = 0 [pid 1723] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1723] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1722] <... futex resumed>) = 0 [pid 1722] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1722] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1723] <... futex resumed>) = 1 [pid 1723] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1723] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1722] <... futex resumed>) = 0 [pid 1722] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1722] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1723] <... futex resumed>) = 1 [pid 1723] creat("./bus", 000) = 6 [pid 1723] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1722] <... futex resumed>) = 0 [pid 1722] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1722] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1723] <... futex resumed>) = 1 [pid 1723] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1723] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1722] <... futex resumed>) = 0 [pid 1722] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1722] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1723] <... futex resumed>) = 1 [pid 1723] open("./bus", O_RDONLY) = 7 [pid 1723] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1722] <... futex resumed>) = 0 [pid 1722] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1722] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1723] <... futex resumed>) = 1 [ 119.708159][ T1723] loop0: detected capacity change from 0 to 512 [ 119.716397][ T1723] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 119.729549][ T1723] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1723] sendfile(6, 7, NULL, 140737974943952 [pid 1722] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1722] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1722] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1722] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1722] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1722] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1722] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1725 attached => {parent_tid=[1725]}, 88) = 1725 [pid 1722] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1722] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1722] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1725] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1725] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1725] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1722] <... futex resumed>) = 0 [pid 1722] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1722] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1725] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1725] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1722] <... futex resumed>) = 0 [pid 1725] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1722] exit_group(0 [pid 1725] <... futex resumed>) = ? [pid 1722] <... exit_group resumed>) = ? [pid 1725] +++ exited with 0 +++ [pid 1723] <... sendfile resumed>) = ? [pid 1723] +++ exited with 0 +++ [pid 1722] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1722, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./328/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./328/binderfs") = 0 umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./328/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./328/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./328") = 0 mkdir("./329", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1727 ./strace-static-x86_64: Process 1727 attached [pid 1727] set_robust_list(0x555556b826a0, 24) = 0 [pid 1727] chdir("./329") = 0 [pid 1727] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1727] setpgid(0, 0) = 0 [pid 1727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1727] write(3, "1000", 4) = 4 [pid 1727] close(3) = 0 [pid 1727] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1727] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1727] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1727] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1727] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1727] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1728]}, 88) = 1728 [pid 1727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1728 attached [pid 1728] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1728] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1728] memfd_create("syzkaller", 0) = 3 [pid 1728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1728] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1728] munmap(0x7f9627d89000, 262144) = 0 [pid 1728] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1728] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1728] close(3) = 0 [pid 1728] mkdir("./file0", 0777) = 0 [pid 1728] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1728] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1728] chdir("./file0") = 0 [pid 1728] ioctl(4, LOOP_CLR_FD) = 0 [pid 1728] close(4) = 0 [pid 1728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1727] <... futex resumed>) = 0 [pid 1727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1728] <... futex resumed>) = 1 [pid 1728] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1727] <... futex resumed>) = 0 [pid 1727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1728] <... futex resumed>) = 1 [pid 1728] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1727] <... futex resumed>) = 0 [pid 1727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1728] <... futex resumed>) = 1 [pid 1728] creat("./bus", 000) = 6 [pid 1728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1728] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1727] <... futex resumed>) = 0 [pid 1727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1728] <... futex resumed>) = 0 [pid 1728] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1727] <... futex resumed>) = 0 [pid 1727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1728] <... futex resumed>) = 1 [pid 1728] open("./bus", O_RDONLY) = 7 [pid 1728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1727] <... futex resumed>) = 0 [pid 1727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1728] <... futex resumed>) = 1 [ 120.000907][ T1728] loop0: detected capacity change from 0 to 512 [ 120.008973][ T1728] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 120.022046][ T1728] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1728] sendfile(6, 7, NULL, 140737974943952 [pid 1727] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1727] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1727] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1727] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1730]}, 88) = 1730 [pid 1727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1727] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1727] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1730 attached [pid 1730] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1730] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1730] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1730] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1727] <... futex resumed>) = 0 [pid 1730] <... futex resumed>) = 1 [pid 1727] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1727] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1730] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1730] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1727] <... futex resumed>) = 0 [pid 1730] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1727] exit_group(0 [pid 1730] <... futex resumed>) = ? [pid 1727] <... exit_group resumed>) = ? [pid 1730] +++ exited with 0 +++ [pid 1728] <... sendfile resumed>) = ? [pid 1728] +++ exited with 0 +++ [pid 1727] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1727, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./329/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./329/binderfs") = 0 umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./329/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./329/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./329") = 0 mkdir("./330", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1731 ./strace-static-x86_64: Process 1731 attached [pid 1731] set_robust_list(0x555556b826a0, 24) = 0 [pid 1731] chdir("./330") = 0 [pid 1731] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1731] setpgid(0, 0) = 0 [pid 1731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1731] write(3, "1000", 4) = 4 [pid 1731] close(3) = 0 [pid 1731] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1731] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1731] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1731] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1731] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1731] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1731] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1732 attached => {parent_tid=[1732]}, 88) = 1732 [pid 1731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1731] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1731] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1732] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1732] memfd_create("syzkaller", 0) = 3 [pid 1732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1732] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1732] munmap(0x7f9627d89000, 262144) = 0 [pid 1732] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1732] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1732] close(3) = 0 [pid 1732] mkdir("./file0", 0777) = 0 [pid 1732] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1732] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1732] chdir("./file0") = 0 [pid 1732] ioctl(4, LOOP_CLR_FD) = 0 [pid 1732] close(4) = 0 [pid 1732] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1732] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1731] <... futex resumed>) = 0 [pid 1731] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1731] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1732] <... futex resumed>) = 0 [pid 1732] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1732] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1731] <... futex resumed>) = 0 [pid 1731] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1732] <... futex resumed>) = 1 [pid 1731] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1732] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1732] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1731] <... futex resumed>) = 0 [pid 1731] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1731] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1732] <... futex resumed>) = 1 [pid 1732] creat("./bus", 000) = 6 [pid 1732] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1731] <... futex resumed>) = 0 [pid 1731] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1731] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1732] <... futex resumed>) = 1 [pid 1732] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1732] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1731] <... futex resumed>) = 0 [pid 1731] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1731] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1732] <... futex resumed>) = 1 [pid 1732] open("./bus", O_RDONLY) = 7 [pid 1732] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1731] <... futex resumed>) = 0 [pid 1731] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1731] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1732] <... futex resumed>) = 1 [ 120.294496][ T1732] loop0: detected capacity change from 0 to 512 [ 120.303417][ T1732] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 120.316394][ T1732] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1732] sendfile(6, 7, NULL, 140737974943952 [pid 1731] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1731] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1731] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1731] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1731] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1734 attached => {parent_tid=[1734]}, 88) = 1734 [pid 1734] set_robust_list(0x7f9627dc89a0, 24 [pid 1731] rt_sigprocmask(SIG_SETMASK, [], [pid 1734] <... set_robust_list resumed>) = 0 [pid 1731] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1731] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1734] rt_sigprocmask(SIG_SETMASK, [], [pid 1731] <... futex resumed>) = 0 [pid 1734] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1731] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1734] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1734] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1731] <... futex resumed>) = 0 [pid 1734] <... futex resumed>) = 1 [pid 1731] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1734] sendmsg(-1, 0x20000000, 0 [pid 1731] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1734] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1734] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1731] <... futex resumed>) = 0 [pid 1734] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1731] exit_group(0 [pid 1734] <... futex resumed>) = ? [pid 1731] <... exit_group resumed>) = ? [pid 1734] +++ exited with 0 +++ [pid 1732] <... sendfile resumed>) = ? [pid 1732] +++ exited with 0 +++ [pid 1731] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1731, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./330/binderfs") = 0 umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./330/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./330/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./330") = 0 mkdir("./331", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1735 ./strace-static-x86_64: Process 1735 attached [pid 1735] set_robust_list(0x555556b826a0, 24) = 0 [pid 1735] chdir("./331") = 0 [pid 1735] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1735] setpgid(0, 0) = 0 [pid 1735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1735] write(3, "1000", 4) = 4 [pid 1735] close(3) = 0 [pid 1735] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1735] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1735] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1735] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1735] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1735] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1736]}, 88) = 1736 [pid 1735] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1735] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1736 attached [pid 1736] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1736] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1736] memfd_create("syzkaller", 0) = 3 [pid 1736] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1736] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1736] munmap(0x7f9627d89000, 262144) = 0 [pid 1736] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1736] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1736] close(3) = 0 [pid 1736] mkdir("./file0", 0777) = 0 [pid 1736] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1736] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1736] chdir("./file0") = 0 [pid 1736] ioctl(4, LOOP_CLR_FD) = 0 [pid 1736] close(4) = 0 [pid 1736] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] <... futex resumed>) = 1 [pid 1736] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1736] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] <... futex resumed>) = 1 [pid 1736] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1736] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] <... futex resumed>) = 1 [pid 1736] creat("./bus", 000) = 6 [pid 1736] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] <... futex resumed>) = 1 [pid 1736] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1736] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] <... futex resumed>) = 1 [pid 1736] open("./bus", O_RDONLY) = 7 [pid 1736] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1736] <... futex resumed>) = 1 [ 120.590991][ T1736] loop0: detected capacity change from 0 to 512 [ 120.599366][ T1736] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 120.612827][ T1736] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1736] sendfile(6, 7, NULL, 140737974943952 [pid 1735] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1735] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1735] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1735] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1735] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1738]}, 88) = 1738 ./strace-static-x86_64: Process 1738 attached [pid 1738] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1738] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1738] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1735] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1735] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1735] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1738] <... futex resumed>) = 0 [pid 1738] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1738] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1735] <... futex resumed>) = 0 [pid 1735] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1735] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1738] <... futex resumed>) = 1 [pid 1738] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1738] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1735] <... futex resumed>) = 0 [pid 1738] <... futex resumed>) = 1 [pid 1738] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1735] exit_group(0 [pid 1738] <... futex resumed>) = ? [pid 1735] <... exit_group resumed>) = ? [pid 1738] +++ exited with 0 +++ [pid 1736] <... sendfile resumed>) = ? [pid 1736] +++ exited with 0 +++ [pid 1735] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1735, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./331/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./331/binderfs") = 0 umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./331/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./331") = 0 mkdir("./332", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1740 ./strace-static-x86_64: Process 1740 attached [pid 1740] set_robust_list(0x555556b826a0, 24) = 0 [pid 1740] chdir("./332") = 0 [pid 1740] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1740] setpgid(0, 0) = 0 [pid 1740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1740] write(3, "1000", 4) = 4 [pid 1740] close(3) = 0 [pid 1740] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1740] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1740] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1740] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1740] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1740] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1740] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1741]}, 88) = 1741 [pid 1740] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1740] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1740] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1741 attached [pid 1741] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1741] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1741] memfd_create("syzkaller", 0) = 3 [pid 1741] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1741] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1741] munmap(0x7f9627d89000, 262144) = 0 [pid 1741] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1741] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1741] close(3) = 0 [pid 1741] mkdir("./file0", 0777) = 0 [pid 1741] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1741] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1741] chdir("./file0") = 0 [pid 1741] ioctl(4, LOOP_CLR_FD) = 0 [pid 1741] close(4) = 0 [pid 1741] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1740] <... futex resumed>) = 0 [pid 1740] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1740] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1741] <... futex resumed>) = 1 [pid 1741] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1741] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1740] <... futex resumed>) = 0 [pid 1740] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1740] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1741] <... futex resumed>) = 1 [pid 1741] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1741] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1740] <... futex resumed>) = 0 [pid 1740] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1740] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1741] <... futex resumed>) = 1 [pid 1741] creat("./bus", 000) = 6 [pid 1741] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1740] <... futex resumed>) = 0 [pid 1740] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1741] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 1740] <... futex resumed>) = 0 [pid 1740] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1741] <... writev resumed>) = 1 [pid 1741] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1740] <... futex resumed>) = 0 [pid 1741] open("./bus", O_RDONLY [pid 1740] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1740] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1741] <... open resumed>) = 7 [pid 1741] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1740] <... futex resumed>) = 0 [pid 1740] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1740] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1741] <... futex resumed>) = 1 [ 120.872839][ T1741] loop0: detected capacity change from 0 to 512 [ 120.886029][ T1741] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 120.901977][ T1741] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1741] sendfile(6, 7, NULL, 140737974943952 [pid 1740] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1740] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1740] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1740] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1740] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1740] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1743]}, 88) = 1743 [pid 1740] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1740] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1740] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1743 attached [pid 1743] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1743] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1743] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1743] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1740] <... futex resumed>) = 0 [pid 1740] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1740] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1743] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1743] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1740] <... futex resumed>) = 0 [pid 1743] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1740] exit_group(0) = ? [pid 1743] <... futex resumed>) = ? [pid 1741] <... sendfile resumed>) = ? [pid 1743] +++ exited with 0 +++ [pid 1741] +++ exited with 0 +++ [pid 1740] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1740, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./332/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./332/binderfs") = 0 umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./332/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./332/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./332") = 0 mkdir("./333", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1744 ./strace-static-x86_64: Process 1744 attached [pid 1744] set_robust_list(0x555556b826a0, 24) = 0 [pid 1744] chdir("./333") = 0 [pid 1744] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1744] setpgid(0, 0) = 0 [pid 1744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1744] write(3, "1000", 4) = 4 [pid 1744] close(3) = 0 [pid 1744] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1744] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1744] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1744] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1744] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1744] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1744] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1745 attached => {parent_tid=[1745]}, 88) = 1745 [pid 1745] set_robust_list(0x7f96301a99a0, 24 [pid 1744] rt_sigprocmask(SIG_SETMASK, [], [pid 1745] <... set_robust_list resumed>) = 0 [pid 1744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1745] rt_sigprocmask(SIG_SETMASK, [], [pid 1744] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1745] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1744] <... futex resumed>) = 0 [pid 1744] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1745] memfd_create("syzkaller", 0) = 3 [pid 1745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1745] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1745] munmap(0x7f9627d89000, 262144) = 0 [pid 1745] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1745] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1745] close(3) = 0 [pid 1745] mkdir("./file0", 0777) = 0 [pid 1745] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1745] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1745] chdir("./file0") = 0 [pid 1745] ioctl(4, LOOP_CLR_FD) = 0 [pid 1745] close(4) = 0 [pid 1745] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1744] <... futex resumed>) = 0 [pid 1744] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1744] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1745] <... futex resumed>) = 1 [pid 1745] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1745] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1744] <... futex resumed>) = 0 [pid 1744] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1744] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1745] <... futex resumed>) = 1 [pid 1745] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1745] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1744] <... futex resumed>) = 0 [pid 1744] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1744] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1745] <... futex resumed>) = 1 [pid 1745] creat("./bus", 000) = 6 [pid 1745] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1744] <... futex resumed>) = 0 [pid 1744] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1744] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1745] <... futex resumed>) = 1 [pid 1745] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1745] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1744] <... futex resumed>) = 0 [pid 1745] <... futex resumed>) = 1 [pid 1744] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1744] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1745] open("./bus", O_RDONLY) = 7 [pid 1745] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1744] <... futex resumed>) = 0 [pid 1744] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1744] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 121.172108][ T1745] loop0: detected capacity change from 0 to 512 [ 121.180238][ T1745] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 121.194629][ T1745] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1745] sendfile(6, 7, NULL, 140737974943952 [pid 1744] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1744] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1744] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1744] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1744] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1747]}, 88) = 1747 ./strace-static-x86_64: Process 1747 attached [pid 1744] rt_sigprocmask(SIG_SETMASK, [], [pid 1747] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1747] rt_sigprocmask(SIG_SETMASK, [], [pid 1744] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1744] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1747] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1747] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1747] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1744] <... futex resumed>) = 0 [pid 1747] <... futex resumed>) = 1 [pid 1744] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1747] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1747] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1747] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1744] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1744] exit_group(0 [pid 1747] <... futex resumed>) = ? [pid 1744] <... exit_group resumed>) = ? [pid 1747] +++ exited with 0 +++ [pid 1745] <... sendfile resumed>) = ? [pid 1745] +++ exited with 0 +++ [pid 1744] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1744, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./333/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./333/binderfs") = 0 umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./333/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./333/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./333") = 0 mkdir("./334", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1748 ./strace-static-x86_64: Process 1748 attached [pid 1748] set_robust_list(0x555556b826a0, 24) = 0 [pid 1748] chdir("./334") = 0 [pid 1748] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1748] setpgid(0, 0) = 0 [pid 1748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1748] write(3, "1000", 4) = 4 [pid 1748] close(3) = 0 [pid 1748] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1748] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1748] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1748] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1748] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1748] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1748] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1749]}, 88) = 1749 ./strace-static-x86_64: Process 1749 attached [pid 1748] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1748] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1748] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1749] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1749] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1749] memfd_create("syzkaller", 0) = 3 [pid 1749] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1749] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1749] munmap(0x7f9627d89000, 262144) = 0 [pid 1749] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1749] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1749] close(3) = 0 [pid 1749] mkdir("./file0", 0777) = 0 [pid 1749] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1749] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1749] chdir("./file0") = 0 [pid 1749] ioctl(4, LOOP_CLR_FD) = 0 [pid 1749] close(4) = 0 [pid 1749] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1748] <... futex resumed>) = 0 [pid 1748] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1748] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1749] <... futex resumed>) = 1 [pid 1749] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1749] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1748] <... futex resumed>) = 0 [pid 1748] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1748] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1749] <... futex resumed>) = 1 [pid 1749] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1749] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1748] <... futex resumed>) = 0 [pid 1748] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1748] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1749] <... futex resumed>) = 1 [pid 1749] creat("./bus", 000) = 6 [pid 1749] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1748] <... futex resumed>) = 0 [pid 1748] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1748] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1749] <... futex resumed>) = 1 [pid 1749] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1749] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1749] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1748] <... futex resumed>) = 0 [pid 1748] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1748] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1749] <... futex resumed>) = 0 [pid 1749] open("./bus", O_RDONLY) = 7 [pid 1749] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1748] <... futex resumed>) = 0 [pid 1748] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1748] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1749] <... futex resumed>) = 1 [ 121.479590][ T1749] loop0: detected capacity change from 0 to 512 [ 121.487727][ T1749] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 121.501936][ T1749] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1749] sendfile(6, 7, NULL, 140737974943952 [pid 1748] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1748] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1748] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1748] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1748] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1751 attached [pid 1751] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1751] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1751] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1748] <... clone3 resumed> => {parent_tid=[1751]}, 88) = 1751 [pid 1748] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1748] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1751] <... futex resumed>) = 0 [pid 1748] <... futex resumed>) = 1 [pid 1751] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1748] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1751] <... mmap resumed>) = 0x20000000 [pid 1751] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1748] <... futex resumed>) = 0 [pid 1748] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1748] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1751] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1751] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1748] <... futex resumed>) = 0 [pid 1751] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1748] exit_group(0 [pid 1751] <... futex resumed>) = ? [pid 1748] <... exit_group resumed>) = ? [pid 1751] +++ exited with 0 +++ [pid 1749] <... sendfile resumed>) = ? [pid 1749] +++ exited with 0 +++ [pid 1748] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1748, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./334/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./334/binderfs") = 0 umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./334/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./334/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./334") = 0 mkdir("./335", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1752 ./strace-static-x86_64: Process 1752 attached [pid 1752] set_robust_list(0x555556b826a0, 24) = 0 [pid 1752] chdir("./335") = 0 [pid 1752] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1752] setpgid(0, 0) = 0 [pid 1752] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1752] write(3, "1000", 4) = 4 [pid 1752] close(3) = 0 [pid 1752] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1752] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1752] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1752] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1752] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1752] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1752] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1752] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1753]}, 88) = 1753 [pid 1752] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1752] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1752] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1753 attached [pid 1753] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1753] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1753] memfd_create("syzkaller", 0) = 3 [pid 1753] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1753] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1753] munmap(0x7f9627d89000, 262144) = 0 [pid 1753] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1753] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1753] close(3) = 0 [pid 1753] mkdir("./file0", 0777) = 0 [pid 1753] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1753] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1753] chdir("./file0") = 0 [pid 1753] ioctl(4, LOOP_CLR_FD) = 0 [pid 1753] close(4) = 0 [pid 1753] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1752] <... futex resumed>) = 0 [pid 1752] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1752] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1753] <... futex resumed>) = 1 [pid 1753] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1753] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1752] <... futex resumed>) = 0 [pid 1752] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1752] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1753] <... futex resumed>) = 1 [pid 1753] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1753] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1752] <... futex resumed>) = 0 [pid 1752] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1752] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1753] <... futex resumed>) = 1 [pid 1753] creat("./bus", 000) = 6 [pid 1753] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1752] <... futex resumed>) = 0 [pid 1752] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1752] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1753] <... futex resumed>) = 1 [pid 1753] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1753] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1752] <... futex resumed>) = 0 [pid 1753] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1752] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1753] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1752] <... futex resumed>) = 0 [pid 1753] open("./bus", O_RDONLY [pid 1752] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1753] <... open resumed>) = 7 [pid 1753] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1752] <... futex resumed>) = 0 [pid 1753] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1752] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1753] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1752] <... futex resumed>) = 0 [pid 1753] sendfile(6, 7, NULL, 140737974943952 [ 121.762630][ T1753] loop0: detected capacity change from 0 to 512 [ 121.772383][ T1753] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 121.785808][ T1753] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1752] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1752] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1752] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1752] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1752] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1752] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1756]}, 88) = 1756 [pid 1752] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1752] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1752] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1756 attached [pid 1756] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1756] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1756] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1756] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1752] <... futex resumed>) = 0 [pid 1752] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1752] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1756] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1756] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1752] <... futex resumed>) = 0 [pid 1756] <... futex resumed>) = 1 [pid 1756] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1752] exit_group(0 [pid 1756] <... futex resumed>) = ? [pid 1752] <... exit_group resumed>) = ? [pid 1756] +++ exited with 0 +++ [pid 1753] <... sendfile resumed>) = ? [pid 1753] +++ exited with 0 +++ [pid 1752] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1752, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./335/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./335/binderfs") = 0 umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./335/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./335/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./335") = 0 mkdir("./336", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1757 ./strace-static-x86_64: Process 1757 attached [pid 1757] set_robust_list(0x555556b826a0, 24) = 0 [pid 1757] chdir("./336") = 0 [pid 1757] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1757] setpgid(0, 0) = 0 [pid 1757] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1757] write(3, "1000", 4) = 4 [pid 1757] close(3) = 0 [pid 1757] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1757] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1757] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1757] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1757] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1757] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1757] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1757] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1758]}, 88) = 1758 [pid 1757] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1757] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1757] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1758 attached [pid 1758] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1758] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1758] memfd_create("syzkaller", 0) = 3 [pid 1758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1758] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1758] munmap(0x7f9627d89000, 262144) = 0 [pid 1758] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1758] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1758] close(3) = 0 [pid 1758] mkdir("./file0", 0777) = 0 [pid 1758] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1758] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1758] chdir("./file0") = 0 [pid 1758] ioctl(4, LOOP_CLR_FD) = 0 [pid 1758] close(4) = 0 [pid 1758] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1758] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1757] <... futex resumed>) = 0 [pid 1757] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1757] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1758] <... futex resumed>) = 0 [pid 1758] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1758] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] <... futex resumed>) = 0 [pid 1757] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1757] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1758] <... futex resumed>) = 1 [pid 1758] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1758] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1757] <... futex resumed>) = 0 [pid 1757] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1757] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1758] <... futex resumed>) = 1 [pid 1758] creat("./bus", 000) = 6 [pid 1758] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1757] <... futex resumed>) = 0 [pid 1757] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1757] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1758] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1758] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1757] <... futex resumed>) = 0 [pid 1758] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1757] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1757] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1758] open("./bus", O_RDONLY) = 7 [pid 1758] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1757] <... futex resumed>) = 0 [pid 1757] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1757] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 122.068583][ T1758] loop0: detected capacity change from 0 to 512 [ 122.076965][ T1758] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 122.090136][ T1758] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1758] sendfile(6, 7, NULL, 140737974943952 [pid 1757] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1757] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1757] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1757] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1757] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1757] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1757] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1757] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1760 attached => {parent_tid=[1760]}, 88) = 1760 [pid 1757] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1757] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1757] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1760] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1760] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1760] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1760] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1757] <... futex resumed>) = 0 [pid 1757] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1757] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1760] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1760] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1757] <... futex resumed>) = 0 [pid 1760] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1757] exit_group(0 [pid 1760] <... futex resumed>) = ? [pid 1757] <... exit_group resumed>) = ? [pid 1760] +++ exited with 0 +++ [pid 1758] <... sendfile resumed>) = ? [pid 1758] +++ exited with 0 +++ [pid 1757] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1757, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./336/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./336/binderfs") = 0 umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./336/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./336/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./336") = 0 mkdir("./337", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1761 ./strace-static-x86_64: Process 1761 attached [pid 1761] set_robust_list(0x555556b826a0, 24) = 0 [pid 1761] chdir("./337") = 0 [pid 1761] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1761] setpgid(0, 0) = 0 [pid 1761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1761] write(3, "1000", 4) = 4 [pid 1761] close(3) = 0 [pid 1761] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1761] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1761] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1761] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1761] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1761] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1761] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1761] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1762 attached => {parent_tid=[1762]}, 88) = 1762 [pid 1762] set_robust_list(0x7f96301a99a0, 24 [pid 1761] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1761] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1761] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1762] <... set_robust_list resumed>) = 0 [pid 1762] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1762] memfd_create("syzkaller", 0) = 3 [pid 1762] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1762] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1762] munmap(0x7f9627d89000, 262144) = 0 [pid 1762] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1762] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1762] close(3) = 0 [pid 1762] mkdir("./file0", 0777) = 0 [pid 1762] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1762] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1762] chdir("./file0") = 0 [pid 1762] ioctl(4, LOOP_CLR_FD) = 0 [pid 1762] close(4) = 0 [pid 1762] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1761] <... futex resumed>) = 0 [pid 1761] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1761] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1762] <... futex resumed>) = 1 [pid 1762] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1762] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1761] <... futex resumed>) = 0 [pid 1761] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1761] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1762] <... futex resumed>) = 1 [pid 1762] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1762] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1761] <... futex resumed>) = 0 [pid 1761] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1762] creat("./bus", 000) = 6 [pid 1762] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1762] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1761] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1761] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1761] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1762] <... futex resumed>) = 0 [pid 1762] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1762] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1761] <... futex resumed>) = 0 [pid 1761] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1761] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1762] <... futex resumed>) = 1 [pid 1762] open("./bus", O_RDONLY) = 7 [pid 1762] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1761] <... futex resumed>) = 0 [pid 1761] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1761] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1762] <... futex resumed>) = 1 [ 122.372798][ T1762] loop0: detected capacity change from 0 to 512 [ 122.390205][ T1762] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 122.403428][ T1762] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1762] sendfile(6, 7, NULL, 140737974943952 [pid 1761] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1761] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1761] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1761] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1761] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1761] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1761] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1761] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1761] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1765]}, 88) = 1765 [pid 1761] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1761] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1761] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1765 attached [pid 1765] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1765] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1765] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1765] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1761] <... futex resumed>) = 0 [pid 1761] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1761] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1765] <... futex resumed>) = 1 [pid 1765] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1765] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1761] <... futex resumed>) = 0 [pid 1765] <... futex resumed>) = 1 [pid 1765] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1761] exit_group(0 [pid 1765] <... futex resumed>) = ? [pid 1761] <... exit_group resumed>) = ? [pid 1765] +++ exited with 0 +++ [pid 1762] <... sendfile resumed>) = ? [pid 1762] +++ exited with 0 +++ [pid 1761] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1761, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./337/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./337/binderfs") = 0 umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./337/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./337/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./337") = 0 mkdir("./338", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1766 ./strace-static-x86_64: Process 1766 attached [pid 1766] set_robust_list(0x555556b826a0, 24) = 0 [pid 1766] chdir("./338") = 0 [pid 1766] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1766] setpgid(0, 0) = 0 [pid 1766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1766] write(3, "1000", 4) = 4 [pid 1766] close(3) = 0 [pid 1766] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1766] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1766] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1766] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1766] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1766] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1766] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1767]}, 88) = 1767 [pid 1766] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1766] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1766] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1767 attached [pid 1767] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1767] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1767] memfd_create("syzkaller", 0) = 3 [pid 1767] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1767] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1767] munmap(0x7f9627d89000, 262144) = 0 [pid 1767] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1767] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1767] close(3) = 0 [pid 1767] mkdir("./file0", 0777) = 0 [pid 1767] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1767] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1767] chdir("./file0") = 0 [pid 1767] ioctl(4, LOOP_CLR_FD) = 0 [pid 1767] close(4) = 0 [pid 1767] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1766] <... futex resumed>) = 0 [pid 1766] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1766] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1767] <... futex resumed>) = 1 [pid 1767] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1767] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1766] <... futex resumed>) = 0 [pid 1766] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1766] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1767] <... futex resumed>) = 1 [pid 1767] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1767] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1766] <... futex resumed>) = 0 [pid 1766] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1766] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1767] <... futex resumed>) = 1 [pid 1767] creat("./bus", 000) = 6 [pid 1767] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1766] <... futex resumed>) = 0 [pid 1766] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1766] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1767] <... futex resumed>) = 1 [pid 1767] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1767] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1766] <... futex resumed>) = 0 [pid 1766] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1766] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1767] <... futex resumed>) = 1 [pid 1767] open("./bus", O_RDONLY) = 7 [pid 1767] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1766] <... futex resumed>) = 0 [pid 1766] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1766] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1767] <... futex resumed>) = 1 [ 122.673807][ T1767] loop0: detected capacity change from 0 to 512 [ 122.682890][ T1767] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 122.696412][ T1767] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1767] sendfile(6, 7, NULL, 140737974943952 [pid 1766] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1766] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1766] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1766] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1766] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1766] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1766] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1769]}, 88) = 1769 [pid 1766] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1766] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1766] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1769 attached [pid 1769] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1769] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1769] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1769] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1766] <... futex resumed>) = 0 [pid 1766] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1766] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1769] <... futex resumed>) = 1 [pid 1769] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1769] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1766] <... futex resumed>) = 0 [pid 1769] <... futex resumed>) = 1 [pid 1769] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1766] exit_group(0 [pid 1769] <... futex resumed>) = ? [pid 1766] <... exit_group resumed>) = ? [pid 1769] +++ exited with 0 +++ [pid 1767] <... sendfile resumed>) = ? [pid 1767] +++ exited with 0 +++ [pid 1766] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1766, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./338/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./338/binderfs") = 0 umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./338/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./338/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./338") = 0 mkdir("./339", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 1771 attached , child_tidptr=0x555556b82690) = 1771 [pid 1771] set_robust_list(0x555556b826a0, 24) = 0 [pid 1771] chdir("./339") = 0 [pid 1771] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1771] setpgid(0, 0) = 0 [pid 1771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1771] write(3, "1000", 4) = 4 [pid 1771] close(3) = 0 [pid 1771] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1771] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1771] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1771] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1771] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1771] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1772]}, 88) = 1772 [pid 1771] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1771] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1772 attached [pid 1772] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1772] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1772] memfd_create("syzkaller", 0) = 3 [pid 1772] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1772] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1772] munmap(0x7f9627d89000, 262144) = 0 [pid 1772] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1772] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1772] close(3) = 0 [pid 1772] mkdir("./file0", 0777) = 0 [pid 1772] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1772] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1772] chdir("./file0") = 0 [pid 1772] ioctl(4, LOOP_CLR_FD) = 0 [pid 1772] close(4) = 0 [pid 1772] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1772] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1771] <... futex resumed>) = 0 [pid 1771] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1772] <... futex resumed>) = 0 [pid 1772] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1772] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1771] <... futex resumed>) = 0 [pid 1771] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1772] <... futex resumed>) = 1 [pid 1771] <... futex resumed>) = 0 [pid 1771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1772] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1772] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1771] <... futex resumed>) = 0 [pid 1772] <... futex resumed>) = 1 [pid 1771] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1772] creat("./bus", 000) = 6 [pid 1772] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1771] <... futex resumed>) = 0 [pid 1771] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1772] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1772] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1771] <... futex resumed>) = 0 [pid 1771] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1772] open("./bus", O_RDONLY) = 7 [pid 1772] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1771] <... futex resumed>) = 0 [pid 1771] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1771] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 122.966376][ T1772] loop0: detected capacity change from 0 to 512 [ 122.974457][ T1772] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 122.990728][ T1772] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1772] sendfile(6, 7, NULL, 140737974943952 [pid 1771] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1771] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1771] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1771] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1774]}, 88) = 1774 [pid 1771] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1771] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1771] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1774 attached [pid 1774] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1774] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1774] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1774] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1771] <... futex resumed>) = 0 [pid 1771] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1771] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1774] <... futex resumed>) = 1 [pid 1774] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1774] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1771] <... futex resumed>) = 0 [pid 1774] <... futex resumed>) = 1 [pid 1774] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1771] exit_group(0 [pid 1774] <... futex resumed>) = ? [pid 1771] <... exit_group resumed>) = ? [pid 1774] +++ exited with 0 +++ [pid 1772] <... sendfile resumed>) = ? [pid 1772] +++ exited with 0 +++ [pid 1771] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1771, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./339/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./339/binderfs") = 0 umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./339/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./339/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./339") = 0 mkdir("./340", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1775 ./strace-static-x86_64: Process 1775 attached [pid 1775] set_robust_list(0x555556b826a0, 24) = 0 [pid 1775] chdir("./340") = 0 [pid 1775] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1775] setpgid(0, 0) = 0 [pid 1775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1775] write(3, "1000", 4) = 4 [pid 1775] close(3) = 0 [pid 1775] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1775] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1775] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1775] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1775] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1775] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1775] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1775] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1776 attached => {parent_tid=[1776]}, 88) = 1776 [pid 1776] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1776] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1776] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1775] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1775] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1776] <... futex resumed>) = 0 [pid 1776] memfd_create("syzkaller", 0 [pid 1775] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1776] <... memfd_create resumed>) = 3 [pid 1776] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1776] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1776] munmap(0x7f9627d89000, 262144) = 0 [pid 1776] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1776] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1776] close(3) = 0 [pid 1776] mkdir("./file0", 0777) = 0 [pid 1776] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1776] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1776] chdir("./file0") = 0 [pid 1776] ioctl(4, LOOP_CLR_FD) = 0 [pid 1776] close(4) = 0 [pid 1776] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1776] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1775] <... futex resumed>) = 0 [pid 1775] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1775] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1776] <... futex resumed>) = 0 [pid 1776] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1776] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1775] <... futex resumed>) = 0 [pid 1775] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1775] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1776] <... futex resumed>) = 1 [pid 1776] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1776] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1775] <... futex resumed>) = 0 [pid 1775] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1775] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1776] <... futex resumed>) = 1 [pid 1776] creat("./bus", 000) = 6 [pid 1776] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1775] <... futex resumed>) = 0 [pid 1775] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1775] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1776] <... futex resumed>) = 1 [pid 1776] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1776] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1775] <... futex resumed>) = 0 [pid 1775] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1775] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1776] <... futex resumed>) = 1 [pid 1776] open("./bus", O_RDONLY) = 7 [pid 1776] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1775] <... futex resumed>) = 0 [pid 1775] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1775] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1776] <... futex resumed>) = 1 [ 123.292646][ T1776] loop0: detected capacity change from 0 to 512 [ 123.301137][ T1776] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 123.314285][ T1776] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 123.323802][ T1776] EXT4-fs mount: 36 callbacks suppressed [ 123.323814][ T1776] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1776] sendfile(6, 7, NULL, 140737974943952 [pid 1775] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1775] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1775] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1775] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1775] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1775] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1775] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1778 attached => {parent_tid=[1778]}, 88) = 1778 [pid 1775] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1775] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1775] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1778] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1778] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1778] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1778] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1775] <... futex resumed>) = 0 [pid 1775] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1775] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1778] <... futex resumed>) = 1 [pid 1778] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1778] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1775] <... futex resumed>) = 0 [pid 1778] <... futex resumed>) = 1 [pid 1778] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1775] exit_group(0 [pid 1778] <... futex resumed>) = ? [pid 1775] <... exit_group resumed>) = ? [pid 1778] +++ exited with 0 +++ [pid 1776] <... sendfile resumed>) = ? [pid 1776] +++ exited with 0 +++ [pid 1775] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1775, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./340/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./340/binderfs") = 0 umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./340/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./340/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./340") = 0 mkdir("./341", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1779 ./strace-static-x86_64: Process 1779 attached [pid 1779] set_robust_list(0x555556b826a0, 24) = 0 [pid 1779] chdir("./341") = 0 [pid 1779] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1779] setpgid(0, 0) = 0 [pid 1779] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1779] write(3, "1000", 4) = 4 [pid 1779] close(3) = 0 [pid 1779] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1779] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1779] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1779] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1779] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1779] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1779] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1780]}, 88) = 1780 [pid 1779] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1779] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1779] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1780 attached [pid 1780] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1780] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1780] memfd_create("syzkaller", 0) = 3 [pid 1780] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1780] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1780] munmap(0x7f9627d89000, 262144) = 0 [pid 1780] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1780] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1780] close(3) = 0 [pid 1780] mkdir("./file0", 0777) = 0 [ 123.594458][ T1780] loop0: detected capacity change from 0 to 512 [ 123.612769][ T1780] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 123.625740][ T1780] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1780] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1780] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1780] chdir("./file0") = 0 [pid 1780] ioctl(4, LOOP_CLR_FD) = 0 [pid 1780] close(4) = 0 [pid 1780] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1779] <... futex resumed>) = 0 [pid 1779] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1779] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1780] <... futex resumed>) = 1 [pid 1780] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1780] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1779] <... futex resumed>) = 0 [pid 1780] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1779] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1779] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1780] <... open resumed>) = 5 [pid 1780] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1779] <... futex resumed>) = 0 [pid 1780] creat("./bus", 000 [pid 1779] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1779] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1780] <... creat resumed>) = 6 [pid 1780] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1779] <... futex resumed>) = 0 [pid 1780] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 1779] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1779] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1780] <... writev resumed>) = 1 [pid 1780] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1779] <... futex resumed>) = 0 [pid 1780] open("./bus", O_RDONLY [pid 1779] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1779] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1780] <... open resumed>) = 7 [pid 1780] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1780] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1779] <... futex resumed>) = 0 [pid 1779] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1780] <... futex resumed>) = 0 [pid 1779] <... futex resumed>) = 1 [pid 1780] sendfile(6, 7, NULL, 140737974943952 [ 123.635493][ T1780] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1779] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1779] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1779] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1779] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1779] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1782 attached => {parent_tid=[1782]}, 88) = 1782 [pid 1782] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1782] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1782] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1779] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1779] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1782] <... futex resumed>) = 0 [pid 1779] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1782] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1782] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1779] <... futex resumed>) = 0 [pid 1779] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1779] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1782] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1782] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1779] <... futex resumed>) = 0 [pid 1782] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1779] exit_group(0) = ? [pid 1782] <... futex resumed>) = ? [pid 1780] <... sendfile resumed>) = 231 [pid 1782] +++ exited with 0 +++ [pid 1780] +++ exited with 0 +++ [pid 1779] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1779, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./341/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./341/binderfs") = 0 umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./341/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./341/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./341") = 0 mkdir("./342", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1784 ./strace-static-x86_64: Process 1784 attached [pid 1784] set_robust_list(0x555556b826a0, 24) = 0 [pid 1784] chdir("./342") = 0 [pid 1784] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1784] setpgid(0, 0) = 0 [pid 1784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1784] write(3, "1000", 4) = 4 [pid 1784] close(3) = 0 [pid 1784] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1784] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1784] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1784] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1784] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1784] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1784] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1785]}, 88) = 1785 [pid 1784] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1784] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1785 attached [pid 1785] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1785] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1785] memfd_create("syzkaller", 0) = 3 [pid 1785] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1785] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1785] munmap(0x7f9627d89000, 262144) = 0 [pid 1785] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1785] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1785] close(3) = 0 [pid 1785] mkdir("./file0", 0777) = 0 [pid 1785] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1785] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1785] chdir("./file0") = 0 [pid 1785] ioctl(4, LOOP_CLR_FD) = 0 [pid 1785] close(4) = 0 [pid 1785] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1784] <... futex resumed>) = 0 [pid 1784] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1785] <... futex resumed>) = 1 [pid 1785] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1785] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1785] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1784] <... futex resumed>) = 0 [pid 1784] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1785] <... futex resumed>) = 0 [pid 1785] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1785] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1784] <... futex resumed>) = 0 [pid 1784] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1785] <... futex resumed>) = 1 [pid 1785] creat("./bus", 000) = 6 [pid 1785] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1784] <... futex resumed>) = 0 [pid 1784] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1785] <... futex resumed>) = 1 [pid 1785] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1785] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1784] <... futex resumed>) = 0 [pid 1784] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1785] <... futex resumed>) = 1 [pid 1785] open("./bus", O_RDONLY) = 7 [pid 1785] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1784] <... futex resumed>) = 0 [pid 1784] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1785] sendfile(6, 7, NULL, 140737974943952 [ 123.928091][ T1785] loop0: detected capacity change from 0 to 512 [ 123.936078][ T1785] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 123.949745][ T1785] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 123.960165][ T1785] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1784] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1784] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1784] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1784] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1784] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1787 attached => {parent_tid=[1787]}, 88) = 1787 [pid 1787] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1787] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1787] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1784] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1784] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1787] <... futex resumed>) = 0 [pid 1784] <... futex resumed>) = 1 [pid 1787] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1784] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1787] <... mmap resumed>) = 0x20000000 [pid 1787] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1784] <... futex resumed>) = 0 [pid 1784] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1784] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1787] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1787] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1784] <... futex resumed>) = 0 [pid 1787] <... futex resumed>) = 1 [pid 1787] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1784] exit_group(0 [pid 1787] <... futex resumed>) = ? [pid 1784] <... exit_group resumed>) = ? [pid 1787] +++ exited with 0 +++ [pid 1785] <... sendfile resumed>) = ? [pid 1785] +++ exited with 0 +++ [pid 1784] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1784, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./342/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./342/binderfs") = 0 umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./342/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./342/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./342") = 0 mkdir("./343", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1788 ./strace-static-x86_64: Process 1788 attached [pid 1788] set_robust_list(0x555556b826a0, 24) = 0 [pid 1788] chdir("./343") = 0 [pid 1788] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1788] setpgid(0, 0) = 0 [pid 1788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1788] write(3, "1000", 4) = 4 [pid 1788] close(3) = 0 [pid 1788] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1788] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1788] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1788] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1788] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1788] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1789 attached [pid 1789] set_robust_list(0x7f96301a99a0, 24 [pid 1788] <... clone3 resumed> => {parent_tid=[1789]}, 88) = 1789 [pid 1789] <... set_robust_list resumed>) = 0 [pid 1788] rt_sigprocmask(SIG_SETMASK, [], [pid 1789] rt_sigprocmask(SIG_SETMASK, [], [pid 1788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1789] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1788] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1789] memfd_create("syzkaller", 0 [pid 1788] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1789] <... memfd_create resumed>) = 3 [pid 1789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1789] munmap(0x7f9627d89000, 262144) = 0 [pid 1789] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1789] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1789] close(3) = 0 [pid 1789] mkdir("./file0", 0777) = 0 [pid 1789] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1789] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1789] chdir("./file0") = 0 [pid 1789] ioctl(4, LOOP_CLR_FD) = 0 [pid 1789] close(4) = 0 [pid 1789] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1788] <... futex resumed>) = 0 [pid 1788] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1788] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1789] <... futex resumed>) = 1 [pid 1789] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1789] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1788] <... futex resumed>) = 0 [pid 1788] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1788] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1789] <... futex resumed>) = 1 [pid 1789] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1789] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1788] <... futex resumed>) = 0 [pid 1788] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1789] <... futex resumed>) = 1 [pid 1788] <... futex resumed>) = 0 [pid 1788] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1789] creat("./bus", 000) = 6 [pid 1789] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1788] <... futex resumed>) = 0 [pid 1788] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1788] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1789] <... futex resumed>) = 1 [pid 1789] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1789] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1788] <... futex resumed>) = 0 [pid 1788] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1788] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1789] <... futex resumed>) = 1 [pid 1789] open("./bus", O_RDONLY) = 7 [pid 1789] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1788] <... futex resumed>) = 0 [pid 1788] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1788] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1789] <... futex resumed>) = 1 [ 124.254320][ T1789] loop0: detected capacity change from 0 to 512 [ 124.262382][ T1789] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 124.275953][ T1789] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 124.285701][ T1789] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1789] sendfile(6, 7, NULL, 140737974943952 [pid 1788] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1788] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1788] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1788] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1791 attached => {parent_tid=[1791]}, 88) = 1791 [pid 1788] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1788] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1788] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1791] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1791] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1791] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1791] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1788] <... futex resumed>) = 0 [pid 1788] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1788] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1791] <... futex resumed>) = 1 [pid 1791] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1791] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1788] <... futex resumed>) = 0 [pid 1791] <... futex resumed>) = 1 [pid 1791] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1788] exit_group(0 [pid 1791] <... futex resumed>) = ? [pid 1788] <... exit_group resumed>) = ? [pid 1791] +++ exited with 0 +++ [pid 1789] <... sendfile resumed>) = ? [pid 1789] +++ exited with 0 +++ [pid 1788] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1788, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./343/binderfs") = 0 umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./343/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./343/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./343") = 0 mkdir("./344", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1792 ./strace-static-x86_64: Process 1792 attached [pid 1792] set_robust_list(0x555556b826a0, 24) = 0 [pid 1792] chdir("./344") = 0 [pid 1792] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1792] setpgid(0, 0) = 0 [pid 1792] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1792] write(3, "1000", 4) = 4 [pid 1792] close(3) = 0 [pid 1792] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1792] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1792] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1792] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1792] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1792] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1792] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1792] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1793]}, 88) = 1793 [pid 1792] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1792] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1792] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1793 attached [pid 1793] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1793] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1793] memfd_create("syzkaller", 0) = 3 [pid 1793] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1793] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1793] munmap(0x7f9627d89000, 262144) = 0 [pid 1793] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1793] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1793] close(3) = 0 [pid 1793] mkdir("./file0", 0777) = 0 [pid 1793] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1793] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1793] chdir("./file0") = 0 [pid 1793] ioctl(4, LOOP_CLR_FD) = 0 [pid 1793] close(4) = 0 [pid 1793] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1792] <... futex resumed>) = 0 [pid 1792] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1792] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1793] <... futex resumed>) = 1 [pid 1793] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1793] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1792] <... futex resumed>) = 0 [pid 1792] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1792] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1793] <... futex resumed>) = 1 [pid 1793] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1793] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1792] <... futex resumed>) = 0 [pid 1792] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1792] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1793] <... futex resumed>) = 1 [pid 1793] creat("./bus", 000) = 6 [pid 1793] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1792] <... futex resumed>) = 0 [pid 1792] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1792] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1793] <... futex resumed>) = 1 [pid 1793] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1793] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1792] <... futex resumed>) = 0 [pid 1792] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1792] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1793] <... futex resumed>) = 1 [pid 1793] open("./bus", O_RDONLY) = 7 [pid 1793] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1792] <... futex resumed>) = 0 [pid 1792] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1792] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1793] <... futex resumed>) = 1 [ 124.527189][ T1793] loop0: detected capacity change from 0 to 512 [ 124.535740][ T1793] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 124.550203][ T1793] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 124.560622][ T1793] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1793] sendfile(6, 7, NULL, 140737974943952 [pid 1792] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1792] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1792] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1792] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1792] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1792] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1792] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1795 attached [pid 1795] set_robust_list(0x7f9627dc89a0, 24 [pid 1792] <... clone3 resumed> => {parent_tid=[1795]}, 88) = 1795 [pid 1792] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1795] <... set_robust_list resumed>) = 0 [pid 1792] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1795] rt_sigprocmask(SIG_SETMASK, [], [pid 1792] <... futex resumed>) = 0 [pid 1792] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1795] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1795] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1795] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1792] <... futex resumed>) = 0 [pid 1795] <... futex resumed>) = 1 [pid 1795] sendmsg(-1, 0x20000000, 0 [pid 1792] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1795] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1795] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1792] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1795] <... futex resumed>) = 0 [pid 1795] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1792] exit_group(0) = ? [pid 1795] <... futex resumed>) = ? [pid 1795] +++ exited with 0 +++ [pid 1793] <... sendfile resumed>) = ? [pid 1793] +++ exited with 0 +++ [pid 1792] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1792, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./344/binderfs") = 0 umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./344/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./344/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./344") = 0 mkdir("./345", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1797 ./strace-static-x86_64: Process 1797 attached [pid 1797] set_robust_list(0x555556b826a0, 24) = 0 [pid 1797] chdir("./345") = 0 [pid 1797] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1797] setpgid(0, 0) = 0 [pid 1797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1797] write(3, "1000", 4) = 4 [pid 1797] close(3) = 0 [pid 1797] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1797] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1797] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1797] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1797] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1797] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1797] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1798]}, 88) = 1798 [pid 1797] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1797] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1798 attached [pid 1798] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1798] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1798] memfd_create("syzkaller", 0) = 3 [pid 1798] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1798] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1798] munmap(0x7f9627d89000, 262144) = 0 [pid 1798] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1798] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1798] close(3) = 0 [pid 1798] mkdir("./file0", 0777) = 0 [pid 1798] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1798] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1798] chdir("./file0") = 0 [pid 1798] ioctl(4, LOOP_CLR_FD) = 0 [pid 1798] close(4) = 0 [pid 1798] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1797] <... futex resumed>) = 0 [pid 1797] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1798] <... futex resumed>) = 1 [pid 1798] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1798] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1797] <... futex resumed>) = 0 [pid 1797] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1798] <... futex resumed>) = 1 [pid 1798] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1798] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1797] <... futex resumed>) = 0 [pid 1797] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1798] <... futex resumed>) = 1 [pid 1798] creat("./bus", 000) = 6 [pid 1798] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1797] <... futex resumed>) = 0 [pid 1797] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1798] <... futex resumed>) = 1 [pid 1798] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1798] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1798] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1797] <... futex resumed>) = 0 [pid 1797] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1798] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1797] <... futex resumed>) = 0 [pid 1797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1798] open("./bus", O_RDONLY) = 7 [pid 1798] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1797] <... futex resumed>) = 0 [pid 1797] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1798] sendfile(6, 7, NULL, 140737974943952 [pid 1797] <... futex resumed>) = 0 [ 124.853153][ T1798] loop0: detected capacity change from 0 to 512 [ 124.861128][ T1798] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 124.874187][ T1798] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 124.884048][ T1798] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1797] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1797] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1797] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1797] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1797] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1800]}, 88) = 1800 ./strace-static-x86_64: Process 1800 attached [pid 1797] rt_sigprocmask(SIG_SETMASK, [], [pid 1800] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1797] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1800] rt_sigprocmask(SIG_SETMASK, [], [pid 1797] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1800] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1797] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1800] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1800] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1797] <... futex resumed>) = 0 [pid 1800] <... futex resumed>) = 1 [pid 1797] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1797] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1800] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1800] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1797] <... futex resumed>) = 0 [pid 1800] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1797] exit_group(0 [pid 1800] <... futex resumed>) = ? [pid 1797] <... exit_group resumed>) = ? [pid 1800] +++ exited with 0 +++ [pid 1798] <... sendfile resumed>) = ? [pid 1798] +++ exited with 0 +++ [pid 1797] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1797, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./345/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./345/binderfs") = 0 umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./345/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./345/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./345") = 0 mkdir("./346", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1801 ./strace-static-x86_64: Process 1801 attached [pid 1801] set_robust_list(0x555556b826a0, 24) = 0 [pid 1801] chdir("./346") = 0 [pid 1801] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1801] setpgid(0, 0) = 0 [pid 1801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1801] write(3, "1000", 4) = 4 [pid 1801] close(3) = 0 [pid 1801] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1801] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1801] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1801] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1801] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1801] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1801] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1801] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1802]}, 88) = 1802 [pid 1801] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1801] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1801] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1802 attached [pid 1802] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1802] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1802] memfd_create("syzkaller", 0) = 3 [pid 1802] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1802] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1802] munmap(0x7f9627d89000, 262144) = 0 [pid 1802] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1802] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1802] close(3) = 0 [pid 1802] mkdir("./file0", 0777) = 0 [pid 1802] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1802] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1802] chdir("./file0") = 0 [pid 1802] ioctl(4, LOOP_CLR_FD) = 0 [pid 1802] close(4) = 0 [pid 1802] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1801] <... futex resumed>) = 0 [pid 1801] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1801] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1802] <... futex resumed>) = 1 [pid 1802] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1802] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1801] <... futex resumed>) = 0 [pid 1801] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1801] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1802] <... futex resumed>) = 1 [pid 1802] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1802] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1801] <... futex resumed>) = 0 [pid 1801] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1801] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1802] <... futex resumed>) = 1 [pid 1802] creat("./bus", 000) = 6 [pid 1802] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1801] <... futex resumed>) = 0 [pid 1801] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1801] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1802] <... futex resumed>) = 1 [pid 1802] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1802] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1801] <... futex resumed>) = 0 [pid 1801] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1801] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1802] <... futex resumed>) = 1 [pid 1802] open("./bus", O_RDONLY) = 7 [pid 1802] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1801] <... futex resumed>) = 0 [pid 1801] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1801] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1802] <... futex resumed>) = 1 [ 125.174147][ T1802] loop0: detected capacity change from 0 to 512 [ 125.182192][ T1802] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 125.196955][ T1802] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 125.206778][ T1802] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1802] sendfile(6, 7, NULL, 140737974943952 [pid 1801] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1801] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1801] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1801] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1801] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1801] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1804 attached => {parent_tid=[1804]}, 88) = 1804 [pid 1801] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1804] set_robust_list(0x7f9627dc89a0, 24 [pid 1801] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1804] <... set_robust_list resumed>) = 0 [pid 1801] <... futex resumed>) = 0 [pid 1801] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1804] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1804] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1804] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1801] <... futex resumed>) = 0 [pid 1804] sendmsg(-1, 0x20000000, 0 [pid 1801] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1801] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1804] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1804] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1801] <... futex resumed>) = 0 [pid 1804] <... futex resumed>) = 1 [pid 1804] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1801] exit_group(0 [pid 1804] <... futex resumed>) = ? [pid 1801] <... exit_group resumed>) = ? [pid 1802] <... sendfile resumed>) = ? [pid 1802] +++ exited with 0 +++ [pid 1804] +++ exited with 0 +++ [pid 1801] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1801, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./346/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./346/binderfs") = 0 umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./346/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./346/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./346") = 0 mkdir("./347", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1805 ./strace-static-x86_64: Process 1805 attached [pid 1805] set_robust_list(0x555556b826a0, 24) = 0 [pid 1805] chdir("./347") = 0 [pid 1805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1805] setpgid(0, 0) = 0 [pid 1805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1805] write(3, "1000", 4) = 4 [pid 1805] close(3) = 0 [pid 1805] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1805] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1805] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1805] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1805] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1805] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1806]}, 88) = 1806 [pid 1805] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 1806 attached NULL, 8) = 0 [pid 1806] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1806] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1806] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1805] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1806] <... futex resumed>) = 0 [pid 1806] memfd_create("syzkaller", 0 [pid 1805] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1806] <... memfd_create resumed>) = 3 [pid 1806] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1806] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1806] munmap(0x7f9627d89000, 262144) = 0 [pid 1806] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1806] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1806] close(3) = 0 [pid 1806] mkdir("./file0", 0777) = 0 [pid 1806] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1806] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1806] chdir("./file0") = 0 [pid 1806] ioctl(4, LOOP_CLR_FD) = 0 [pid 1806] close(4) = 0 [pid 1806] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1805] <... futex resumed>) = 0 [pid 1805] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1805] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1806] <... futex resumed>) = 1 [pid 1806] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1806] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1805] <... futex resumed>) = 0 [pid 1805] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1805] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1806] <... futex resumed>) = 1 [pid 1806] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1806] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1805] <... futex resumed>) = 0 [pid 1805] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1805] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1806] <... futex resumed>) = 1 [pid 1806] creat("./bus", 000) = 6 [pid 1806] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1805] <... futex resumed>) = 0 [pid 1805] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1805] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1806] <... futex resumed>) = 1 [pid 1806] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1806] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1805] <... futex resumed>) = 0 [pid 1806] <... futex resumed>) = 1 [pid 1805] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1805] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1806] open("./bus", O_RDONLY) = 7 [pid 1806] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1805] <... futex resumed>) = 0 [pid 1805] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1805] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 125.481981][ T1806] loop0: detected capacity change from 0 to 512 [ 125.490120][ T1806] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 125.503283][ T1806] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 125.513164][ T1806] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1806] sendfile(6, 7, NULL, 140737974943952 [pid 1805] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1805] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1805] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1805] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1805] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1805] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1808 attached => {parent_tid=[1808]}, 88) = 1808 [pid 1805] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1805] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1805] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1808] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1808] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1808] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1808] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1805] <... futex resumed>) = 0 [pid 1805] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1808] sendmsg(-1, 0x20000000, 0 [pid 1805] <... futex resumed>) = 0 [pid 1805] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1808] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1808] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1805] <... futex resumed>) = 0 [pid 1808] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1805] exit_group(0 [pid 1808] <... futex resumed>) = ? [pid 1805] <... exit_group resumed>) = ? [pid 1808] +++ exited with 0 +++ [pid 1806] <... sendfile resumed>) = ? [pid 1806] +++ exited with 0 +++ [pid 1805] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1805, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./347/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./347/binderfs") = 0 umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./347/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./347/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./347") = 0 mkdir("./348", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1809 ./strace-static-x86_64: Process 1809 attached [pid 1809] set_robust_list(0x555556b826a0, 24) = 0 [pid 1809] chdir("./348") = 0 [pid 1809] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1809] setpgid(0, 0) = 0 [pid 1809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1809] write(3, "1000", 4) = 4 [pid 1809] close(3) = 0 [pid 1809] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1809] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1809] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1809] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1809] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1809] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1809] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1809] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1810]}, 88) = 1810 [pid 1809] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1809] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1809] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1810 attached [pid 1810] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1810] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1810] memfd_create("syzkaller", 0) = 3 [pid 1810] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1810] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1810] munmap(0x7f9627d89000, 262144) = 0 [pid 1810] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1810] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1810] close(3) = 0 [pid 1810] mkdir("./file0", 0777) = 0 [pid 1810] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1810] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1810] chdir("./file0") = 0 [pid 1810] ioctl(4, LOOP_CLR_FD) = 0 [pid 1810] close(4) = 0 [pid 1810] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1809] <... futex resumed>) = 0 [pid 1809] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1810] <... futex resumed>) = 1 [pid 1809] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1810] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1810] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1809] <... futex resumed>) = 0 [pid 1809] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1809] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1810] <... futex resumed>) = 1 [pid 1810] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1810] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1809] <... futex resumed>) = 0 [pid 1810] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1809] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1809] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1810] <... futex resumed>) = 0 [pid 1810] creat("./bus", 000) = 6 [pid 1810] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1809] <... futex resumed>) = 0 [pid 1810] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1809] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1810] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1810] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 1809] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1810] <... writev resumed>) = 1 [pid 1810] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1809] <... futex resumed>) = 0 [pid 1810] <... futex resumed>) = 1 [pid 1809] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1809] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1810] open("./bus", O_RDONLY) = 7 [pid 1810] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1809] <... futex resumed>) = 0 [pid 1809] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1809] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 125.768375][ T1810] loop0: detected capacity change from 0 to 512 [ 125.776434][ T1810] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 125.789405][ T1810] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 125.799314][ T1810] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1810] sendfile(6, 7, NULL, 140737974943952 [pid 1809] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1809] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1809] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1809] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1809] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1809] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1809] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1809] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1809] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1809] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1813]}, 88) = 1813 [pid 1809] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1809] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1809] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1813 attached [pid 1813] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1813] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1813] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1813] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1809] <... futex resumed>) = 0 [pid 1809] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1809] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1813] <... futex resumed>) = 1 [pid 1813] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1813] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1809] <... futex resumed>) = 0 [pid 1813] <... futex resumed>) = 1 [pid 1813] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1809] exit_group(0 [pid 1813] <... futex resumed>) = ? [pid 1809] <... exit_group resumed>) = ? [pid 1813] +++ exited with 0 +++ [pid 1810] <... sendfile resumed>) = ? [pid 1810] +++ exited with 0 +++ [pid 1809] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1809, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./348/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./348/binderfs") = 0 umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./348/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./348/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./348") = 0 mkdir("./349", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1814 ./strace-static-x86_64: Process 1814 attached [pid 1814] set_robust_list(0x555556b826a0, 24) = 0 [pid 1814] chdir("./349") = 0 [pid 1814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1814] setpgid(0, 0) = 0 [pid 1814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1814] write(3, "1000", 4) = 4 [pid 1814] close(3) = 0 [pid 1814] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1814] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1814] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1814] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1814] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1814] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1815 attached => {parent_tid=[1815]}, 88) = 1815 [pid 1815] set_robust_list(0x7f96301a99a0, 24 [pid 1814] rt_sigprocmask(SIG_SETMASK, [], [pid 1815] <... set_robust_list resumed>) = 0 [pid 1815] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1815] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1814] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1814] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1815] <... futex resumed>) = 0 [pid 1815] memfd_create("syzkaller", 0) = 3 [pid 1815] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1815] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1815] munmap(0x7f9627d89000, 262144) = 0 [pid 1815] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1815] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1815] close(3) = 0 [pid 1815] mkdir("./file0", 0777) = 0 [pid 1815] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1815] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1815] chdir("./file0") = 0 [pid 1815] ioctl(4, LOOP_CLR_FD) = 0 [pid 1815] close(4) = 0 [pid 1815] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1815] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1814] <... futex resumed>) = 0 [pid 1814] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1815] <... futex resumed>) = 0 [pid 1815] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1815] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1814] <... futex resumed>) = 0 [pid 1814] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1815] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1815] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1814] <... futex resumed>) = 0 [pid 1814] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1815] <... futex resumed>) = 1 [pid 1815] creat("./bus", 000) = 6 [pid 1815] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1814] <... futex resumed>) = 0 [pid 1814] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1815] <... futex resumed>) = 1 [pid 1815] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1815] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1814] <... futex resumed>) = 0 [pid 1814] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1815] <... futex resumed>) = 1 [pid 1815] open("./bus", O_RDONLY) = 7 [pid 1815] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1814] <... futex resumed>) = 0 [pid 1814] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1814] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1815] <... futex resumed>) = 1 [ 126.053721][ T1815] loop0: detected capacity change from 0 to 512 [ 126.062637][ T1815] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 126.075778][ T1815] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 126.085484][ T1815] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1815] sendfile(6, 7, NULL, 140737974943952 [pid 1814] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1814] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1814] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1814] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1817 attached => {parent_tid=[1817]}, 88) = 1817 [pid 1817] set_robust_list(0x7f9627dc89a0, 24 [pid 1814] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1817] <... set_robust_list resumed>) = 0 [pid 1814] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1817] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1814] <... futex resumed>) = 0 [pid 1817] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1814] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1817] <... mmap resumed>) = 0x20000000 [pid 1817] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1814] <... futex resumed>) = 0 [pid 1814] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1814] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1817] <... futex resumed>) = 1 [pid 1817] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1817] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1814] <... futex resumed>) = 0 [pid 1817] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1814] exit_group(0 [pid 1817] <... futex resumed>) = ? [pid 1814] <... exit_group resumed>) = ? [pid 1817] +++ exited with 0 +++ [pid 1815] <... sendfile resumed>) = ? [pid 1815] +++ exited with 0 +++ [pid 1814] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1814, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./349/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./349/binderfs") = 0 umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./349/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./349/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./349") = 0 mkdir("./350", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1818 ./strace-static-x86_64: Process 1818 attached [pid 1818] set_robust_list(0x555556b826a0, 24) = 0 [pid 1818] chdir("./350") = 0 [pid 1818] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1818] setpgid(0, 0) = 0 [pid 1818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1818] write(3, "1000", 4) = 4 [pid 1818] close(3) = 0 [pid 1818] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1818] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1818] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1818] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1818] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1818] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1818] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1819]}, 88) = 1819 [pid 1818] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 1819 attached [pid 1818] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1819] set_robust_list(0x7f96301a99a0, 24 [pid 1818] <... futex resumed>) = 0 [pid 1819] <... set_robust_list resumed>) = 0 [pid 1818] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1819] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1819] memfd_create("syzkaller", 0) = 3 [pid 1819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1819] munmap(0x7f9627d89000, 262144) = 0 [pid 1819] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1819] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1819] close(3) = 0 [pid 1819] mkdir("./file0", 0777) = 0 [pid 1819] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1819] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1819] chdir("./file0") = 0 [pid 1819] ioctl(4, LOOP_CLR_FD) = 0 [pid 1819] close(4) = 0 [pid 1819] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1819] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1818] <... futex resumed>) = 0 [pid 1818] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1818] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1819] <... futex resumed>) = 0 [pid 1819] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1819] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1818] <... futex resumed>) = 0 [pid 1818] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1818] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1819] <... futex resumed>) = 1 [pid 1819] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1819] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1819] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1818] <... futex resumed>) = 0 [pid 1818] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1818] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1819] <... futex resumed>) = 0 [pid 1819] creat("./bus", 000) = 6 [pid 1819] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1818] <... futex resumed>) = 0 [pid 1818] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1818] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1819] <... futex resumed>) = 1 [pid 1819] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1819] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1818] <... futex resumed>) = 0 [pid 1818] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1818] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1819] <... futex resumed>) = 1 [pid 1819] open("./bus", O_RDONLY) = 7 [pid 1819] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1818] <... futex resumed>) = 0 [pid 1818] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1818] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1819] <... futex resumed>) = 1 [ 126.373578][ T1819] loop0: detected capacity change from 0 to 512 [ 126.381777][ T1819] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 126.394950][ T1819] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 126.404522][ T1819] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1819] sendfile(6, 7, NULL, 140737974943952 [pid 1818] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1818] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1818] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1818] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1818] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1818] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1818] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1821 attached => {parent_tid=[1821]}, 88) = 1821 [pid 1821] set_robust_list(0x7f9627dc89a0, 24 [pid 1818] rt_sigprocmask(SIG_SETMASK, [], [pid 1821] <... set_robust_list resumed>) = 0 [pid 1818] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1818] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1821] rt_sigprocmask(SIG_SETMASK, [], [pid 1818] <... futex resumed>) = 0 [pid 1818] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1821] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1821] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1821] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1818] <... futex resumed>) = 0 [pid 1821] <... futex resumed>) = 1 [pid 1818] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1821] sendmsg(-1, 0x20000000, 0 [pid 1818] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1821] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1821] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1818] <... futex resumed>) = 0 [pid 1821] <... futex resumed>) = 1 [pid 1821] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1818] exit_group(0 [pid 1821] <... futex resumed>) = ? [pid 1818] <... exit_group resumed>) = ? [pid 1821] +++ exited with 0 +++ [pid 1819] <... sendfile resumed>) = ? [pid 1819] +++ exited with 0 +++ [pid 1818] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1818, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./350/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./350/binderfs") = 0 umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./350/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./350/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./350") = 0 mkdir("./351", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1822 ./strace-static-x86_64: Process 1822 attached [pid 1822] set_robust_list(0x555556b826a0, 24) = 0 [pid 1822] chdir("./351") = 0 [pid 1822] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1822] setpgid(0, 0) = 0 [pid 1822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1822] write(3, "1000", 4) = 4 [pid 1822] close(3) = 0 [pid 1822] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1822] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1822] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1822] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1822] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1822] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1823]}, 88) = 1823 [pid 1822] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1822] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1822] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1823 attached [pid 1823] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1823] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1823] memfd_create("syzkaller", 0) = 3 [pid 1823] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1823] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1823] munmap(0x7f9627d89000, 262144) = 0 [pid 1823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1823] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1823] close(3) = 0 [pid 1823] mkdir("./file0", 0777) = 0 [pid 1823] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1823] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1823] chdir("./file0") = 0 [pid 1823] ioctl(4, LOOP_CLR_FD) = 0 [pid 1823] close(4) = 0 [pid 1823] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1822] <... futex resumed>) = 0 [pid 1822] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1822] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1823] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1823] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1822] <... futex resumed>) = 0 [pid 1822] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1822] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1823] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1823] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1822] <... futex resumed>) = 0 [pid 1822] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1822] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1823] <... futex resumed>) = 1 [pid 1823] creat("./bus", 000) = 6 [pid 1823] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1822] <... futex resumed>) = 0 [pid 1822] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1822] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1823] <... futex resumed>) = 1 [pid 1823] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1823] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1822] <... futex resumed>) = 0 [pid 1822] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1822] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1823] <... futex resumed>) = 1 [pid 1823] open("./bus", O_RDONLY) = 7 [pid 1823] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1822] <... futex resumed>) = 0 [pid 1822] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1822] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1823] <... futex resumed>) = 1 [ 126.684613][ T1823] loop0: detected capacity change from 0 to 512 [ 126.693046][ T1823] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 126.706194][ T1823] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 126.715926][ T1823] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1823] sendfile(6, 7, NULL, 140737974943952 [pid 1822] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1822] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1822] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1822] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1822] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1822] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1822] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1825 attached => {parent_tid=[1825]}, 88) = 1825 [pid 1822] rt_sigprocmask(SIG_SETMASK, [], [pid 1825] set_robust_list(0x7f9627dc89a0, 24 [pid 1822] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1822] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1822] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1825] <... set_robust_list resumed>) = 0 [pid 1825] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1825] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1825] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1822] <... futex resumed>) = 0 [pid 1822] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1822] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1825] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1825] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1822] <... futex resumed>) = 0 [pid 1825] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1822] exit_group(0 [pid 1825] <... futex resumed>) = ? [pid 1822] <... exit_group resumed>) = ? [pid 1825] +++ exited with 0 +++ [pid 1823] <... sendfile resumed>) = ? [pid 1823] +++ exited with 0 +++ [pid 1822] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1822, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./351/binderfs") = 0 umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./351/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./351/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./351") = 0 mkdir("./352", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1827 ./strace-static-x86_64: Process 1827 attached [pid 1827] set_robust_list(0x555556b826a0, 24) = 0 [pid 1827] chdir("./352") = 0 [pid 1827] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1827] setpgid(0, 0) = 0 [pid 1827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1827] write(3, "1000", 4) = 4 [pid 1827] close(3) = 0 [pid 1827] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1827] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1827] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1827] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1827] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1827] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1827] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1828]}, 88) = 1828 [pid 1827] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1827] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1828 attached [pid 1828] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1828] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1828] memfd_create("syzkaller", 0) = 3 [pid 1828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1828] munmap(0x7f9627d89000, 262144) = 0 [pid 1828] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1828] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1828] close(3) = 0 [pid 1828] mkdir("./file0", 0777) = 0 [pid 1828] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1828] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1828] chdir("./file0") = 0 [pid 1828] ioctl(4, LOOP_CLR_FD) = 0 [pid 1828] close(4) = 0 [pid 1828] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1827] <... futex resumed>) = 0 [pid 1827] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1828] <... futex resumed>) = 1 [pid 1828] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1828] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1827] <... futex resumed>) = 0 [pid 1827] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1828] <... futex resumed>) = 1 [pid 1828] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1828] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1828] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1827] <... futex resumed>) = 0 [pid 1827] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1828] <... futex resumed>) = 0 [pid 1828] creat("./bus", 000) = 6 [pid 1828] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1828] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1827] <... futex resumed>) = 0 [pid 1827] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1828] <... futex resumed>) = 0 [pid 1828] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1828] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1827] <... futex resumed>) = 0 [pid 1828] <... futex resumed>) = 1 [pid 1827] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1828] open("./bus", O_RDONLY) = 7 [pid 1828] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1827] <... futex resumed>) = 0 [pid 1827] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1827] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1828] <... futex resumed>) = 1 [ 127.015539][ T1828] loop0: detected capacity change from 0 to 512 [ 127.023841][ T1828] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 127.036913][ T1828] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 127.046646][ T1828] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1828] sendfile(6, 7, NULL, 140737974943952 [pid 1827] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1827] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1827] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1827] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1827] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1830]}, 88) = 1830 ./strace-static-x86_64: Process 1830 attached [pid 1830] set_robust_list(0x7f9627dc89a0, 24 [pid 1827] rt_sigprocmask(SIG_SETMASK, [], [pid 1830] <... set_robust_list resumed>) = 0 [pid 1827] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1827] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1827] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1830] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1830] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1830] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1827] <... futex resumed>) = 0 [pid 1830] <... futex resumed>) = 1 [pid 1827] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1830] sendmsg(-1, 0x20000000, 0 [pid 1827] <... futex resumed>) = 0 [pid 1827] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1830] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1830] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1827] <... futex resumed>) = 0 [pid 1830] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1827] exit_group(0 [pid 1830] <... futex resumed>) = ? [pid 1827] <... exit_group resumed>) = ? [pid 1830] +++ exited with 0 +++ [pid 1828] <... sendfile resumed>) = ? [pid 1828] +++ exited with 0 +++ [pid 1827] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1827, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./352/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./352/binderfs") = 0 umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./352/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./352/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./352") = 0 mkdir("./353", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1831 ./strace-static-x86_64: Process 1831 attached [pid 1831] set_robust_list(0x555556b826a0, 24) = 0 [pid 1831] chdir("./353") = 0 [pid 1831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1831] setpgid(0, 0) = 0 [pid 1831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1831] write(3, "1000", 4) = 4 [pid 1831] close(3) = 0 [pid 1831] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1831] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1831] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1831] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1831] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1831] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1832]}, 88) = 1832 [pid 1831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1831] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1832 attached [pid 1832] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1832] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1832] memfd_create("syzkaller", 0) = 3 [pid 1832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1832] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1832] munmap(0x7f9627d89000, 262144) = 0 [pid 1832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1832] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1832] close(3) = 0 [pid 1832] mkdir("./file0", 0777) = 0 [pid 1832] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1832] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1832] chdir("./file0") = 0 [pid 1832] ioctl(4, LOOP_CLR_FD) = 0 [pid 1832] close(4) = 0 [pid 1832] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... futex resumed>) = 0 [pid 1831] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1832] <... futex resumed>) = 1 [pid 1832] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1832] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... futex resumed>) = 0 [pid 1831] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1832] <... futex resumed>) = 1 [pid 1832] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1832] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... futex resumed>) = 0 [pid 1831] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1832] <... futex resumed>) = 1 [pid 1832] creat("./bus", 000) = 6 [pid 1832] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... futex resumed>) = 0 [pid 1831] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1832] <... futex resumed>) = 1 [pid 1832] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1832] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... futex resumed>) = 0 [pid 1831] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1832] <... futex resumed>) = 1 [pid 1832] open("./bus", O_RDONLY) = 7 [pid 1832] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... futex resumed>) = 0 [pid 1831] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1832] <... futex resumed>) = 1 [ 127.334060][ T1832] loop0: detected capacity change from 0 to 512 [ 127.342685][ T1832] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 127.355653][ T1832] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 127.365403][ T1832] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1832] sendfile(6, 7, NULL, 140737974943952 [pid 1831] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1831] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1831] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1831] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1831] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1834]}, 88) = 1834 [pid 1831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1831] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1831] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1834 attached [pid 1834] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1834] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1834] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1834] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... futex resumed>) = 0 [pid 1831] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1831] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1834] <... futex resumed>) = 1 [pid 1834] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1834] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1831] <... futex resumed>) = 0 [pid 1834] <... futex resumed>) = 1 [pid 1834] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1831] exit_group(0) = ? [pid 1834] <... futex resumed>) = ? [pid 1832] <... sendfile resumed>) = ? [pid 1834] +++ exited with 0 +++ [pid 1832] +++ exited with 0 +++ [pid 1831] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1831, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./353/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./353/binderfs") = 0 umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./353/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./353/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./353") = 0 mkdir("./354", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1835 ./strace-static-x86_64: Process 1835 attached [pid 1835] set_robust_list(0x555556b826a0, 24) = 0 [pid 1835] chdir("./354") = 0 [pid 1835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1835] setpgid(0, 0) = 0 [pid 1835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1835] write(3, "1000", 4) = 4 [pid 1835] close(3) = 0 [pid 1835] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1835] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1835] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1835] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1835] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1835] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1836]}, 88) = 1836 [pid 1835] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1835] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1835] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1836 attached [pid 1836] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1836] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1836] memfd_create("syzkaller", 0) = 3 [pid 1836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1836] munmap(0x7f9627d89000, 262144) = 0 [pid 1836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1836] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1836] close(3) = 0 [pid 1836] mkdir("./file0", 0777) = 0 [pid 1836] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1836] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1836] chdir("./file0") = 0 [pid 1836] ioctl(4, LOOP_CLR_FD) = 0 [pid 1836] close(4) = 0 [pid 1836] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1835] <... futex resumed>) = 0 [pid 1835] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1835] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1836] <... futex resumed>) = 1 [pid 1836] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1836] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1835] <... futex resumed>) = 0 [pid 1835] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1835] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1836] <... futex resumed>) = 1 [pid 1836] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1836] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1835] <... futex resumed>) = 0 [pid 1835] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1835] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1836] <... futex resumed>) = 1 [pid 1836] creat("./bus", 000) = 6 [pid 1836] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1835] <... futex resumed>) = 0 [pid 1835] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1835] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1836] <... futex resumed>) = 1 [pid 1836] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1836] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1835] <... futex resumed>) = 0 [pid 1835] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1835] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1836] <... futex resumed>) = 1 [pid 1836] open("./bus", O_RDONLY) = 7 [pid 1836] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1835] <... futex resumed>) = 0 [pid 1836] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1835] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1836] sendfile(6, 7, NULL, 140737974943952 [ 127.607524][ T1836] loop0: detected capacity change from 0 to 512 [ 127.615551][ T1836] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 127.628552][ T1836] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 127.638023][ T1836] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1835] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1835] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1835] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1835] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1838]}, 88) = 1838 [pid 1835] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1835] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1835] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1838 attached [pid 1838] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1838] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1838] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1838] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1835] <... futex resumed>) = 0 [pid 1835] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1835] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1838] <... futex resumed>) = 1 [pid 1838] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1838] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1835] <... futex resumed>) = 0 [pid 1838] <... futex resumed>) = 1 [pid 1838] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1835] exit_group(0 [pid 1838] <... futex resumed>) = ? [pid 1835] <... exit_group resumed>) = ? [pid 1838] +++ exited with 0 +++ [pid 1836] <... sendfile resumed>) = ? [pid 1836] +++ exited with 0 +++ [pid 1835] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1835, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./354/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./354/binderfs") = 0 umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./354/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./354/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./354") = 0 mkdir("./355", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1840 ./strace-static-x86_64: Process 1840 attached [pid 1840] set_robust_list(0x555556b826a0, 24) = 0 [pid 1840] chdir("./355") = 0 [pid 1840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1840] setpgid(0, 0) = 0 [pid 1840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1840] write(3, "1000", 4) = 4 [pid 1840] close(3) = 0 [pid 1840] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1840] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1840] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1840] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1840] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1840] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1840] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1840] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1841]}, 88) = 1841 [pid 1840] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1840] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1841 attached [pid 1841] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1841] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1841] memfd_create("syzkaller", 0) = 3 [pid 1841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1841] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1841] munmap(0x7f9627d89000, 262144) = 0 [pid 1841] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1841] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1841] close(3) = 0 [pid 1841] mkdir("./file0", 0777) = 0 [pid 1841] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1841] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1841] chdir("./file0") = 0 [pid 1841] ioctl(4, LOOP_CLR_FD) = 0 [pid 1841] close(4) = 0 [pid 1841] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1841] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1840] <... futex resumed>) = 0 [pid 1840] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1841] <... futex resumed>) = 0 [pid 1841] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1841] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1840] <... futex resumed>) = 0 [pid 1840] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1841] <... futex resumed>) = 1 [pid 1841] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1841] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1840] <... futex resumed>) = 0 [pid 1840] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1841] <... futex resumed>) = 1 [pid 1841] creat("./bus", 000) = 6 [pid 1841] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1840] <... futex resumed>) = 0 [pid 1840] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1841] <... futex resumed>) = 1 [pid 1841] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1841] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1840] <... futex resumed>) = 0 [pid 1840] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1841] <... futex resumed>) = 1 [pid 1841] open("./bus", O_RDONLY) = 7 [pid 1841] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1840] <... futex resumed>) = 0 [pid 1840] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1840] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1841] <... futex resumed>) = 1 [ 127.877089][ T1841] loop0: detected capacity change from 0 to 512 [ 127.885015][ T1841] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 127.898318][ T1841] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 127.907991][ T1841] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1841] sendfile(6, 7, NULL, 140737974943952 [pid 1840] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1840] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1840] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1840] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1840] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1840] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1843]}, 88) = 1843 [pid 1840] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 1843 attached [pid 1840] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1843] set_robust_list(0x7f9627dc89a0, 24 [pid 1840] <... futex resumed>) = 0 [pid 1843] <... set_robust_list resumed>) = 0 [pid 1840] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1843] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1843] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1843] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1840] <... futex resumed>) = 0 [pid 1843] <... futex resumed>) = 1 [pid 1840] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1840] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1843] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1843] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1840] <... futex resumed>) = 0 [pid 1843] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1840] exit_group(0 [pid 1843] <... futex resumed>) = 231 [pid 1840] <... exit_group resumed>) = ? [pid 1843] +++ exited with 0 +++ [pid 1841] <... sendfile resumed>) = ? [pid 1841] +++ exited with 0 +++ [pid 1840] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1840, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./355/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./355/binderfs") = 0 umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./355/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./355/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./355") = 0 mkdir("./356", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1844 ./strace-static-x86_64: Process 1844 attached [pid 1844] set_robust_list(0x555556b826a0, 24) = 0 [pid 1844] chdir("./356") = 0 [pid 1844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1844] setpgid(0, 0) = 0 [pid 1844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1844] write(3, "1000", 4) = 4 [pid 1844] close(3) = 0 [pid 1844] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1844] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1844] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1844] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1844] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1844] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1845]}, 88) = 1845 [pid 1844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1844] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1845 attached [pid 1845] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1845] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1845] memfd_create("syzkaller", 0) = 3 [pid 1845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1845] munmap(0x7f9627d89000, 262144) = 0 [pid 1845] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1845] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1845] close(3) = 0 [pid 1845] mkdir("./file0", 0777) = 0 [pid 1845] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1845] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1845] chdir("./file0") = 0 [pid 1845] ioctl(4, LOOP_CLR_FD) = 0 [pid 1845] close(4) = 0 [pid 1845] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1844] <... futex resumed>) = 0 [pid 1844] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1845] <... futex resumed>) = 1 [pid 1845] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1845] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1844] <... futex resumed>) = 0 [pid 1844] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1845] <... futex resumed>) = 1 [pid 1845] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1845] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1844] <... futex resumed>) = 0 [pid 1844] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1845] <... futex resumed>) = 1 [pid 1845] creat("./bus", 000) = 6 [pid 1845] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1844] <... futex resumed>) = 0 [pid 1844] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1845] <... futex resumed>) = 1 [pid 1845] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1845] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1844] <... futex resumed>) = 0 [pid 1845] open("./bus", O_RDONLY [pid 1844] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1845] <... open resumed>) = 7 [pid 1845] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1844] <... futex resumed>) = 0 [pid 1844] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1845] sendfile(6, 7, NULL, 140737974943952 [pid 1844] <... futex resumed>) = 0 [ 128.203940][ T1845] loop0: detected capacity change from 0 to 512 [ 128.212016][ T1845] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 128.225341][ T1845] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 128.234942][ T1845] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1844] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1844] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1844] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1844] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1847]}, 88) = 1847 [pid 1844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1844] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1844] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1847 attached [pid 1847] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1847] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1847] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1847] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1844] <... futex resumed>) = 0 [pid 1844] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1844] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1847] <... futex resumed>) = 1 [pid 1847] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1847] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1844] <... futex resumed>) = 0 [pid 1847] <... futex resumed>) = 1 [pid 1847] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1844] exit_group(0) = ? [pid 1847] <... futex resumed>) = ? [pid 1847] +++ exited with 0 +++ [pid 1845] <... sendfile resumed>) = ? [pid 1845] +++ exited with 0 +++ [pid 1844] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1844, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./356/binderfs") = 0 umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./356/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./356/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./356") = 0 mkdir("./357", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1848 ./strace-static-x86_64: Process 1848 attached [pid 1848] set_robust_list(0x555556b826a0, 24) = 0 [pid 1848] chdir("./357") = 0 [pid 1848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1848] setpgid(0, 0) = 0 [pid 1848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1848] write(3, "1000", 4) = 4 [pid 1848] close(3) = 0 [pid 1848] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1848] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1848] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1848] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1848] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1848] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1848] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1849]}, 88) = 1849 [pid 1848] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1848] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1848] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1849 attached [pid 1849] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1849] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1849] memfd_create("syzkaller", 0) = 3 [pid 1849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1849] munmap(0x7f9627d89000, 262144) = 0 [pid 1849] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1849] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1849] close(3) = 0 [pid 1849] mkdir("./file0", 0777) = 0 [pid 1849] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1849] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1849] chdir("./file0") = 0 [pid 1849] ioctl(4, LOOP_CLR_FD) = 0 [pid 1849] close(4) = 0 [pid 1849] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1849] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1848] <... futex resumed>) = 0 [pid 1848] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1848] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1849] <... futex resumed>) = 0 [pid 1849] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1849] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1848] <... futex resumed>) = 0 [pid 1848] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1848] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1849] <... futex resumed>) = 1 [pid 1849] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1849] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1848] <... futex resumed>) = 0 [pid 1848] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1848] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1849] <... futex resumed>) = 1 [pid 1849] creat("./bus", 000) = 6 [pid 1849] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1848] <... futex resumed>) = 0 [pid 1848] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1848] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1849] <... futex resumed>) = 1 [pid 1849] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1849] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1848] <... futex resumed>) = 0 [pid 1848] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1848] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1849] <... futex resumed>) = 1 [pid 1849] open("./bus", O_RDONLY) = 7 [pid 1849] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1848] <... futex resumed>) = 0 [pid 1848] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1848] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1849] <... futex resumed>) = 1 [ 128.527493][ T1849] loop0: detected capacity change from 0 to 512 [ 128.535499][ T1849] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 128.549066][ T1849] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 128.558945][ T1849] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1849] sendfile(6, 7, NULL, 140737974943952 [pid 1848] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1848] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1848] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1848] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1848] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1851]}, 88) = 1851 [pid 1848] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1848] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1848] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1851 attached [pid 1851] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1851] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1851] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1851] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1848] <... futex resumed>) = 0 [pid 1848] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1848] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1851] <... futex resumed>) = 1 [pid 1851] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1851] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1848] <... futex resumed>) = 0 [pid 1851] <... futex resumed>) = 1 [pid 1851] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1848] exit_group(0 [pid 1851] <... futex resumed>) = ? [pid 1848] <... exit_group resumed>) = ? [pid 1851] +++ exited with 0 +++ [pid 1849] <... sendfile resumed>) = ? [pid 1849] +++ exited with 0 +++ [pid 1848] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1848, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./357/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./357/binderfs") = 0 umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./357/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./357/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./357") = 0 mkdir("./358", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1852 ./strace-static-x86_64: Process 1852 attached [pid 1852] set_robust_list(0x555556b826a0, 24) = 0 [pid 1852] chdir("./358") = 0 [pid 1852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1852] setpgid(0, 0) = 0 [pid 1852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1852] write(3, "1000", 4) = 4 [pid 1852] close(3) = 0 [pid 1852] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1852] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1852] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1852] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1852] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1852] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1852] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1852] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1853]}, 88) = 1853 ./strace-static-x86_64: Process 1853 attached [pid 1852] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1852] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1853] set_robust_list(0x7f96301a99a0, 24 [pid 1852] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1853] <... set_robust_list resumed>) = 0 [pid 1853] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1853] memfd_create("syzkaller", 0) = 3 [pid 1853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1853] munmap(0x7f9627d89000, 262144) = 0 [pid 1853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1853] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1853] close(3) = 0 [pid 1853] mkdir("./file0", 0777) = 0 [pid 1853] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1853] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1853] chdir("./file0") = 0 [pid 1853] ioctl(4, LOOP_CLR_FD) = 0 [pid 1853] close(4) = 0 [pid 1853] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1852] <... futex resumed>) = 0 [pid 1852] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1852] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1853] <... futex resumed>) = 1 [pid 1853] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1853] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1852] <... futex resumed>) = 0 [pid 1852] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] <... futex resumed>) = 1 [pid 1852] <... futex resumed>) = 0 [pid 1852] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1853] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1853] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1852] <... futex resumed>) = 0 [pid 1852] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] creat("./bus", 000) = 6 [pid 1853] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1853] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1852] <... futex resumed>) = 1 [pid 1852] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1852] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1852] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1853] <... futex resumed>) = 0 [pid 1853] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1853] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1852] <... futex resumed>) = 0 [pid 1852] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1852] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1853] <... futex resumed>) = 1 [pid 1853] open("./bus", O_RDONLY) = 7 [pid 1853] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1853] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1852] <... futex resumed>) = 0 [pid 1853] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1852] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1853] sendfile(6, 7, NULL, 140737974943952 [pid 1852] <... futex resumed>) = 0 [ 128.842565][ T1853] loop0: detected capacity change from 0 to 512 [ 128.851079][ T1853] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 128.864423][ T1853] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 128.874255][ T1853] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1852] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1852] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1852] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1852] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1852] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1852] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1852] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1856 attached => {parent_tid=[1856]}, 88) = 1856 [pid 1852] rt_sigprocmask(SIG_SETMASK, [], [pid 1856] set_robust_list(0x7f9627dc89a0, 24 [pid 1852] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1852] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1856] <... set_robust_list resumed>) = 0 [pid 1852] <... futex resumed>) = 0 [pid 1856] rt_sigprocmask(SIG_SETMASK, [], [pid 1852] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1856] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1856] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1856] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1852] <... futex resumed>) = 0 [pid 1852] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1856] sendmsg(-1, 0x20000000, 0 [pid 1852] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1856] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1856] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1852] <... futex resumed>) = 0 [pid 1856] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1852] exit_group(0) = ? [pid 1856] <... futex resumed>) = ? [pid 1853] <... sendfile resumed>) = 231 [pid 1856] +++ exited with 0 +++ [pid 1853] +++ exited with 0 +++ [pid 1852] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1852, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./358/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./358/binderfs") = 0 umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./358/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./358/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./358") = 0 mkdir("./359", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1857 ./strace-static-x86_64: Process 1857 attached [pid 1857] set_robust_list(0x555556b826a0, 24) = 0 [pid 1857] chdir("./359") = 0 [pid 1857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1857] setpgid(0, 0) = 0 [pid 1857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1857] write(3, "1000", 4) = 4 [pid 1857] close(3) = 0 [pid 1857] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1857] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1857] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1857] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1857] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1857] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1857] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1858]}, 88) = 1858 [pid 1857] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1857] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1857] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1858 attached [pid 1858] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1858] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1858] memfd_create("syzkaller", 0) = 3 [pid 1858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1858] munmap(0x7f9627d89000, 262144) = 0 [pid 1858] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1858] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1858] close(3) = 0 [pid 1858] mkdir("./file0", 0777) = 0 [pid 1858] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1858] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1858] chdir("./file0") = 0 [pid 1858] ioctl(4, LOOP_CLR_FD) = 0 [pid 1858] close(4) = 0 [pid 1858] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1858] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1857] <... futex resumed>) = 0 [pid 1857] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1857] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1858] <... futex resumed>) = 0 [pid 1858] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1858] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1857] <... futex resumed>) = 0 [pid 1857] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1857] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1858] <... futex resumed>) = 1 [pid 1858] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1858] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1857] <... futex resumed>) = 0 [pid 1857] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1857] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1858] <... futex resumed>) = 1 [pid 1858] creat("./bus", 000) = 6 [pid 1858] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1857] <... futex resumed>) = 0 [pid 1857] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1857] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1858] <... futex resumed>) = 1 [pid 1858] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1858] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1857] <... futex resumed>) = 0 [pid 1857] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1857] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1858] <... futex resumed>) = 1 [pid 1858] open("./bus", O_RDONLY) = 7 [pid 1858] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1857] <... futex resumed>) = 0 [pid 1857] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1857] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1858] <... futex resumed>) = 1 [ 129.141095][ T1858] loop0: detected capacity change from 0 to 512 [ 129.149013][ T1858] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 129.162054][ T1858] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 129.171768][ T1858] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1858] sendfile(6, 7, NULL, 140737974943952 [pid 1857] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1857] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1857] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1857] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1857] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1857] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1860]}, 88) = 1860 [pid 1857] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1857] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1857] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1860 attached [pid 1860] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1860] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1860] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1860] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1857] <... futex resumed>) = 0 [pid 1857] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1857] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1860] <... futex resumed>) = 1 [pid 1860] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1860] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1857] <... futex resumed>) = 0 [pid 1860] <... futex resumed>) = 1 [pid 1860] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1857] exit_group(0 [pid 1860] <... futex resumed>) = ? [pid 1857] <... exit_group resumed>) = ? [pid 1860] +++ exited with 0 +++ [pid 1858] <... sendfile resumed>) = ? [pid 1858] +++ exited with 0 +++ [pid 1857] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1857, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./359/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./359/binderfs") = 0 umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./359/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./359/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./359/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./359") = 0 mkdir("./360", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1861 ./strace-static-x86_64: Process 1861 attached [pid 1861] set_robust_list(0x555556b826a0, 24) = 0 [pid 1861] chdir("./360") = 0 [pid 1861] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1861] setpgid(0, 0) = 0 [pid 1861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1861] write(3, "1000", 4) = 4 [pid 1861] close(3) = 0 [pid 1861] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1861] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1861] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1861] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1861] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1861] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1861] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1861] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1862 attached [pid 1862] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1862] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1862] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1861] <... clone3 resumed> => {parent_tid=[1862]}, 88) = 1862 [pid 1861] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1861] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1862] <... futex resumed>) = 0 [pid 1862] memfd_create("syzkaller", 0) = 3 [pid 1862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1861] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1862] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1862] munmap(0x7f9627d89000, 262144) = 0 [pid 1862] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1862] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1862] close(3) = 0 [pid 1862] mkdir("./file0", 0777) = 0 [pid 1862] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1862] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1862] chdir("./file0") = 0 [pid 1862] ioctl(4, LOOP_CLR_FD) = 0 [pid 1862] close(4) = 0 [pid 1862] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1861] <... futex resumed>) = 0 [pid 1861] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1861] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1862] <... futex resumed>) = 1 [pid 1862] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1862] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1861] <... futex resumed>) = 0 [pid 1861] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1861] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1862] <... futex resumed>) = 1 [pid 1862] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1862] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1861] <... futex resumed>) = 0 [pid 1861] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1861] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1862] <... futex resumed>) = 1 [pid 1862] creat("./bus", 000) = 6 [pid 1862] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1861] <... futex resumed>) = 0 [pid 1862] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 1861] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1861] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1862] <... writev resumed>) = 1 [pid 1862] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1861] <... futex resumed>) = 0 [pid 1861] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1861] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1862] <... futex resumed>) = 1 [pid 1862] open("./bus", O_RDONLY) = 7 [pid 1862] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1861] <... futex resumed>) = 0 [pid 1861] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1861] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1862] <... futex resumed>) = 1 [ 129.448986][ T1862] loop0: detected capacity change from 0 to 512 [ 129.456977][ T1862] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 129.470048][ T1862] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 129.479811][ T1862] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1862] sendfile(6, 7, NULL, 140737974943952 [pid 1861] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1861] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1861] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1861] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1861] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1861] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1864 attached => {parent_tid=[1864]}, 88) = 1864 [pid 1861] rt_sigprocmask(SIG_SETMASK, [], [pid 1864] set_robust_list(0x7f9627dc89a0, 24 [pid 1861] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1861] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1864] <... set_robust_list resumed>) = 0 [pid 1861] <... futex resumed>) = 0 [pid 1861] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1864] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1864] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1864] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1861] <... futex resumed>) = 0 [pid 1861] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1864] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1864] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1861] <... futex resumed>) = 0 [pid 1864] <... futex resumed>) = 0 [pid 1864] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1861] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1861] exit_group(0 [pid 1864] <... futex resumed>) = ? [pid 1862] <... sendfile resumed>) = ? [pid 1861] <... exit_group resumed>) = ? [pid 1864] +++ exited with 0 +++ [pid 1862] +++ exited with 0 +++ [pid 1861] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1861, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./360/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./360/binderfs") = 0 umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./360/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./360/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./360/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./360") = 0 mkdir("./361", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1865 ./strace-static-x86_64: Process 1865 attached [pid 1865] set_robust_list(0x555556b826a0, 24) = 0 [pid 1865] chdir("./361") = 0 [pid 1865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1865] setpgid(0, 0) = 0 [pid 1865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1865] write(3, "1000", 4) = 4 [pid 1865] close(3) = 0 [pid 1865] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1865] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1865] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1865] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1865] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1865] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1865] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1866]}, 88) = 1866 [pid 1865] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1865] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1865] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1866 attached [pid 1866] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1866] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1866] memfd_create("syzkaller", 0) = 3 [pid 1866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1866] munmap(0x7f9627d89000, 262144) = 0 [pid 1866] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1866] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1866] close(3) = 0 [pid 1866] mkdir("./file0", 0777) = 0 [pid 1866] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1866] chdir("./file0") = 0 [pid 1866] ioctl(4, LOOP_CLR_FD) = 0 [pid 1866] close(4) = 0 [pid 1866] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] <... futex resumed>) = 0 [pid 1865] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1865] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1866] <... futex resumed>) = 1 [pid 1866] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1866] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] <... futex resumed>) = 0 [pid 1865] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1865] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1866] <... futex resumed>) = 1 [pid 1866] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1866] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] <... futex resumed>) = 0 [pid 1865] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1865] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1866] <... futex resumed>) = 1 [pid 1866] creat("./bus", 000) = 6 [pid 1866] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] <... futex resumed>) = 0 [pid 1865] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1865] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1866] <... futex resumed>) = 1 [pid 1866] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1866] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1866] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1865] <... futex resumed>) = 0 [pid 1865] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1865] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1866] <... futex resumed>) = 0 [pid 1866] open("./bus", O_RDONLY) = 7 [pid 1866] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] <... futex resumed>) = 0 [pid 1865] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1865] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1866] <... futex resumed>) = 1 [ 129.721660][ T1866] loop0: detected capacity change from 0 to 512 [ 129.729911][ T1866] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 129.742922][ T1866] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 129.752619][ T1866] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1866] sendfile(6, 7, NULL, 140737974943952 [pid 1865] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1865] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1865] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1865] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1865] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1868]}, 88) = 1868 [pid 1865] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1865] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1865] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1868 attached [pid 1868] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1868] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1868] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1868] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] <... futex resumed>) = 0 [pid 1868] <... futex resumed>) = 1 [pid 1865] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1865] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1868] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1868] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1865] <... futex resumed>) = 0 [pid 1868] <... futex resumed>) = 1 [pid 1868] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1865] exit_group(0 [pid 1868] <... futex resumed>) = ? [pid 1865] <... exit_group resumed>) = ? [pid 1868] +++ exited with 0 +++ [pid 1866] <... sendfile resumed>) = ? [pid 1866] +++ exited with 0 +++ [pid 1865] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1865, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./361/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./361/binderfs") = 0 umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./361/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./361/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./361/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./361") = 0 mkdir("./362", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1870 ./strace-static-x86_64: Process 1870 attached [pid 1870] set_robust_list(0x555556b826a0, 24) = 0 [pid 1870] chdir("./362") = 0 [pid 1870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1870] setpgid(0, 0) = 0 [pid 1870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1870] write(3, "1000", 4) = 4 [pid 1870] close(3) = 0 [pid 1870] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1870] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1870] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1870] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1870] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1870] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1871]}, 88) = 1871 [pid 1870] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1870] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1870] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1871 attached [pid 1871] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1871] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1871] memfd_create("syzkaller", 0) = 3 [pid 1871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1871] munmap(0x7f9627d89000, 262144) = 0 [pid 1871] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1871] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1871] close(3) = 0 [pid 1871] mkdir("./file0", 0777) = 0 [pid 1871] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1871] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1871] chdir("./file0") = 0 [pid 1871] ioctl(4, LOOP_CLR_FD) = 0 [pid 1871] close(4) = 0 [pid 1871] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1870] <... futex resumed>) = 0 [pid 1870] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1870] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1871] <... futex resumed>) = 1 [pid 1871] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1871] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1870] <... futex resumed>) = 0 [pid 1870] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1870] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1871] <... futex resumed>) = 1 [pid 1871] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1871] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1870] <... futex resumed>) = 0 [pid 1870] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1870] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1871] <... futex resumed>) = 1 [pid 1871] creat("./bus", 000) = 6 [pid 1871] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1870] <... futex resumed>) = 0 [pid 1871] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1870] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1871] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 1870] <... futex resumed>) = 0 [pid 1870] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1871] <... writev resumed>) = 1 [pid 1871] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1870] <... futex resumed>) = 0 [pid 1870] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1870] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1871] <... futex resumed>) = 1 [pid 1871] open("./bus", O_RDONLY) = 7 [pid 1871] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1870] <... futex resumed>) = 0 [pid 1870] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1870] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1871] <... futex resumed>) = 1 [ 130.036811][ T1871] loop0: detected capacity change from 0 to 512 [ 130.045648][ T1871] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 130.058912][ T1871] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 130.068654][ T1871] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1871] sendfile(6, 7, NULL, 140737974943952 [pid 1870] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1870] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1870] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1870] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1873 attached => {parent_tid=[1873]}, 88) = 1873 [pid 1873] set_robust_list(0x7f9627dc89a0, 24 [pid 1870] rt_sigprocmask(SIG_SETMASK, [], [pid 1873] <... set_robust_list resumed>) = 0 [pid 1873] rt_sigprocmask(SIG_SETMASK, [], [pid 1870] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1870] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1873] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1870] <... futex resumed>) = 0 [pid 1873] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1870] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1873] <... mmap resumed>) = 0x20000000 [pid 1873] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1870] <... futex resumed>) = 0 [pid 1870] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1873] sendmsg(-1, 0x20000000, 0 [pid 1870] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1873] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1873] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1870] <... futex resumed>) = 0 [pid 1873] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1870] exit_group(0) = ? [pid 1871] <... sendfile resumed>) = ? [pid 1871] +++ exited with 0 +++ [pid 1873] <... futex resumed>) = ? [pid 1873] +++ exited with 0 +++ [pid 1870] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1870, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./362/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./362/binderfs") = 0 umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./362/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./362/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./362/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./362") = 0 mkdir("./363", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1874 ./strace-static-x86_64: Process 1874 attached [pid 1874] set_robust_list(0x555556b826a0, 24) = 0 [pid 1874] chdir("./363") = 0 [pid 1874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1874] setpgid(0, 0) = 0 [pid 1874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1874] write(3, "1000", 4) = 4 [pid 1874] close(3) = 0 [pid 1874] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1874] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1874] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1874] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1874] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1874] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1874] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1875 attached => {parent_tid=[1875]}, 88) = 1875 [pid 1874] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1874] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1874] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1875] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1875] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1875] memfd_create("syzkaller", 0) = 3 [pid 1875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1875] munmap(0x7f9627d89000, 262144) = 0 [pid 1875] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1875] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1875] close(3) = 0 [pid 1875] mkdir("./file0", 0777) = 0 [pid 1875] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1875] chdir("./file0") = 0 [pid 1875] ioctl(4, LOOP_CLR_FD) = 0 [pid 1875] close(4) = 0 [pid 1875] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1875] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1874] <... futex resumed>) = 0 [pid 1874] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1874] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1875] <... futex resumed>) = 0 [pid 1875] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1875] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1874] <... futex resumed>) = 0 [pid 1874] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1874] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1875] <... futex resumed>) = 1 [pid 1875] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1875] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1875] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1874] <... futex resumed>) = 0 [pid 1874] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1874] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1875] <... futex resumed>) = 0 [pid 1875] creat("./bus", 000) = 6 [pid 1875] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1874] <... futex resumed>) = 0 [pid 1874] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1874] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1875] <... futex resumed>) = 1 [pid 1875] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1875] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1874] <... futex resumed>) = 0 [pid 1874] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1874] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1875] <... futex resumed>) = 1 [pid 1875] open("./bus", O_RDONLY) = 7 [pid 1875] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1874] <... futex resumed>) = 0 [pid 1874] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1874] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 130.361567][ T1875] loop0: detected capacity change from 0 to 512 [ 130.369399][ T1875] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 130.382359][ T1875] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 130.392067][ T1875] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1875] sendfile(6, 7, NULL, 140737974943952 [pid 1874] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1874] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1874] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1874] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1874] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1874] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1874] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1877]}, 88) = 1877 [pid 1874] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1874] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1874] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1877 attached [pid 1877] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1877] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1877] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1877] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1874] <... futex resumed>) = 0 [pid 1874] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1874] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1877] <... futex resumed>) = 1 [pid 1877] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1877] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1874] <... futex resumed>) = 0 [pid 1877] <... futex resumed>) = 1 [pid 1877] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1874] exit_group(0) = ? [pid 1877] <... futex resumed>) = ? [pid 1877] +++ exited with 0 +++ [pid 1875] <... sendfile resumed>) = ? [pid 1875] +++ exited with 0 +++ [pid 1874] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1874, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./363", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./363/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./363/binderfs") = 0 umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./363/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./363/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./363/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./363") = 0 mkdir("./364", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1878 ./strace-static-x86_64: Process 1878 attached [pid 1878] set_robust_list(0x555556b826a0, 24) = 0 [pid 1878] chdir("./364") = 0 [pid 1878] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1878] setpgid(0, 0) = 0 [pid 1878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1878] write(3, "1000", 4) = 4 [pid 1878] close(3) = 0 [pid 1878] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1878] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1878] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1878] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1878] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1878] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1878] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1878] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1879]}, 88) = 1879 [pid 1878] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1878] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1878] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1879 attached [pid 1879] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1879] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1879] memfd_create("syzkaller", 0) = 3 [pid 1879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1879] munmap(0x7f9627d89000, 262144) = 0 [pid 1879] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1879] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1879] close(3) = 0 [pid 1879] mkdir("./file0", 0777) = 0 [pid 1879] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1879] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1879] chdir("./file0") = 0 [pid 1879] ioctl(4, LOOP_CLR_FD) = 0 [pid 1879] close(4) = 0 [pid 1879] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1879] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1878] <... futex resumed>) = 0 [pid 1878] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1878] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1879] <... futex resumed>) = 0 [pid 1879] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1879] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1878] <... futex resumed>) = 0 [pid 1878] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1878] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1879] <... futex resumed>) = 1 [pid 1879] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1879] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1878] <... futex resumed>) = 0 [pid 1878] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1878] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1879] <... futex resumed>) = 1 [pid 1879] creat("./bus", 000) = 6 [pid 1879] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1878] <... futex resumed>) = 0 [pid 1878] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1878] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1879] <... futex resumed>) = 1 [pid 1879] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1879] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1878] <... futex resumed>) = 0 [pid 1878] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1878] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1879] <... futex resumed>) = 1 [pid 1879] open("./bus", O_RDONLY) = 7 [pid 1879] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1878] <... futex resumed>) = 0 [pid 1878] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1878] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1879] <... futex resumed>) = 1 [ 130.691927][ T1879] loop0: detected capacity change from 0 to 512 [ 130.700043][ T1879] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 130.713039][ T1879] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 130.723099][ T1879] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1879] sendfile(6, 7, NULL, 140737974943952 [pid 1878] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1878] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1878] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1878] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1878] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1878] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1878] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1882]}, 88) = 1882 [pid 1878] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1878] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1878] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1882 attached [pid 1882] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1882] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1882] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1882] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1878] <... futex resumed>) = 0 [pid 1878] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1878] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1882] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1882] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1878] <... futex resumed>) = 0 [pid 1882] <... futex resumed>) = 1 [pid 1882] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1878] exit_group(0 [pid 1882] <... futex resumed>) = ? [pid 1878] <... exit_group resumed>) = ? [pid 1882] +++ exited with 0 +++ [pid 1879] <... sendfile resumed>) = ? [pid 1879] +++ exited with 0 +++ [pid 1878] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1878, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./364/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./364/binderfs") = 0 umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./364/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./364/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./364/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./364") = 0 mkdir("./365", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1884 ./strace-static-x86_64: Process 1884 attached [pid 1884] set_robust_list(0x555556b826a0, 24) = 0 [pid 1884] chdir("./365") = 0 [pid 1884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1884] setpgid(0, 0) = 0 [pid 1884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1884] write(3, "1000", 4) = 4 [pid 1884] close(3) = 0 [pid 1884] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1884] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1884] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1884] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1884] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1884] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1884] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1885 attached => {parent_tid=[1885]}, 88) = 1885 [pid 1885] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1885] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1885] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1884] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1884] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1885] <... futex resumed>) = 0 [pid 1885] memfd_create("syzkaller", 0 [pid 1884] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1885] <... memfd_create resumed>) = 3 [pid 1885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1885] munmap(0x7f9627d89000, 262144) = 0 [pid 1885] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1885] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1885] close(3) = 0 [pid 1885] mkdir("./file0", 0777) = 0 [pid 1885] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1885] chdir("./file0") = 0 [pid 1885] ioctl(4, LOOP_CLR_FD) = 0 [pid 1885] close(4) = 0 [pid 1885] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1884] <... futex resumed>) = 0 [pid 1884] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1884] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1885] <... futex resumed>) = 1 [pid 1885] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1885] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1884] <... futex resumed>) = 0 [pid 1884] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1884] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1885] <... futex resumed>) = 1 [pid 1885] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1885] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1884] <... futex resumed>) = 0 [pid 1884] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1884] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1885] creat("./bus", 000) = 6 [pid 1885] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1884] <... futex resumed>) = 0 [pid 1884] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1884] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1885] <... futex resumed>) = 1 [pid 1885] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1885] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1884] <... futex resumed>) = 0 [pid 1885] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1884] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1885] <... futex resumed>) = 0 [pid 1884] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1885] open("./bus", O_RDONLY) = 7 [pid 1885] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1885] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1884] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1884] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1885] <... futex resumed>) = 0 [ 130.984250][ T1885] loop0: detected capacity change from 0 to 512 [ 130.991879][ T1885] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 131.006307][ T1885] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 131.016207][ T1885] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1885] sendfile(6, 7, NULL, 140737974943952 [pid 1884] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1884] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1884] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1884] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1884] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1888 attached => {parent_tid=[1888]}, 88) = 1888 [pid 1888] set_robust_list(0x7f9627dc89a0, 24 [pid 1884] rt_sigprocmask(SIG_SETMASK, [], [pid 1888] <... set_robust_list resumed>) = 0 [pid 1884] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1888] rt_sigprocmask(SIG_SETMASK, [], [pid 1884] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1888] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1888] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1884] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1888] <... mmap resumed>) = 0x20000000 [pid 1888] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1884] <... futex resumed>) = 0 [pid 1884] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1884] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1888] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1888] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1884] <... futex resumed>) = 0 [pid 1888] <... futex resumed>) = 1 [pid 1888] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1884] exit_group(0 [pid 1888] <... futex resumed>) = ? [pid 1884] <... exit_group resumed>) = ? [pid 1888] +++ exited with 0 +++ [pid 1885] <... sendfile resumed>) = ? [pid 1885] +++ exited with 0 +++ [pid 1884] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1884, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./365/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./365/binderfs") = 0 umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./365/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./365/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./365/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./365") = 0 mkdir("./366", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1889 ./strace-static-x86_64: Process 1889 attached [pid 1889] set_robust_list(0x555556b826a0, 24) = 0 [pid 1889] chdir("./366") = 0 [pid 1889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1889] setpgid(0, 0) = 0 [pid 1889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1889] write(3, "1000", 4) = 4 [pid 1889] close(3) = 0 [pid 1889] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1889] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1889] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1889] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1889] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1889] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1889] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1890 attached [pid 1890] set_robust_list(0x7f96301a99a0, 24 [pid 1889] <... clone3 resumed> => {parent_tid=[1890]}, 88) = 1890 [pid 1890] <... set_robust_list resumed>) = 0 [pid 1889] rt_sigprocmask(SIG_SETMASK, [], [pid 1890] rt_sigprocmask(SIG_SETMASK, [], [pid 1889] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1890] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1889] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1890] memfd_create("syzkaller", 0) = 3 [pid 1890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1890] munmap(0x7f9627d89000, 262144) = 0 [pid 1890] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1890] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1890] close(3) = 0 [pid 1890] mkdir("./file0", 0777) = 0 [pid 1890] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1890] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1890] chdir("./file0") = 0 [pid 1890] ioctl(4, LOOP_CLR_FD) = 0 [pid 1890] close(4) = 0 [pid 1890] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1889] <... futex resumed>) = 0 [pid 1889] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1890] <... futex resumed>) = 1 [pid 1890] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1890] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1889] <... futex resumed>) = 0 [pid 1889] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1890] <... futex resumed>) = 1 [pid 1890] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1890] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1889] <... futex resumed>) = 0 [pid 1889] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1890] <... futex resumed>) = 1 [pid 1890] creat("./bus", 000) = 6 [pid 1890] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1889] <... futex resumed>) = 0 [pid 1889] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1890] <... futex resumed>) = 1 [pid 1890] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1890] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1889] <... futex resumed>) = 0 [pid 1889] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1890] <... futex resumed>) = 1 [pid 1890] open("./bus", O_RDONLY) = 7 [pid 1890] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1889] <... futex resumed>) = 0 [pid 1889] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1889] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1890] <... futex resumed>) = 1 [ 131.270686][ T1890] loop0: detected capacity change from 0 to 512 [ 131.278721][ T1890] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 131.292884][ T1890] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 131.302668][ T1890] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1890] sendfile(6, 7, NULL, 140737974943952 [pid 1889] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1889] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1889] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1889] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1889] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1892 attached => {parent_tid=[1892]}, 88) = 1892 [pid 1889] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1889] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1889] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1892] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1892] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1892] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1892] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1889] <... futex resumed>) = 0 [pid 1889] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1889] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1892] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1892] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1889] <... futex resumed>) = 0 [pid 1892] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1889] exit_group(0 [pid 1892] <... futex resumed>) = ? [pid 1889] <... exit_group resumed>) = ? [pid 1892] +++ exited with 0 +++ [pid 1890] <... sendfile resumed>) = ? [pid 1890] +++ exited with 0 +++ [pid 1889] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1889, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./366/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./366/binderfs") = 0 umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./366/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./366/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./366/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./366") = 0 mkdir("./367", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1893 ./strace-static-x86_64: Process 1893 attached [pid 1893] set_robust_list(0x555556b826a0, 24) = 0 [pid 1893] chdir("./367") = 0 [pid 1893] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1893] setpgid(0, 0) = 0 [pid 1893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1893] write(3, "1000", 4) = 4 [pid 1893] close(3) = 0 [pid 1893] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1893] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1893] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1893] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1893] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1893] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1893] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1893] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1894 attached => {parent_tid=[1894]}, 88) = 1894 [pid 1894] set_robust_list(0x7f96301a99a0, 24 [pid 1893] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1893] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1894] <... set_robust_list resumed>) = 0 [pid 1893] <... futex resumed>) = 0 [pid 1894] rt_sigprocmask(SIG_SETMASK, [], [pid 1893] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1894] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1894] memfd_create("syzkaller", 0) = 3 [pid 1894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1894] munmap(0x7f9627d89000, 262144) = 0 [pid 1894] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1894] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1894] close(3) = 0 [pid 1894] mkdir("./file0", 0777) = 0 [pid 1894] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1894] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1894] chdir("./file0") = 0 [pid 1894] ioctl(4, LOOP_CLR_FD) = 0 [pid 1894] close(4) = 0 [pid 1894] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1893] <... futex resumed>) = 0 [pid 1893] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1894] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1893] <... futex resumed>) = 0 [pid 1893] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1894] <... open resumed>) = 4 [pid 1894] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... futex resumed>) = 0 [pid 1893] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1893] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1894] <... futex resumed>) = 1 [pid 1894] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1894] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... futex resumed>) = 0 [pid 1893] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1893] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1894] <... futex resumed>) = 1 [pid 1894] creat("./bus", 000) = 6 [pid 1894] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... futex resumed>) = 0 [pid 1893] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1893] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1894] <... futex resumed>) = 1 [pid 1894] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1894] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... futex resumed>) = 0 [pid 1893] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1893] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1894] <... futex resumed>) = 1 [pid 1894] open("./bus", O_RDONLY) = 7 [pid 1894] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... futex resumed>) = 0 [pid 1893] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1893] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1894] <... futex resumed>) = 1 [ 131.552715][ T1894] loop0: detected capacity change from 0 to 512 [ 131.560990][ T1894] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 131.574447][ T1894] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 131.584175][ T1894] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1894] sendfile(6, 7, NULL, 140737974943952 [pid 1893] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1893] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1893] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1893] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1893] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1893] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1893] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1893] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1896 attached [pid 1896] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1896] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1896] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1893] <... clone3 resumed> => {parent_tid=[1896]}, 88) = 1896 [pid 1893] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1893] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1896] <... futex resumed>) = 0 [pid 1893] <... futex resumed>) = 1 [pid 1896] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1893] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1896] <... mmap resumed>) = 0x20000000 [pid 1896] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1893] <... futex resumed>) = 0 [pid 1893] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1896] sendmsg(-1, 0x20000000, 0 [pid 1893] <... futex resumed>) = 0 [pid 1896] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 1893] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1896] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1893] <... futex resumed>) = 0 [pid 1896] <... futex resumed>) = 1 [pid 1896] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1893] exit_group(0 [pid 1896] <... futex resumed>) = ? [pid 1893] <... exit_group resumed>) = ? [pid 1896] +++ exited with 0 +++ [pid 1894] <... sendfile resumed>) = ? [pid 1894] +++ exited with 0 +++ [pid 1893] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1893, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./367/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./367/binderfs") = 0 umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./367/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./367/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./367/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./367") = 0 mkdir("./368", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1897 ./strace-static-x86_64: Process 1897 attached [pid 1897] set_robust_list(0x555556b826a0, 24) = 0 [pid 1897] chdir("./368") = 0 [pid 1897] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1897] setpgid(0, 0) = 0 [pid 1897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1897] write(3, "1000", 4) = 4 [pid 1897] close(3) = 0 [pid 1897] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1897] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1897] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1897] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1897] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1897] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1897] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1897] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1898]}, 88) = 1898 [pid 1897] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1897] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1897] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1898 attached [pid 1898] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1898] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1898] memfd_create("syzkaller", 0) = 3 [pid 1898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1898] munmap(0x7f9627d89000, 262144) = 0 [pid 1898] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1898] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1898] close(3) = 0 [pid 1898] mkdir("./file0", 0777) = 0 [pid 1898] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1898] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1898] chdir("./file0") = 0 [pid 1898] ioctl(4, LOOP_CLR_FD) = 0 [pid 1898] close(4) = 0 [pid 1898] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1897] <... futex resumed>) = 0 [pid 1897] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1897] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1898] <... futex resumed>) = 1 [pid 1898] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1898] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1897] <... futex resumed>) = 0 [pid 1897] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1897] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1898] <... futex resumed>) = 1 [pid 1898] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1898] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1897] <... futex resumed>) = 0 [pid 1897] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1897] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1898] <... futex resumed>) = 1 [pid 1898] creat("./bus", 000) = 6 [pid 1898] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1897] <... futex resumed>) = 0 [pid 1897] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1897] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1898] <... futex resumed>) = 1 [pid 1898] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1898] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1897] <... futex resumed>) = 0 [pid 1897] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1897] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1898] <... futex resumed>) = 1 [pid 1898] open("./bus", O_RDONLY) = 7 [pid 1898] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1897] <... futex resumed>) = 0 [pid 1897] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1897] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1898] <... futex resumed>) = 1 [ 131.846911][ T1898] loop0: detected capacity change from 0 to 512 [ 131.854960][ T1898] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 131.868405][ T1898] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 131.877961][ T1898] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1898] sendfile(6, 7, NULL, 140737974943952 [pid 1897] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1897] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1897] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1897] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1897] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1897] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1897] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1901]}, 88) = 1901 [pid 1897] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1897] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1897] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1901 attached [pid 1901] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1901] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1901] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1901] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1897] <... futex resumed>) = 0 [pid 1897] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1897] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1901] <... futex resumed>) = 1 [pid 1901] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1901] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1897] <... futex resumed>) = 0 [pid 1901] <... futex resumed>) = 1 [pid 1901] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1897] exit_group(0 [pid 1901] <... futex resumed>) = ? [pid 1897] <... exit_group resumed>) = ? [pid 1901] +++ exited with 0 +++ [pid 1898] <... sendfile resumed>) = ? [pid 1898] +++ exited with 0 +++ [pid 1897] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1897, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./368/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./368/binderfs") = 0 umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./368/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./368/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./368/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./368") = 0 mkdir("./369", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1902 ./strace-static-x86_64: Process 1902 attached [pid 1902] set_robust_list(0x555556b826a0, 24) = 0 [pid 1902] chdir("./369") = 0 [pid 1902] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1902] setpgid(0, 0) = 0 [pid 1902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1902] write(3, "1000", 4) = 4 [pid 1902] close(3) = 0 [pid 1902] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1902] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1902] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1902] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1902] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1902] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1902] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1902] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1903 attached [pid 1903] set_robust_list(0x7f96301a99a0, 24 [pid 1902] <... clone3 resumed> => {parent_tid=[1903]}, 88) = 1903 [pid 1903] <... set_robust_list resumed>) = 0 [pid 1903] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1903] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1902] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1902] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1903] <... futex resumed>) = 0 [pid 1902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1903] memfd_create("syzkaller", 0) = 3 [pid 1903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1903] munmap(0x7f9627d89000, 262144) = 0 [pid 1903] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1903] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1903] close(3) = 0 [pid 1903] mkdir("./file0", 0777) = 0 [pid 1903] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1903] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1903] chdir("./file0") = 0 [pid 1903] ioctl(4, LOOP_CLR_FD) = 0 [pid 1903] close(4) = 0 [pid 1903] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1902] <... futex resumed>) = 0 [pid 1902] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1903] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1902] <... futex resumed>) = 0 [pid 1902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1903] <... open resumed>) = 4 [pid 1903] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1902] <... futex resumed>) = 0 [pid 1902] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1903] <... futex resumed>) = 1 [pid 1903] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1903] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1902] <... futex resumed>) = 0 [pid 1902] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1903] <... futex resumed>) = 1 [pid 1903] creat("./bus", 000) = 6 [pid 1903] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1902] <... futex resumed>) = 0 [pid 1902] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1903] <... futex resumed>) = 1 [pid 1903] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1903] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1902] <... futex resumed>) = 0 [pid 1902] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1903] <... futex resumed>) = 1 [pid 1903] open("./bus", O_RDONLY) = 7 [pid 1903] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1902] <... futex resumed>) = 0 [pid 1902] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1903] <... futex resumed>) = 1 [ 132.132291][ T1903] loop0: detected capacity change from 0 to 512 [ 132.140111][ T1903] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 132.153098][ T1903] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 132.162849][ T1903] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1903] sendfile(6, 7, NULL, 140737974943952 [pid 1902] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1902] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1902] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1902] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1902] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1902] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1902] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1905]}, 88) = 1905 [pid 1902] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1902] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1902] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1905 attached [pid 1905] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1905] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1905] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1905] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1902] <... futex resumed>) = 0 [pid 1902] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1902] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1905] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1905] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1902] <... futex resumed>) = 0 [pid 1905] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1902] exit_group(0 [pid 1905] <... futex resumed>) = ? [pid 1902] <... exit_group resumed>) = ? [pid 1905] +++ exited with 0 +++ [pid 1903] <... sendfile resumed>) = ? [pid 1903] +++ exited with 0 +++ [pid 1902] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1902, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./369/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./369/binderfs") = 0 umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./369/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./369/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./369/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./369") = 0 mkdir("./370", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1906 ./strace-static-x86_64: Process 1906 attached [pid 1906] set_robust_list(0x555556b826a0, 24) = 0 [pid 1906] chdir("./370") = 0 [pid 1906] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1906] setpgid(0, 0) = 0 [pid 1906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1906] write(3, "1000", 4) = 4 [pid 1906] close(3) = 0 [pid 1906] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1906] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1906] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1906] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1906] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1906] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1906] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1906] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1907]}, 88) = 1907 [pid 1906] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1906] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1906] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1907 attached [pid 1907] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1907] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1907] memfd_create("syzkaller", 0) = 3 [pid 1907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1907] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1907] munmap(0x7f9627d89000, 262144) = 0 [pid 1907] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1907] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1907] close(3) = 0 [pid 1907] mkdir("./file0", 0777) = 0 [pid 1907] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1907] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1907] chdir("./file0") = 0 [pid 1907] ioctl(4, LOOP_CLR_FD) = 0 [pid 1907] close(4) = 0 [pid 1907] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1906] <... futex resumed>) = 0 [pid 1906] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1906] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1907] <... futex resumed>) = 1 [pid 1907] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1907] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1906] <... futex resumed>) = 0 [pid 1906] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1906] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1907] <... futex resumed>) = 1 [pid 1907] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1907] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1906] <... futex resumed>) = 0 [pid 1906] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1906] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1907] <... futex resumed>) = 1 [pid 1907] creat("./bus", 000) = 6 [pid 1907] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1906] <... futex resumed>) = 0 [pid 1906] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1906] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1907] <... futex resumed>) = 1 [pid 1907] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1907] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1906] <... futex resumed>) = 0 [pid 1906] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1906] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1907] <... futex resumed>) = 1 [pid 1907] open("./bus", O_RDONLY) = 7 [pid 1907] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1906] <... futex resumed>) = 0 [pid 1906] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1907] sendfile(6, 7, NULL, 140737974943952 [ 132.408201][ T1907] loop0: detected capacity change from 0 to 512 [ 132.415986][ T1907] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 132.429131][ T1907] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 132.438855][ T1907] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1906] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1906] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1906] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1906] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1906] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1906] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1906] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1909 attached [pid 1909] set_robust_list(0x7f9627dc89a0, 24 [pid 1906] <... clone3 resumed> => {parent_tid=[1909]}, 88) = 1909 [pid 1909] <... set_robust_list resumed>) = 0 [pid 1906] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1909] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1906] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1909] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1906] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1909] <... mmap resumed>) = 0x20000000 [pid 1909] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1906] <... futex resumed>) = 0 [pid 1906] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1906] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1909] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1909] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1906] <... futex resumed>) = 0 [pid 1909] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1906] exit_group(0 [pid 1909] <... futex resumed>) = ? [pid 1906] <... exit_group resumed>) = ? [pid 1909] +++ exited with 0 +++ [pid 1907] <... sendfile resumed>) = ? [pid 1907] +++ exited with 0 +++ [pid 1906] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1906, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./370/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./370/binderfs") = 0 umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./370/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./370/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./370/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./370") = 0 mkdir("./371", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1910 ./strace-static-x86_64: Process 1910 attached [pid 1910] set_robust_list(0x555556b826a0, 24) = 0 [pid 1910] chdir("./371") = 0 [pid 1910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1910] setpgid(0, 0) = 0 [pid 1910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1910] write(3, "1000", 4) = 4 [pid 1910] close(3) = 0 [pid 1910] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1910] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1910] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1910] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1910] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1910] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1910] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1911]}, 88) = 1911 ./strace-static-x86_64: Process 1911 attached [pid 1910] rt_sigprocmask(SIG_SETMASK, [], [pid 1911] set_robust_list(0x7f96301a99a0, 24 [pid 1910] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1910] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1910] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1911] <... set_robust_list resumed>) = 0 [pid 1911] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1911] memfd_create("syzkaller", 0) = 3 [pid 1911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1911] munmap(0x7f9627d89000, 262144) = 0 [pid 1911] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1911] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1911] close(3) = 0 [pid 1911] mkdir("./file0", 0777) = 0 [pid 1911] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1911] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1911] chdir("./file0") = 0 [pid 1911] ioctl(4, LOOP_CLR_FD) = 0 [pid 1911] close(4) = 0 [pid 1911] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] <... futex resumed>) = 0 [pid 1910] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1910] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1911] <... futex resumed>) = 1 [pid 1911] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1911] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1911] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1910] <... futex resumed>) = 0 [pid 1910] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1910] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1911] <... futex resumed>) = 0 [pid 1911] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1911] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] <... futex resumed>) = 0 [pid 1910] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1910] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1911] <... futex resumed>) = 1 [pid 1911] creat("./bus", 000) = 6 [pid 1911] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] <... futex resumed>) = 0 [pid 1910] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1910] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1911] <... futex resumed>) = 1 [pid 1911] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1911] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] <... futex resumed>) = 0 [pid 1910] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1910] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1911] <... futex resumed>) = 1 [pid 1911] open("./bus", O_RDONLY) = 7 [pid 1911] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] <... futex resumed>) = 0 [pid 1910] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1910] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1911] <... futex resumed>) = 1 [ 132.728243][ T1911] loop0: detected capacity change from 0 to 512 [ 132.736663][ T1911] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 132.749783][ T1911] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 132.759354][ T1911] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1911] sendfile(6, 7, NULL, 140737974943952 [pid 1910] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1910] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1910] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1910] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1910] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1910] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1913]}, 88) = 1913 [pid 1910] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1910] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1910] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1913 attached [pid 1913] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1913] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1913] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1913] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] <... futex resumed>) = 0 [pid 1910] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1910] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1913] <... futex resumed>) = 1 [pid 1913] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1913] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1910] <... futex resumed>) = 0 [pid 1913] <... futex resumed>) = 1 [pid 1913] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1910] exit_group(0 [pid 1913] <... futex resumed>) = -1 (errno 18446744073709551555) [pid 1910] <... exit_group resumed>) = ? [pid 1913] +++ exited with 0 +++ [pid 1911] <... sendfile resumed>) = ? [pid 1911] +++ exited with 0 +++ [pid 1910] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1910, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./371/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./371/binderfs") = 0 umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./371/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./371/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./371/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./371") = 0 mkdir("./372", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 1915 attached , child_tidptr=0x555556b82690) = 1915 [pid 1915] set_robust_list(0x555556b826a0, 24) = 0 [pid 1915] chdir("./372") = 0 [pid 1915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1915] setpgid(0, 0) = 0 [pid 1915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1915] write(3, "1000", 4) = 4 [pid 1915] close(3) = 0 [pid 1915] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1915] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1915] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1915] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1915] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1915] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1915] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1916 attached [pid 1916] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1916] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1916] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1915] <... clone3 resumed> => {parent_tid=[1916]}, 88) = 1916 [pid 1915] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1915] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1916] <... futex resumed>) = 0 [pid 1916] memfd_create("syzkaller", 0) = 3 [pid 1916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1916] munmap(0x7f9627d89000, 262144) = 0 [pid 1916] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1916] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1916] close(3) = 0 [pid 1916] mkdir("./file0", 0777) = 0 [pid 1916] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1916] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1916] chdir("./file0") = 0 [pid 1916] ioctl(4, LOOP_CLR_FD) = 0 [pid 1916] close(4) = 0 [pid 1916] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1916] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1915] <... futex resumed>) = 0 [pid 1915] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1916] <... futex resumed>) = 0 [pid 1916] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1916] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1915] <... futex resumed>) = 0 [pid 1915] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1916] <... futex resumed>) = 1 [pid 1916] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1916] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1915] <... futex resumed>) = 0 [pid 1915] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1916] <... futex resumed>) = 1 [pid 1916] creat("./bus", 000) = 6 [pid 1916] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1915] <... futex resumed>) = 0 [pid 1915] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1916] <... futex resumed>) = 1 [pid 1916] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1916] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1915] <... futex resumed>) = 0 [pid 1915] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1916] <... futex resumed>) = 1 [pid 1916] open("./bus", O_RDONLY) = 7 [pid 1916] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1915] <... futex resumed>) = 0 [pid 1916] sendfile(6, 7, NULL, 140737974943952 [pid 1915] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 133.025506][ T1916] loop0: detected capacity change from 0 to 512 [ 133.034191][ T1916] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 133.047206][ T1916] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 133.057035][ T1916] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1915] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1915] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1915] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1915] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1915] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1918]}, 88) = 1918 ./strace-static-x86_64: Process 1918 attached [pid 1915] rt_sigprocmask(SIG_SETMASK, [], [pid 1918] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1918] rt_sigprocmask(SIG_SETMASK, [], [pid 1915] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1918] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1918] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1915] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1918] <... futex resumed>) = 0 [pid 1915] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1918] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1918] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1915] <... futex resumed>) = 0 [pid 1915] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1915] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1918] <... futex resumed>) = 1 [pid 1918] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1918] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1915] <... futex resumed>) = 0 [pid 1918] <... futex resumed>) = 1 [pid 1918] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1915] exit_group(0 [pid 1918] <... futex resumed>) = ? [pid 1915] <... exit_group resumed>) = ? [pid 1918] +++ exited with 0 +++ [pid 1916] <... sendfile resumed>) = ? [pid 1916] +++ exited with 0 +++ [pid 1915] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1915, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./372/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./372/binderfs") = 0 umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./372/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./372/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./372/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./372") = 0 mkdir("./373", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1919 ./strace-static-x86_64: Process 1919 attached [pid 1919] set_robust_list(0x555556b826a0, 24) = 0 [pid 1919] chdir("./373") = 0 [pid 1919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1919] setpgid(0, 0) = 0 [pid 1919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1919] write(3, "1000", 4) = 4 [pid 1919] close(3) = 0 [pid 1919] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1919] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1919] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1919] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1919] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1919] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1919] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1919] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1920 attached [pid 1920] set_robust_list(0x7f96301a99a0, 24 [pid 1919] <... clone3 resumed> => {parent_tid=[1920]}, 88) = 1920 [pid 1920] <... set_robust_list resumed>) = 0 [pid 1919] rt_sigprocmask(SIG_SETMASK, [], [pid 1920] rt_sigprocmask(SIG_SETMASK, [], [pid 1919] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1920] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1919] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1920] memfd_create("syzkaller", 0) = 3 [pid 1920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1920] munmap(0x7f9627d89000, 262144) = 0 [pid 1920] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1920] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1920] close(3) = 0 [pid 1920] mkdir("./file0", 0777) = 0 [pid 1920] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1920] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1920] chdir("./file0") = 0 [pid 1920] ioctl(4, LOOP_CLR_FD) = 0 [pid 1920] close(4) = 0 [pid 1920] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1919] <... futex resumed>) = 0 [pid 1919] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1920] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1920] <... open resumed>) = 4 [pid 1920] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1920] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1919] <... futex resumed>) = 0 [pid 1919] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1920] <... futex resumed>) = 0 [pid 1920] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1920] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1919] <... futex resumed>) = 0 [pid 1919] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1920] <... futex resumed>) = 1 [pid 1920] creat("./bus", 000) = 6 [pid 1920] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1919] <... futex resumed>) = 0 [pid 1919] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1920] <... futex resumed>) = 1 [pid 1920] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1920] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1919] <... futex resumed>) = 0 [pid 1919] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1920] open("./bus", O_RDONLY [pid 1919] <... futex resumed>) = 0 [pid 1920] <... open resumed>) = 7 [pid 1919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1920] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1919] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1920] <... futex resumed>) = 0 [pid 1919] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1920] sendfile(6, 7, NULL, 140737974943952 [pid 1919] <... futex resumed>) = 0 [ 133.311223][ T1920] loop0: detected capacity change from 0 to 512 [ 133.319162][ T1920] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 133.332202][ T1920] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 133.341874][ T1920] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 1919] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1919] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1919] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1919] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1919] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1919] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1922]}, 88) = 1922 [pid 1919] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1919] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1919] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1922 attached [pid 1922] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1922] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1922] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1922] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1919] <... futex resumed>) = 0 [pid 1919] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1919] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1922] <... futex resumed>) = 1 [pid 1922] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1922] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1919] <... futex resumed>) = 0 [pid 1922] <... futex resumed>) = 1 [pid 1922] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1919] exit_group(0) = ? [pid 1922] <... futex resumed>) = ? [pid 1920] <... sendfile resumed>) = ? [pid 1920] +++ exited with 0 +++ [pid 1922] +++ exited with 0 +++ [pid 1919] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1919, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./373/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./373/binderfs") = 0 umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./373/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./373/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./373/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./373") = 0 mkdir("./374", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1923 ./strace-static-x86_64: Process 1923 attached [pid 1923] set_robust_list(0x555556b826a0, 24) = 0 [pid 1923] chdir("./374") = 0 [pid 1923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1923] setpgid(0, 0) = 0 [pid 1923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1923] write(3, "1000", 4) = 4 [pid 1923] close(3) = 0 [pid 1923] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1923] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1923] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1923] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1923] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1923] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1923] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1923] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1924 attached => {parent_tid=[1924]}, 88) = 1924 [pid 1923] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1923] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1923] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1924] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1924] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1924] memfd_create("syzkaller", 0) = 3 [pid 1924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1924] munmap(0x7f9627d89000, 262144) = 0 [pid 1924] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1924] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1924] close(3) = 0 [pid 1924] mkdir("./file0", 0777) = 0 [pid 1924] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1924] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1924] chdir("./file0") = 0 [pid 1924] ioctl(4, LOOP_CLR_FD) = 0 [pid 1924] close(4) = 0 [pid 1924] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1923] <... futex resumed>) = 0 [pid 1923] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1923] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1924] <... futex resumed>) = 1 [pid 1924] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1924] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1923] <... futex resumed>) = 0 [pid 1923] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1923] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1924] <... futex resumed>) = 1 [pid 1924] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1924] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1923] <... futex resumed>) = 0 [pid 1923] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1923] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1924] <... futex resumed>) = 1 [pid 1924] creat("./bus", 000) = 6 [pid 1924] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1924] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1923] <... futex resumed>) = 0 [pid 1923] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1923] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1924] <... futex resumed>) = 0 [pid 1924] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1924] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1923] <... futex resumed>) = 0 [pid 1923] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1923] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1924] <... futex resumed>) = 1 [pid 1924] open("./bus", O_RDONLY) = 7 [pid 1924] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1923] <... futex resumed>) = 0 [pid 1923] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1923] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1924] <... futex resumed>) = 1 [ 133.608306][ T1924] loop0: detected capacity change from 0 to 512 [ 133.616113][ T1924] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 133.629150][ T1924] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 133.638881][ T1924] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1924] sendfile(6, 7, NULL, 140737974943952 [pid 1923] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1923] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1923] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1923] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1923] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1923] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1923] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1923] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1923] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1926 attached => {parent_tid=[1926]}, 88) = 1926 [pid 1923] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1923] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1923] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1926] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1926] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1926] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1926] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1923] <... futex resumed>) = 0 [pid 1923] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1923] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1926] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1926] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1923] <... futex resumed>) = 0 [pid 1926] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1923] exit_group(0 [pid 1926] <... futex resumed>) = ? [pid 1923] <... exit_group resumed>) = ? [pid 1924] <... sendfile resumed>) = ? [pid 1926] +++ exited with 0 +++ [pid 1924] +++ exited with 0 +++ [pid 1923] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1923, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./374/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./374/binderfs") = 0 umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./374/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./374/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./374/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./374") = 0 mkdir("./375", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1928 ./strace-static-x86_64: Process 1928 attached [pid 1928] set_robust_list(0x555556b826a0, 24) = 0 [pid 1928] chdir("./375") = 0 [pid 1928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1928] setpgid(0, 0) = 0 [pid 1928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1928] write(3, "1000", 4) = 4 [pid 1928] close(3) = 0 [pid 1928] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1928] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1928] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1928] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1928] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1928] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1928] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1929]}, 88) = 1929 [pid 1928] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1928] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1929 attached [pid 1929] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1929] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1929] memfd_create("syzkaller", 0) = 3 [pid 1929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1929] munmap(0x7f9627d89000, 262144) = 0 [pid 1929] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1929] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1929] close(3) = 0 [pid 1929] mkdir("./file0", 0777) = 0 [pid 1929] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1929] chdir("./file0") = 0 [pid 1929] ioctl(4, LOOP_CLR_FD) = 0 [pid 1929] close(4) = 0 [pid 1929] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1929] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1928] <... futex resumed>) = 0 [pid 1928] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1929] <... futex resumed>) = 0 [pid 1929] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1929] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1929] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1928] <... futex resumed>) = 0 [pid 1928] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1929] <... futex resumed>) = 0 [pid 1929] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1929] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1928] <... futex resumed>) = 0 [pid 1928] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1929] <... futex resumed>) = 1 [pid 1929] creat("./bus", 000) = 6 [pid 1929] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1928] <... futex resumed>) = 0 [pid 1928] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1929] <... futex resumed>) = 1 [pid 1929] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1929] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1928] <... futex resumed>) = 0 [pid 1928] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1929] <... futex resumed>) = 1 [pid 1929] open("./bus", O_RDONLY) = 7 [pid 1929] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1928] <... futex resumed>) = 0 [pid 1928] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 133.871348][ T1929] loop0: detected capacity change from 0 to 512 [ 133.879521][ T1929] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 133.892750][ T1929] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 133.902598][ T1929] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1929] sendfile(6, 7, NULL, 140737974943952 [pid 1928] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1928] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1928] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1928] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1928] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1928] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1931]}, 88) = 1931 [pid 1928] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1928] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1928] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1931 attached [pid 1931] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1931] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1931] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1931] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1928] <... futex resumed>) = 0 [pid 1928] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1928] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1931] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1931] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1928] <... futex resumed>) = 0 [pid 1931] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1928] exit_group(0 [pid 1931] <... futex resumed>) = ? [pid 1928] <... exit_group resumed>) = ? [pid 1931] +++ exited with 0 +++ [pid 1929] <... sendfile resumed>) = ? [pid 1929] +++ exited with 0 +++ [pid 1928] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1928, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./375/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./375/binderfs") = 0 umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./375/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./375/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./375/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./375") = 0 mkdir("./376", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1932 ./strace-static-x86_64: Process 1932 attached [pid 1932] set_robust_list(0x555556b826a0, 24) = 0 [pid 1932] chdir("./376") = 0 [pid 1932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1932] setpgid(0, 0) = 0 [pid 1932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1932] write(3, "1000", 4) = 4 [pid 1932] close(3) = 0 [pid 1932] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1932] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1932] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1932] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1932] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1932] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1932] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1933]}, 88) = 1933 ./strace-static-x86_64: Process 1933 attached [pid 1932] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1932] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1933] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1933] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1933] memfd_create("syzkaller", 0) = 3 [pid 1933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1933] munmap(0x7f9627d89000, 262144) = 0 [pid 1933] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1933] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1933] close(3) = 0 [pid 1933] mkdir("./file0", 0777) = 0 [pid 1933] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1933] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1933] chdir("./file0") = 0 [pid 1933] ioctl(4, LOOP_CLR_FD) = 0 [pid 1933] close(4) = 0 [pid 1933] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1932] <... futex resumed>) = 0 [pid 1932] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1933] <... futex resumed>) = 1 [pid 1933] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1933] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1932] <... futex resumed>) = 0 [pid 1932] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1933] <... futex resumed>) = 1 [pid 1933] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1933] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1932] <... futex resumed>) = 0 [pid 1932] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1933] <... futex resumed>) = 1 [pid 1933] creat("./bus", 000) = 6 [pid 1933] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1932] <... futex resumed>) = 0 [pid 1932] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1933] <... futex resumed>) = 1 [pid 1933] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1933] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1932] <... futex resumed>) = 0 [pid 1933] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1932] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1933] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1933] open("./bus", O_RDONLY) = 7 [pid 1933] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1933] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1932] <... futex resumed>) = 1 [pid 1932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1932] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1932] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1933] <... futex resumed>) = 0 [ 134.140267][ T1933] loop0: detected capacity change from 0 to 512 [ 134.148095][ T1933] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 134.161145][ T1933] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 134.170720][ T1933] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1933] sendfile(6, 7, NULL, 140737974943952 [pid 1932] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1932] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1932] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1932] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1932] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1935]}, 88) = 1935 [pid 1932] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1932] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1932] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1935 attached [pid 1935] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1935] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1935] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1935] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1932] <... futex resumed>) = 0 [pid 1932] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1932] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1935] <... futex resumed>) = 1 [pid 1935] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1935] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1932] <... futex resumed>) = 0 [pid 1935] <... futex resumed>) = 1 [pid 1935] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1932] exit_group(0 [pid 1935] <... futex resumed>) = ? [pid 1932] <... exit_group resumed>) = ? [pid 1935] +++ exited with 0 +++ [pid 1933] <... sendfile resumed>) = ? [pid 1933] +++ exited with 0 +++ [pid 1932] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1932, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./376/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./376/binderfs") = 0 umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./376/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./376/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./376/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./376") = 0 mkdir("./377", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1936 ./strace-static-x86_64: Process 1936 attached [pid 1936] set_robust_list(0x555556b826a0, 24) = 0 [pid 1936] chdir("./377") = 0 [pid 1936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1936] setpgid(0, 0) = 0 [pid 1936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1936] write(3, "1000", 4) = 4 [pid 1936] close(3) = 0 [pid 1936] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1936] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1936] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1936] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1936] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1936] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1936] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1936] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1937]}, 88) = 1937 [pid 1936] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1936] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1936] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1937 attached [pid 1937] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1937] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1937] memfd_create("syzkaller", 0) = 3 [pid 1937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1937] munmap(0x7f9627d89000, 262144) = 0 [pid 1937] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1937] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1937] close(3) = 0 [pid 1937] mkdir("./file0", 0777) = 0 [pid 1937] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1937] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1937] chdir("./file0") = 0 [pid 1937] ioctl(4, LOOP_CLR_FD) = 0 [pid 1937] close(4) = 0 [pid 1937] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1936] <... futex resumed>) = 0 [pid 1936] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1936] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1937] <... futex resumed>) = 1 [pid 1937] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1937] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1936] <... futex resumed>) = 0 [pid 1936] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1936] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1937] <... futex resumed>) = 1 [pid 1937] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1937] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1936] <... futex resumed>) = 0 [pid 1936] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1936] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1937] <... futex resumed>) = 1 [pid 1937] creat("./bus", 000) = 6 [pid 1937] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1936] <... futex resumed>) = 0 [pid 1936] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1936] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1937] <... futex resumed>) = 1 [pid 1937] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1937] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1936] <... futex resumed>) = 0 [pid 1937] open("./bus", O_RDONLY [pid 1936] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1936] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1937] <... open resumed>) = 7 [pid 1937] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1936] <... futex resumed>) = 0 [pid 1936] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1936] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1937] <... futex resumed>) = 1 [ 134.450132][ T1937] loop0: detected capacity change from 0 to 512 [ 134.457788][ T1937] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 134.470961][ T1937] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 134.480803][ T1937] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1937] sendfile(6, 7, NULL, 140737974943952 [pid 1936] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1936] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1936] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1936] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1936] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1936] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1936] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1936] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1939]}, 88) = 1939 [pid 1936] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1936] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1936] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1939 attached [pid 1939] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1939] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1939] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1939] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1936] <... futex resumed>) = 0 [pid 1936] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1936] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1939] <... futex resumed>) = 1 [pid 1939] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1939] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1936] <... futex resumed>) = 0 [pid 1939] <... futex resumed>) = 1 [pid 1939] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1936] exit_group(0 [pid 1939] <... futex resumed>) = ? [pid 1936] <... exit_group resumed>) = ? [pid 1937] <... sendfile resumed>) = ? [pid 1937] +++ exited with 0 +++ [pid 1939] +++ exited with 0 +++ [pid 1936] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1936, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./377/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./377/binderfs") = 0 umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./377/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./377/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./377/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./377") = 0 mkdir("./378", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1940 ./strace-static-x86_64: Process 1940 attached [pid 1940] set_robust_list(0x555556b826a0, 24) = 0 [pid 1940] chdir("./378") = 0 [pid 1940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1940] setpgid(0, 0) = 0 [pid 1940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1940] write(3, "1000", 4) = 4 [pid 1940] close(3) = 0 [pid 1940] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1940] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1940] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1940] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1940] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1940] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1940] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1941]}, 88) = 1941 [pid 1940] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1940] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1940] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1941 attached [pid 1941] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1941] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1941] memfd_create("syzkaller", 0) = 3 [pid 1941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1941] munmap(0x7f9627d89000, 262144) = 0 [pid 1941] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1941] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1941] close(3) = 0 [pid 1941] mkdir("./file0", 0777) = 0 [pid 1941] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1941] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1941] chdir("./file0") = 0 [pid 1941] ioctl(4, LOOP_CLR_FD) = 0 [pid 1941] close(4) = 0 [pid 1941] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] <... futex resumed>) = 0 [pid 1940] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1940] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1941] <... futex resumed>) = 1 [pid 1941] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1941] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] <... futex resumed>) = 0 [pid 1940] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1940] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1941] <... futex resumed>) = 1 [pid 1941] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1941] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] <... futex resumed>) = 0 [pid 1940] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1940] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1941] <... futex resumed>) = 1 [pid 1941] creat("./bus", 000) = 6 [pid 1941] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] <... futex resumed>) = 0 [pid 1940] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1940] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1941] <... futex resumed>) = 1 [pid 1941] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1941] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] <... futex resumed>) = 0 [pid 1940] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1940] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1941] <... futex resumed>) = 1 [pid 1941] open("./bus", O_RDONLY) = 7 [pid 1941] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] <... futex resumed>) = 0 [pid 1940] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1940] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1941] <... futex resumed>) = 1 [ 134.760198][ T1941] loop0: detected capacity change from 0 to 512 [ 134.768362][ T1941] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 134.781245][ T1941] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 134.790881][ T1941] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1941] sendfile(6, 7, NULL, 140737974943952 [pid 1940] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1940] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1940] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1940] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1940] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1940] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1944]}, 88) = 1944 [pid 1940] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1940] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1940] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1944 attached [pid 1944] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1944] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1944] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1944] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] <... futex resumed>) = 0 [pid 1940] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1940] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1944] <... futex resumed>) = 1 [pid 1944] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1944] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1940] <... futex resumed>) = 0 [pid 1944] <... futex resumed>) = 1 [pid 1944] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1940] exit_group(0 [pid 1944] <... futex resumed>) = ? [pid 1940] <... exit_group resumed>) = ? [pid 1944] +++ exited with 0 +++ [pid 1941] <... sendfile resumed>) = ? [pid 1941] +++ exited with 0 +++ [pid 1940] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1940, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./378/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./378/binderfs") = 0 umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./378/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./378/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./378/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./378") = 0 mkdir("./379", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1945 ./strace-static-x86_64: Process 1945 attached [pid 1945] set_robust_list(0x555556b826a0, 24) = 0 [pid 1945] chdir("./379") = 0 [pid 1945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1945] setpgid(0, 0) = 0 [pid 1945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1945] write(3, "1000", 4) = 4 [pid 1945] close(3) = 0 [pid 1945] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1945] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1945] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1945] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1945] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1945] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1945] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1946 attached => {parent_tid=[1946]}, 88) = 1946 [pid 1945] rt_sigprocmask(SIG_SETMASK, [], [pid 1946] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1946] rt_sigprocmask(SIG_SETMASK, [], [pid 1945] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1946] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1945] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1945] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1946] memfd_create("syzkaller", 0) = 3 [pid 1946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1946] munmap(0x7f9627d89000, 262144) = 0 [pid 1946] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1946] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1946] close(3) = 0 [pid 1946] mkdir("./file0", 0777) = 0 [pid 1946] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1946] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1946] chdir("./file0") = 0 [pid 1946] ioctl(4, LOOP_CLR_FD) = 0 [pid 1946] close(4) = 0 [pid 1946] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... futex resumed>) = 0 [pid 1945] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1945] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1946] <... futex resumed>) = 1 [pid 1946] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1946] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... futex resumed>) = 0 [pid 1945] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1945] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1946] <... futex resumed>) = 1 [pid 1946] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1946] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... futex resumed>) = 0 [pid 1945] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1945] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1946] <... futex resumed>) = 1 [pid 1946] creat("./bus", 000) = 6 [pid 1946] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... futex resumed>) = 0 [pid 1945] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1945] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1946] <... futex resumed>) = 1 [pid 1946] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1946] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... futex resumed>) = 0 [pid 1945] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1945] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1946] <... futex resumed>) = 1 [pid 1946] open("./bus", O_RDONLY) = 7 [pid 1946] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1945] <... futex resumed>) = 0 [pid 1945] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1945] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1946] <... futex resumed>) = 1 [ 135.076957][ T1946] loop0: detected capacity change from 0 to 512 [ 135.085003][ T1946] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 135.098018][ T1946] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 135.107676][ T1946] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1946] sendfile(6, 7, NULL, 140737974943952 [pid 1945] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1945] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1945] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1945] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1945] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1948]}, 88) = 1948 ./strace-static-x86_64: Process 1948 attached [pid 1948] set_robust_list(0x7f9627dc89a0, 24 [pid 1945] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1948] <... set_robust_list resumed>) = 0 [pid 1945] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1948] rt_sigprocmask(SIG_SETMASK, [], [pid 1945] <... futex resumed>) = 0 [pid 1945] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1948] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1948] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1948] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1945] <... futex resumed>) = 0 [pid 1945] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1945] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1948] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1948] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1945] <... futex resumed>) = 0 [pid 1948] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1945] exit_group(0 [pid 1948] <... futex resumed>) = ? [pid 1945] <... exit_group resumed>) = ? [pid 1948] +++ exited with 0 +++ [pid 1946] <... sendfile resumed>) = ? [pid 1946] +++ exited with 0 +++ [pid 1945] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1945, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./379/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./379/binderfs") = 0 umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./379/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./379/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./379/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./379") = 0 mkdir("./380", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1949 ./strace-static-x86_64: Process 1949 attached [pid 1949] set_robust_list(0x555556b826a0, 24) = 0 [pid 1949] chdir("./380") = 0 [pid 1949] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1949] setpgid(0, 0) = 0 [pid 1949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1949] write(3, "1000", 4) = 4 [pid 1949] close(3) = 0 [pid 1949] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1949] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1949] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1949] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1949] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1949] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1949] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1950]}, 88) = 1950 [pid 1949] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1949] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1950 attached [pid 1950] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1950] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1950] memfd_create("syzkaller", 0) = 3 [pid 1950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1950] munmap(0x7f9627d89000, 262144) = 0 [pid 1950] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1950] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1950] close(3) = 0 [pid 1950] mkdir("./file0", 0777) = 0 [pid 1950] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1950] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1950] chdir("./file0") = 0 [pid 1950] ioctl(4, LOOP_CLR_FD) = 0 [pid 1950] close(4) = 0 [pid 1950] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1949] <... futex resumed>) = 0 [pid 1949] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1950] <... futex resumed>) = 1 [pid 1950] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1950] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1949] <... futex resumed>) = 0 [pid 1950] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1949] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1950] <... open resumed>) = 5 [pid 1949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1950] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1949] <... futex resumed>) = 0 [pid 1950] creat("./bus", 000 [pid 1949] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1950] <... creat resumed>) = 6 [pid 1950] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1949] <... futex resumed>) = 0 [pid 1949] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1950] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1950] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1949] <... futex resumed>) = 0 [pid 1949] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1950] open("./bus", O_RDONLY) = 7 [pid 1950] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1949] <... futex resumed>) = 0 [pid 1949] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 135.350344][ T1950] loop0: detected capacity change from 0 to 512 [ 135.358372][ T1950] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 135.371438][ T1950] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 135.381088][ T1950] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1950] sendfile(6, 7, NULL, 140737974943952 [pid 1949] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1949] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1949] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1949] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1949] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1949] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1952 attached => {parent_tid=[1952]}, 88) = 1952 [pid 1949] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1949] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1949] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1952] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1952] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1952] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1952] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1949] <... futex resumed>) = 0 [pid 1949] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1949] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1952] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1952] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1949] <... futex resumed>) = 0 [pid 1952] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1949] exit_group(0 [pid 1952] <... futex resumed>) = ? [pid 1949] <... exit_group resumed>) = ? [pid 1952] +++ exited with 0 +++ [pid 1950] <... sendfile resumed>) = ? [pid 1950] +++ exited with 0 +++ [pid 1949] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1949, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./380", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./380/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./380/binderfs") = 0 umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./380/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./380/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./380/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./380") = 0 mkdir("./381", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1953 ./strace-static-x86_64: Process 1953 attached [pid 1953] set_robust_list(0x555556b826a0, 24) = 0 [pid 1953] chdir("./381") = 0 [pid 1953] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1953] setpgid(0, 0) = 0 [pid 1953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1953] write(3, "1000", 4) = 4 [pid 1953] close(3) = 0 [pid 1953] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1953] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1953] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1953] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1953] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1953] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1953] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1953] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1954]}, 88) = 1954 [pid 1953] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1953] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1953] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1954 attached [pid 1954] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1954] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1954] memfd_create("syzkaller", 0) = 3 [pid 1954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1954] munmap(0x7f9627d89000, 262144) = 0 [pid 1954] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1954] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1954] close(3) = 0 [pid 1954] mkdir("./file0", 0777) = 0 [pid 1954] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1954] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1954] chdir("./file0") = 0 [pid 1954] ioctl(4, LOOP_CLR_FD) = 0 [pid 1954] close(4) = 0 [pid 1954] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1953] <... futex resumed>) = 0 [pid 1953] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1953] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1954] <... futex resumed>) = 1 [pid 1954] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1954] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1954] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1953] <... futex resumed>) = 0 [pid 1953] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1953] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1954] <... futex resumed>) = 0 [pid 1954] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1954] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1953] <... futex resumed>) = 0 [pid 1953] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1953] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1954] <... futex resumed>) = 1 [pid 1954] creat("./bus", 000) = 6 [pid 1954] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1953] <... futex resumed>) = 0 [pid 1953] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1953] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1954] <... futex resumed>) = 1 [pid 1954] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1954] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1953] <... futex resumed>) = 0 [pid 1953] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1953] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1954] <... futex resumed>) = 1 [pid 1954] open("./bus", O_RDONLY) = 7 [pid 1954] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1953] <... futex resumed>) = 0 [pid 1953] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1953] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1954] <... futex resumed>) = 1 [ 135.681450][ T1954] loop0: detected capacity change from 0 to 512 [ 135.689410][ T1954] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 135.702388][ T1954] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 135.711923][ T1954] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1954] sendfile(6, 7, NULL, 140737974943952 [pid 1953] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1953] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1953] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1953] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1953] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1953] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1953] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1953] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1953] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1956]}, 88) = 1956 [pid 1953] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1953] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1953] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1956 attached [pid 1956] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1956] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1956] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1956] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1953] <... futex resumed>) = 0 [pid 1953] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1953] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1956] <... futex resumed>) = 1 [pid 1956] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1956] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1953] <... futex resumed>) = 0 [pid 1956] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1953] exit_group(0 [pid 1956] <... futex resumed>) = ? [pid 1953] <... exit_group resumed>) = ? [pid 1956] +++ exited with 0 +++ [pid 1954] <... sendfile resumed>) = ? [pid 1954] +++ exited with 0 +++ [pid 1953] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1953, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./381/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./381/binderfs") = 0 umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./381/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./381/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./381/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./381") = 0 mkdir("./382", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1958 ./strace-static-x86_64: Process 1958 attached [pid 1958] set_robust_list(0x555556b826a0, 24) = 0 [pid 1958] chdir("./382") = 0 [pid 1958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1958] setpgid(0, 0) = 0 [pid 1958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1958] write(3, "1000", 4) = 4 [pid 1958] close(3) = 0 [pid 1958] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1958] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1958] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1958] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1958] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1958] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1958] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1959]}, 88) = 1959 ./strace-static-x86_64: Process 1959 attached [pid 1959] set_robust_list(0x7f96301a99a0, 24 [pid 1958] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1958] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1959] <... set_robust_list resumed>) = 0 [pid 1959] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1959] memfd_create("syzkaller", 0) = 3 [pid 1959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1959] munmap(0x7f9627d89000, 262144) = 0 [pid 1959] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1959] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1959] close(3) = 0 [pid 1959] mkdir("./file0", 0777) = 0 [pid 1959] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1959] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1959] chdir("./file0") = 0 [pid 1959] ioctl(4, LOOP_CLR_FD) = 0 [pid 1959] close(4) = 0 [pid 1959] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1958] <... futex resumed>) = 0 [pid 1958] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1959] <... futex resumed>) = 1 [pid 1959] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1959] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1958] <... futex resumed>) = 0 [pid 1958] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1959] <... futex resumed>) = 1 [pid 1959] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1959] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1958] <... futex resumed>) = 0 [pid 1958] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1959] <... futex resumed>) = 1 [pid 1959] creat("./bus", 000) = 6 [pid 1959] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1958] <... futex resumed>) = 0 [pid 1958] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1959] <... futex resumed>) = 1 [pid 1959] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1959] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1958] <... futex resumed>) = 0 [pid 1958] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1959] <... futex resumed>) = 1 [pid 1959] open("./bus", O_RDONLY) = 7 [pid 1959] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1958] <... futex resumed>) = 0 [pid 1958] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1958] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1959] <... futex resumed>) = 1 [ 135.955563][ T1959] loop0: detected capacity change from 0 to 512 [ 135.963415][ T1959] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 135.976400][ T1959] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 135.986434][ T1959] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1959] sendfile(6, 7, NULL, 140737974943952 [pid 1958] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1958] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1958] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1958] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1958] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1962 attached [pid 1962] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1962] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1958] <... clone3 resumed> => {parent_tid=[1962]}, 88) = 1962 [pid 1962] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1958] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1958] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1962] <... futex resumed>) = 0 [pid 1958] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1962] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1962] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1958] <... futex resumed>) = 0 [pid 1958] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1958] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1962] <... futex resumed>) = 1 [pid 1962] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1962] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1958] <... futex resumed>) = 0 [pid 1962] <... futex resumed>) = 1 [pid 1962] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1958] exit_group(0 [pid 1962] <... futex resumed>) = ? [pid 1958] <... exit_group resumed>) = ? [pid 1962] +++ exited with 0 +++ [pid 1959] <... sendfile resumed>) = ? [pid 1959] +++ exited with 0 +++ [pid 1958] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1958, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./382/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./382/binderfs") = 0 umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./382/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./382/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./382/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./382") = 0 mkdir("./383", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1963 ./strace-static-x86_64: Process 1963 attached [pid 1963] set_robust_list(0x555556b826a0, 24) = 0 [pid 1963] chdir("./383") = 0 [pid 1963] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1963] setpgid(0, 0) = 0 [pid 1963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1963] write(3, "1000", 4) = 4 [pid 1963] close(3) = 0 [pid 1963] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1963] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1963] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1963] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1963] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1963] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1963] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1963] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1964]}, 88) = 1964 [pid 1963] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1963] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1963] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1964 attached [pid 1964] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1964] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1964] memfd_create("syzkaller", 0) = 3 [pid 1964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1964] munmap(0x7f9627d89000, 262144) = 0 [pid 1964] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1964] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1964] close(3) = 0 [pid 1964] mkdir("./file0", 0777) = 0 [pid 1964] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1964] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1964] chdir("./file0") = 0 [pid 1964] ioctl(4, LOOP_CLR_FD) = 0 [pid 1964] close(4) = 0 [pid 1964] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] <... futex resumed>) = 0 [pid 1963] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1963] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1964] <... futex resumed>) = 1 [pid 1964] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1964] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] <... futex resumed>) = 0 [pid 1963] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1963] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1964] <... futex resumed>) = 1 [pid 1964] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1964] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] <... futex resumed>) = 0 [pid 1963] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1963] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1964] <... futex resumed>) = 1 [pid 1964] creat("./bus", 000) = 6 [pid 1964] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] <... futex resumed>) = 0 [pid 1963] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1963] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1964] <... futex resumed>) = 1 [pid 1964] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1964] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] <... futex resumed>) = 0 [pid 1963] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1963] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1964] <... futex resumed>) = 1 [pid 1964] open("./bus", O_RDONLY) = 7 [pid 1964] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1963] <... futex resumed>) = 0 [pid 1963] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1963] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1964] <... futex resumed>) = 1 [ 136.290660][ T1964] loop0: detected capacity change from 0 to 512 [ 136.299248][ T1964] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 136.312275][ T1964] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 136.322069][ T1964] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1964] sendfile(6, 7, NULL, 140737974943952 [pid 1963] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1963] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1963] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1963] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1963] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1963] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1966 attached => {parent_tid=[1966]}, 88) = 1966 [pid 1966] set_robust_list(0x7f9627dc89a0, 24 [pid 1963] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1963] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1963] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1966] <... set_robust_list resumed>) = 0 [pid 1966] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1966] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1966] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1963] <... futex resumed>) = 0 [pid 1963] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1963] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1966] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1966] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1963] <... futex resumed>) = 0 [pid 1966] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1963] exit_group(0 [pid 1966] <... futex resumed>) = ? [pid 1964] <... sendfile resumed>) = ? [pid 1963] <... exit_group resumed>) = ? [pid 1966] +++ exited with 0 +++ [pid 1964] +++ exited with 0 +++ [pid 1963] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1963, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./383/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./383/binderfs") = 0 umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./383/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./383/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./383/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./383") = 0 mkdir("./384", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1967 ./strace-static-x86_64: Process 1967 attached [pid 1967] set_robust_list(0x555556b826a0, 24) = 0 [pid 1967] chdir("./384") = 0 [pid 1967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1967] setpgid(0, 0) = 0 [pid 1967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1967] write(3, "1000", 4) = 4 [pid 1967] close(3) = 0 [pid 1967] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1967] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1967] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1967] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1967] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1967] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1967] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1968 attached => {parent_tid=[1968]}, 88) = 1968 [pid 1968] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1968] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1968] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1967] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1967] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1968] <... futex resumed>) = 0 [pid 1968] memfd_create("syzkaller", 0 [pid 1967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1968] <... memfd_create resumed>) = 3 [pid 1968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1968] munmap(0x7f9627d89000, 262144) = 0 [pid 1968] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1968] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1968] close(3) = 0 [pid 1968] mkdir("./file0", 0777) = 0 [pid 1968] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1968] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1968] chdir("./file0") = 0 [pid 1968] ioctl(4, LOOP_CLR_FD) = 0 [pid 1968] close(4) = 0 [pid 1968] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1967] <... futex resumed>) = 0 [pid 1967] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1968] <... futex resumed>) = 1 [pid 1968] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1968] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1967] <... futex resumed>) = 0 [pid 1967] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1968] <... futex resumed>) = 1 [pid 1968] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1968] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1967] <... futex resumed>) = 0 [pid 1967] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1968] <... futex resumed>) = 1 [pid 1967] <... futex resumed>) = 0 [pid 1967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1968] creat("./bus", 000) = 6 [pid 1968] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1967] <... futex resumed>) = 0 [pid 1967] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1968] <... futex resumed>) = 1 [pid 1968] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1968] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1967] <... futex resumed>) = 0 [pid 1967] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1968] <... futex resumed>) = 1 [pid 1968] open("./bus", O_RDONLY) = 7 [pid 1968] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1967] <... futex resumed>) = 0 [pid 1968] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1967] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1968] <... futex resumed>) = 0 [ 136.593589][ T1968] loop0: detected capacity change from 0 to 512 [ 136.601489][ T1968] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 136.614790][ T1968] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 136.624542][ T1968] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1968] sendfile(6, 7, NULL, 140737974943952 [pid 1967] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1967] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1967] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1967] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1967] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1967] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1970 attached => {parent_tid=[1970]}, 88) = 1970 [pid 1967] rt_sigprocmask(SIG_SETMASK, [], [pid 1970] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1970] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1967] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1967] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1970] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1967] <... futex resumed>) = 0 [pid 1967] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1970] <... mmap resumed>) = 0x20000000 [pid 1970] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1967] <... futex resumed>) = 0 [pid 1967] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1967] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1970] <... futex resumed>) = 1 [pid 1970] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1970] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1967] <... futex resumed>) = 0 [pid 1970] <... futex resumed>) = 1 [pid 1970] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1967] exit_group(0 [pid 1970] <... futex resumed>) = ? [pid 1967] <... exit_group resumed>) = ? [pid 1970] +++ exited with 0 +++ [pid 1968] <... sendfile resumed>) = ? [pid 1968] +++ exited with 0 +++ [pid 1967] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1967, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./384/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./384/binderfs") = 0 umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./384/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./384/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./384/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./384") = 0 mkdir("./385", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1972 ./strace-static-x86_64: Process 1972 attached [pid 1972] set_robust_list(0x555556b826a0, 24) = 0 [pid 1972] chdir("./385") = 0 [pid 1972] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1972] setpgid(0, 0) = 0 [pid 1972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1972] write(3, "1000", 4) = 4 [pid 1972] close(3) = 0 [pid 1972] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1972] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1972] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1972] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1972] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1972] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1972] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1972] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1973]}, 88) = 1973 [pid 1972] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1972] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1972] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1973 attached [pid 1973] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1973] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1973] memfd_create("syzkaller", 0) = 3 [pid 1973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1973] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1973] munmap(0x7f9627d89000, 262144) = 0 [pid 1973] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1973] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1973] close(3) = 0 [pid 1973] mkdir("./file0", 0777) = 0 [pid 1973] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1973] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1973] chdir("./file0") = 0 [pid 1973] ioctl(4, LOOP_CLR_FD) = 0 [pid 1973] close(4) = 0 [pid 1973] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1972] <... futex resumed>) = 0 [pid 1972] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1972] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1973] <... futex resumed>) = 1 [pid 1973] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1973] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1972] <... futex resumed>) = 0 [pid 1972] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1972] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1973] <... futex resumed>) = 1 [pid 1973] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1973] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1972] <... futex resumed>) = 0 [pid 1972] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1972] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1973] <... futex resumed>) = 1 [pid 1973] creat("./bus", 000) = 6 [pid 1973] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1972] <... futex resumed>) = 0 [pid 1972] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1972] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1973] <... futex resumed>) = 1 [pid 1973] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1973] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1972] <... futex resumed>) = 0 [pid 1972] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1972] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1973] <... futex resumed>) = 1 [pid 1973] open("./bus", O_RDONLY) = 7 [pid 1973] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1972] <... futex resumed>) = 0 [pid 1972] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1972] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1973] <... futex resumed>) = 1 [ 136.872342][ T1973] loop0: detected capacity change from 0 to 512 [ 136.880228][ T1973] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 136.893358][ T1973] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 136.903009][ T1973] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1973] sendfile(6, 7, NULL, 140737974943952 [pid 1972] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1972] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1972] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1972] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1972] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1972] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1972] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1975 attached => {parent_tid=[1975]}, 88) = 1975 [pid 1972] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1972] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1972] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1975] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1975] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1975] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1975] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1975] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1972] <... futex resumed>) = 0 [pid 1972] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1975] <... futex resumed>) = 0 [pid 1972] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1975] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1975] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1972] <... futex resumed>) = 0 [pid 1975] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1972] exit_group(0 [pid 1975] <... futex resumed>) = ? [pid 1972] <... exit_group resumed>) = ? [pid 1973] <... sendfile resumed>) = ? [pid 1973] +++ exited with 0 +++ [pid 1975] +++ exited with 0 +++ [pid 1972] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1972, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./385/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./385/binderfs") = 0 umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./385/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./385/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./385/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./385") = 0 mkdir("./386", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1976 ./strace-static-x86_64: Process 1976 attached [pid 1976] set_robust_list(0x555556b826a0, 24) = 0 [pid 1976] chdir("./386") = 0 [pid 1976] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1976] setpgid(0, 0) = 0 [pid 1976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1976] write(3, "1000", 4) = 4 [pid 1976] close(3) = 0 [pid 1976] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1976] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1976] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1976] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1976] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1976] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1976] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1976] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1977]}, 88) = 1977 [pid 1976] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1976] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1976] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1977 attached [pid 1977] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1977] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1977] memfd_create("syzkaller", 0) = 3 [pid 1977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1977] munmap(0x7f9627d89000, 262144) = 0 [pid 1977] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1977] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1977] close(3) = 0 [pid 1977] mkdir("./file0", 0777) = 0 [pid 1977] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1977] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1977] chdir("./file0") = 0 [pid 1977] ioctl(4, LOOP_CLR_FD) = 0 [pid 1977] close(4) = 0 [pid 1977] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] <... futex resumed>) = 0 [pid 1977] <... futex resumed>) = 1 [pid 1976] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1977] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1976] <... futex resumed>) = 0 [pid 1976] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] <... open resumed>) = 4 [pid 1977] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] <... futex resumed>) = 0 [pid 1976] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1976] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] <... futex resumed>) = 1 [pid 1977] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1977] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] <... futex resumed>) = 0 [pid 1976] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1976] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] <... futex resumed>) = 1 [pid 1977] creat("./bus", 000) = 6 [pid 1977] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] <... futex resumed>) = 0 [pid 1976] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1976] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] <... futex resumed>) = 1 [pid 1977] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1977] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1976] <... futex resumed>) = 0 [pid 1976] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1976] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1977] open("./bus", O_RDONLY) = 7 [pid 1977] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1976] <... futex resumed>) = 0 [pid 1976] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1976] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 137.149879][ T1977] loop0: detected capacity change from 0 to 512 [ 137.157835][ T1977] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 137.170946][ T1977] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 137.180405][ T1977] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1977] sendfile(6, 7, NULL, 140737974943952 [pid 1976] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1976] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1976] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1976] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1976] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1976] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1979]}, 88) = 1979 [pid 1976] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1976] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1976] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1979 attached [pid 1979] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1979] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1979] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1979] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] <... futex resumed>) = 0 [pid 1976] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1976] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1979] <... futex resumed>) = 1 [pid 1979] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1979] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1976] <... futex resumed>) = 0 [pid 1979] <... futex resumed>) = 1 [pid 1979] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1976] exit_group(0 [pid 1979] <... futex resumed>) = ? [pid 1976] <... exit_group resumed>) = ? [pid 1979] +++ exited with 0 +++ [pid 1977] <... sendfile resumed>) = ? [pid 1977] +++ exited with 0 +++ [pid 1976] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1976, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./386/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./386/binderfs") = 0 umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./386/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./386/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./386/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./386") = 0 mkdir("./387", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1980 ./strace-static-x86_64: Process 1980 attached [pid 1980] set_robust_list(0x555556b826a0, 24) = 0 [pid 1980] chdir("./387") = 0 [pid 1980] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1980] setpgid(0, 0) = 0 [pid 1980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1980] write(3, "1000", 4) = 4 [pid 1980] close(3) = 0 [pid 1980] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1980] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1980] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1980] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1980] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1980] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1980] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1980] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1981]}, 88) = 1981 [pid 1980] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1980] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1981 attached [pid 1981] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1981] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1981] memfd_create("syzkaller", 0) = 3 [pid 1981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1981] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1981] munmap(0x7f9627d89000, 262144) = 0 [pid 1981] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1981] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1981] close(3) = 0 [pid 1981] mkdir("./file0", 0777) = 0 [pid 1981] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1981] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1981] chdir("./file0") = 0 [pid 1981] ioctl(4, LOOP_CLR_FD) = 0 [pid 1981] close(4) = 0 [pid 1981] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1981] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1980] <... futex resumed>) = 0 [pid 1980] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1981] <... futex resumed>) = 0 [pid 1981] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1981] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1980] <... futex resumed>) = 0 [pid 1981] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1980] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1981] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1980] <... futex resumed>) = 0 [pid 1981] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1981] <... open resumed>) = 5 [pid 1981] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1980] <... futex resumed>) = 0 [pid 1981] creat("./bus", 000 [pid 1980] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1981] <... creat resumed>) = 6 [pid 1980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1981] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1980] <... futex resumed>) = 0 [pid 1981] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 1980] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1981] <... writev resumed>) = 1 [pid 1981] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1981] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1980] <... futex resumed>) = 0 [pid 1980] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1981] <... futex resumed>) = 0 [pid 1981] open("./bus", O_RDONLY) = 7 [pid 1981] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1980] <... futex resumed>) = 0 [pid 1980] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1981] <... futex resumed>) = 1 [ 137.450079][ T1981] loop0: detected capacity change from 0 to 512 [ 137.458034][ T1981] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 137.471085][ T1981] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 137.480608][ T1981] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1981] sendfile(6, 7, NULL, 140737974943952 [pid 1980] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1980] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1980] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1980] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1980] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1980] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1980] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1983]}, 88) = 1983 [pid 1980] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1980] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1980] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1983 attached [pid 1983] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1983] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1983] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1983] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1980] <... futex resumed>) = 0 [pid 1980] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1980] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1983] <... futex resumed>) = 1 [pid 1983] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1983] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1980] <... futex resumed>) = 0 [pid 1983] <... futex resumed>) = 1 [pid 1983] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1980] exit_group(0 [pid 1983] <... futex resumed>) = ? [pid 1981] <... sendfile resumed>) = ? [pid 1980] <... exit_group resumed>) = ? [pid 1983] +++ exited with 0 +++ [pid 1981] +++ exited with 0 +++ [pid 1980] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1980, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./387/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./387/binderfs") = 0 umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./387/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./387/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./387/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./387") = 0 mkdir("./388", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1984 ./strace-static-x86_64: Process 1984 attached [pid 1984] set_robust_list(0x555556b826a0, 24) = 0 [pid 1984] chdir("./388") = 0 [pid 1984] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1984] setpgid(0, 0) = 0 [pid 1984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1984] write(3, "1000", 4) = 4 [pid 1984] close(3) = 0 [pid 1984] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1984] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1984] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1984] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1984] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1984] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1984] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1985]}, 88) = 1985 [pid 1984] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1984] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1985 attached [pid 1985] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1985] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1985] memfd_create("syzkaller", 0) = 3 [pid 1985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1985] munmap(0x7f9627d89000, 262144) = 0 [pid 1985] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1985] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1985] close(3) = 0 [pid 1985] mkdir("./file0", 0777) = 0 [pid 1985] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1985] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1985] chdir("./file0") = 0 [pid 1985] ioctl(4, LOOP_CLR_FD) = 0 [pid 1985] close(4) = 0 [pid 1985] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1984] <... futex resumed>) = 0 [pid 1984] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1985] <... futex resumed>) = 1 [pid 1984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1985] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1985] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1985] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1984] <... futex resumed>) = 0 [pid 1984] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1985] <... futex resumed>) = 0 [pid 1985] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1985] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1984] <... futex resumed>) = 0 [pid 1984] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1985] <... futex resumed>) = 1 [pid 1985] creat("./bus", 000) = 6 [pid 1985] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1984] <... futex resumed>) = 0 [pid 1984] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1985] <... futex resumed>) = 1 [pid 1984] <... futex resumed>) = 0 [pid 1984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1985] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1985] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1984] <... futex resumed>) = 0 [pid 1984] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1985] <... futex resumed>) = 1 [pid 1985] open("./bus", O_RDONLY) = 7 [pid 1985] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1984] <... futex resumed>) = 0 [pid 1984] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1985] <... futex resumed>) = 1 [ 137.752382][ T1985] loop0: detected capacity change from 0 to 512 [ 137.760410][ T1985] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 137.773426][ T1985] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 137.783134][ T1985] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1985] sendfile(6, 7, NULL, 140737974943952 [pid 1984] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1984] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1984] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1984] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1984] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1984] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[1987]}, 88) = 1987 ./strace-static-x86_64: Process 1987 attached [pid 1984] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1984] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1984] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1987] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1987] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1987] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1987] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1984] <... futex resumed>) = 0 [pid 1984] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1987] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1984] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1987] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1987] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1984] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1984] exit_group(0) = ? [pid 1987] <... futex resumed>) = ? [pid 1987] +++ exited with 0 +++ [pid 1985] <... sendfile resumed>) = ? [pid 1985] +++ exited with 0 +++ [pid 1984] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1984, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./388/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./388/binderfs") = 0 umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./388/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./388/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./388/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./388") = 0 mkdir("./389", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1989 ./strace-static-x86_64: Process 1989 attached [pid 1989] set_robust_list(0x555556b826a0, 24) = 0 [pid 1989] chdir("./389") = 0 [pid 1989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1989] setpgid(0, 0) = 0 [pid 1989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1989] write(3, "1000", 4) = 4 [pid 1989] close(3) = 0 [pid 1989] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1989] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1989] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1989] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1989] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1989] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1989] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 1990 attached => {parent_tid=[1990]}, 88) = 1990 [pid 1990] set_robust_list(0x7f96301a99a0, 24 [pid 1989] rt_sigprocmask(SIG_SETMASK, [], [pid 1990] <... set_robust_list resumed>) = 0 [pid 1989] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1989] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1990] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1990] memfd_create("syzkaller", 0) = 3 [pid 1990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1990] munmap(0x7f9627d89000, 262144) = 0 [pid 1990] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1990] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1990] close(3) = 0 [pid 1990] mkdir("./file0", 0777) = 0 [pid 1990] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1990] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1990] chdir("./file0") = 0 [pid 1990] ioctl(4, LOOP_CLR_FD) = 0 [pid 1990] close(4) = 0 [pid 1990] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1989] <... futex resumed>) = 0 [pid 1989] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1990] <... futex resumed>) = 1 [pid 1990] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1990] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1989] <... futex resumed>) = 0 [pid 1989] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1990] <... futex resumed>) = 1 [pid 1990] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1990] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1989] <... futex resumed>) = 0 [pid 1989] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1990] <... futex resumed>) = 1 [pid 1990] creat("./bus", 000) = 6 [pid 1990] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1989] <... futex resumed>) = 0 [pid 1989] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1990] <... futex resumed>) = 1 [pid 1990] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1990] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1989] <... futex resumed>) = 0 [pid 1989] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1990] <... futex resumed>) = 1 [pid 1990] open("./bus", O_RDONLY) = 7 [pid 1990] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1989] <... futex resumed>) = 0 [pid 1989] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1990] <... futex resumed>) = 1 [ 138.082378][ T1990] loop0: detected capacity change from 0 to 512 [ 138.090521][ T1990] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 138.103694][ T1990] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 138.113454][ T1990] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1990] sendfile(6, 7, NULL, 140737974943952 [pid 1989] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1989] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1989] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1989] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1989] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1989] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1992 attached => {parent_tid=[1992]}, 88) = 1992 [pid 1989] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1989] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1989] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1992] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 1992] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1992] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1992] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1989] <... futex resumed>) = 0 [pid 1989] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1989] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1992] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1992] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1989] <... futex resumed>) = 0 [pid 1992] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1989] exit_group(0 [pid 1992] <... futex resumed>) = ? [pid 1989] <... exit_group resumed>) = ? [pid 1990] <... sendfile resumed>) = ? [pid 1990] +++ exited with 0 +++ [pid 1992] +++ exited with 0 +++ [pid 1989] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1989, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./389/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./389/binderfs") = 0 umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./389/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./389/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./389/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./389") = 0 mkdir("./390", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1993 ./strace-static-x86_64: Process 1993 attached [pid 1993] set_robust_list(0x555556b826a0, 24) = 0 [pid 1993] chdir("./390") = 0 [pid 1993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1993] setpgid(0, 0) = 0 [pid 1993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1993] write(3, "1000", 4) = 4 [pid 1993] close(3) = 0 [pid 1993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1993] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1993] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1993] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1993] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1993] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1994]}, 88) = 1994 [pid 1993] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1993] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1994 attached [pid 1994] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1994] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1994] memfd_create("syzkaller", 0) = 3 [pid 1994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1994] munmap(0x7f9627d89000, 262144) = 0 [pid 1994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1994] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1994] close(3) = 0 [pid 1994] mkdir("./file0", 0777) = 0 [pid 1994] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1994] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1994] chdir("./file0") = 0 [pid 1994] ioctl(4, LOOP_CLR_FD) = 0 [pid 1994] close(4) = 0 [pid 1994] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1993] <... futex resumed>) = 0 [pid 1993] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1994] <... futex resumed>) = 1 [pid 1994] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1994] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1993] <... futex resumed>) = 0 [pid 1993] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1994] <... futex resumed>) = 1 [pid 1994] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1994] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1993] <... futex resumed>) = 0 [pid 1993] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1994] <... futex resumed>) = 1 [pid 1994] creat("./bus", 000) = 6 [pid 1994] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1993] <... futex resumed>) = 0 [pid 1993] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1994] <... futex resumed>) = 1 [pid 1994] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1994] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1993] <... futex resumed>) = 0 [pid 1993] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1994] <... futex resumed>) = 1 [pid 1994] open("./bus", O_RDONLY) = 7 [pid 1994] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1993] <... futex resumed>) = 0 [pid 1993] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1994] <... futex resumed>) = 1 [ 138.397013][ T1994] loop0: detected capacity change from 0 to 512 [ 138.406133][ T1994] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 138.419178][ T1994] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 138.428933][ T1994] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1994] sendfile(6, 7, NULL, 140737974943952 [pid 1993] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1993] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1993] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1993] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1993] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1993] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 1996 attached => {parent_tid=[1996]}, 88) = 1996 [pid 1996] set_robust_list(0x7f9627dc89a0, 24 [pid 1993] rt_sigprocmask(SIG_SETMASK, [], [pid 1996] <... set_robust_list resumed>) = 0 [pid 1993] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1993] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1996] rt_sigprocmask(SIG_SETMASK, [], [pid 1993] <... futex resumed>) = 0 [pid 1993] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1996] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1996] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1996] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1993] <... futex resumed>) = 0 [pid 1993] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1996] <... futex resumed>) = 1 [pid 1993] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1996] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 1996] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1993] <... futex resumed>) = 0 [pid 1996] <... futex resumed>) = 1 [pid 1996] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1993] exit_group(0 [pid 1996] <... futex resumed>) = ? [pid 1993] <... exit_group resumed>) = ? [pid 1996] +++ exited with 0 +++ [pid 1994] <... sendfile resumed>) = ? [pid 1994] +++ exited with 0 +++ [pid 1993] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1993, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./390/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./390/binderfs") = 0 umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./390/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./390/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./390/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./390") = 0 mkdir("./391", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 1997 ./strace-static-x86_64: Process 1997 attached [pid 1997] set_robust_list(0x555556b826a0, 24) = 0 [pid 1997] chdir("./391") = 0 [pid 1997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1997] setpgid(0, 0) = 0 [pid 1997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1997] write(3, "1000", 4) = 4 [pid 1997] close(3) = 0 [pid 1997] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1997] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1997] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 1997] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 1997] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1997] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1997] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[1998]}, 88) = 1998 [pid 1997] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1997] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1997] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1998 attached [pid 1998] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 1998] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1998] memfd_create("syzkaller", 0) = 3 [pid 1998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 1998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1998] munmap(0x7f9627d89000, 262144) = 0 [pid 1998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1998] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1998] close(3) = 0 [pid 1998] mkdir("./file0", 0777) = 0 [pid 1998] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 1998] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1998] chdir("./file0") = 0 [pid 1998] ioctl(4, LOOP_CLR_FD) = 0 [pid 1998] close(4) = 0 [pid 1998] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1997] <... futex resumed>) = 0 [pid 1997] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1997] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1998] <... futex resumed>) = 1 [pid 1998] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1998] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1997] <... futex resumed>) = 0 [pid 1997] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1997] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1998] <... futex resumed>) = 1 [pid 1998] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1998] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1997] <... futex resumed>) = 0 [pid 1998] <... futex resumed>) = 1 [pid 1997] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1998] creat("./bus", 000 [pid 1997] <... futex resumed>) = 0 [pid 1997] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1998] <... creat resumed>) = 6 [pid 1998] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1997] <... futex resumed>) = 0 [pid 1997] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1997] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1998] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 1998] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1997] <... futex resumed>) = 0 [pid 1997] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1997] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1998] <... futex resumed>) = 1 [pid 1998] open("./bus", O_RDONLY) = 7 [pid 1998] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1997] <... futex resumed>) = 0 [pid 1997] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1997] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 138.719837][ T1998] loop0: detected capacity change from 0 to 512 [ 138.727641][ T1998] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 138.740584][ T1998] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 138.750109][ T1998] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 1998] sendfile(6, 7, NULL, 140737974943952 [pid 1997] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1997] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 1997] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1997] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1997] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[2000]}, 88) = 2000 [pid 1997] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1997] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1997] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 2000 attached [pid 2000] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 2000] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2000] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 2000] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1997] <... futex resumed>) = 0 [pid 1997] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1997] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2000] <... futex resumed>) = 1 [pid 2000] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 2000] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1997] <... futex resumed>) = 0 [pid 2000] <... futex resumed>) = 1 [pid 2000] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1997] exit_group(0 [pid 2000] <... futex resumed>) = ? [pid 1997] <... exit_group resumed>) = ? [pid 2000] +++ exited with 0 +++ [pid 1998] <... sendfile resumed>) = ? [pid 1998] +++ exited with 0 +++ [pid 1997] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1997, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./391/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./391/binderfs") = 0 umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./391/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./391/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./391/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./391") = 0 mkdir("./392", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 2002 ./strace-static-x86_64: Process 2002 attached [pid 2002] set_robust_list(0x555556b826a0, 24) = 0 [pid 2002] chdir("./392") = 0 [pid 2002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2002] setpgid(0, 0) = 0 [pid 2002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2002] write(3, "1000", 4) = 4 [pid 2002] close(3) = 0 [pid 2002] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2002] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2002] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 2002] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2002] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 2002] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2002] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2002] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 2003 attached [pid 2003] set_robust_list(0x7f96301a99a0, 24 [pid 2002] <... clone3 resumed> => {parent_tid=[2003]}, 88) = 2003 [pid 2003] <... set_robust_list resumed>) = 0 [pid 2002] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2003] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2002] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 2003] memfd_create("syzkaller", 0) = 3 [pid 2003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 2003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 2003] munmap(0x7f9627d89000, 262144) = 0 [pid 2003] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 2003] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 2003] close(3) = 0 [pid 2003] mkdir("./file0", 0777) = 0 [pid 2003] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 2003] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 2003] chdir("./file0") = 0 [pid 2003] ioctl(4, LOOP_CLR_FD) = 0 [pid 2003] close(4) = 0 [pid 2003] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] <... futex resumed>) = 0 [pid 2002] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2003] <... futex resumed>) = 1 [pid 2003] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 2003] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2002] <... futex resumed>) = 0 [pid 2003] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 2002] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2003] <... open resumed>) = 5 [pid 2003] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] <... futex resumed>) = 0 [pid 2002] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2003] <... futex resumed>) = 1 [pid 2003] creat("./bus", 000) = 6 [pid 2003] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] <... futex resumed>) = 0 [pid 2002] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2003] <... futex resumed>) = 1 [pid 2003] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 2003] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] <... futex resumed>) = 0 [pid 2002] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2003] <... futex resumed>) = 1 [pid 2003] open("./bus", O_RDONLY) = 7 [pid 2003] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2002] <... futex resumed>) = 0 [pid 2002] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2003] <... futex resumed>) = 1 [ 139.065077][ T2003] loop0: detected capacity change from 0 to 512 [ 139.072831][ T2003] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 139.085808][ T2003] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 139.095669][ T2003] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 2003] sendfile(6, 7, NULL, 140737974943952 [pid 2002] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2002] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2002] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2002] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 2002] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2002] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2002] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[2005]}, 88) = 2005 [pid 2002] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2002] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2002] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 2005 attached [pid 2005] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 2005] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2005] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 2005] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2002] <... futex resumed>) = 0 [pid 2002] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2002] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2005] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 2005] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2002] <... futex resumed>) = 0 [pid 2005] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2002] exit_group(0) = ? [pid 2003] <... sendfile resumed>) = ? [pid 2003] +++ exited with 0 +++ [pid 2005] <... futex resumed>) = ? [pid 2005] +++ exited with 0 +++ [pid 2002] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2002, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./392/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./392/binderfs") = 0 umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./392/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./392/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./392/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./392") = 0 mkdir("./393", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 2006 ./strace-static-x86_64: Process 2006 attached [pid 2006] set_robust_list(0x555556b826a0, 24) = 0 [pid 2006] chdir("./393") = 0 [pid 2006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2006] setpgid(0, 0) = 0 [pid 2006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2006] write(3, "1000", 4) = 4 [pid 2006] close(3) = 0 [pid 2006] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2006] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2006] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 2006] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 2006] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2006] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2006] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[2007]}, 88) = 2007 [pid 2006] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2006] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 2007 attached [pid 2007] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 2007] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2007] memfd_create("syzkaller", 0) = 3 [pid 2007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 2007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 2007] munmap(0x7f9627d89000, 262144) = 0 [pid 2007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 2007] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 2007] close(3) = 0 [pid 2007] mkdir("./file0", 0777) = 0 [pid 2007] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 2007] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 2007] chdir("./file0") = 0 [pid 2007] ioctl(4, LOOP_CLR_FD) = 0 [pid 2007] close(4) = 0 [pid 2007] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2007] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2006] <... futex resumed>) = 0 [pid 2006] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2007] <... futex resumed>) = 0 [pid 2007] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 2007] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] <... futex resumed>) = 0 [pid 2006] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2007] <... futex resumed>) = 1 [pid 2007] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 2007] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] <... futex resumed>) = 0 [pid 2007] <... futex resumed>) = 1 [pid 2006] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2007] creat("./bus", 000) = 6 [pid 2007] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2006] <... futex resumed>) = 0 [pid 2007] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 2006] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2007] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 2007] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2006] <... futex resumed>) = 0 [pid 2006] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2007] open("./bus", O_RDONLY) = 7 [pid 2007] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2006] <... futex resumed>) = 0 [pid 2006] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 139.343031][ T2007] loop0: detected capacity change from 0 to 512 [ 139.350975][ T2007] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 139.363938][ T2007] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 139.373607][ T2007] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 2007] sendfile(6, 7, NULL, 140737974943952 [pid 2006] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2006] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2006] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 2006] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2006] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2006] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 2009 attached => {parent_tid=[2009]}, 88) = 2009 [pid 2006] rt_sigprocmask(SIG_SETMASK, [], [pid 2009] set_robust_list(0x7f9627dc89a0, 24 [pid 2006] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2009] <... set_robust_list resumed>) = 0 [pid 2006] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2009] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2006] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2009] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 2009] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2006] <... futex resumed>) = 0 [pid 2009] <... futex resumed>) = 1 [pid 2006] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2009] sendmsg(-1, 0x20000000, 0 [pid 2006] <... futex resumed>) = 0 [pid 2006] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2009] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 2009] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2006] <... futex resumed>) = 0 [pid 2009] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2006] exit_group(0 [pid 2009] <... futex resumed>) = ? [pid 2006] <... exit_group resumed>) = ? [pid 2009] +++ exited with 0 +++ [pid 2007] <... sendfile resumed>) = ? [pid 2007] +++ exited with 0 +++ [pid 2006] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2006, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./393/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./393/binderfs") = 0 umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./393/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./393/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./393/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./393") = 0 mkdir("./394", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 2010 ./strace-static-x86_64: Process 2010 attached [pid 2010] set_robust_list(0x555556b826a0, 24) = 0 [pid 2010] chdir("./394") = 0 [pid 2010] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2010] setpgid(0, 0) = 0 [pid 2010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2010] write(3, "1000", 4) = 4 [pid 2010] close(3) = 0 [pid 2010] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2010] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2010] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 2010] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 2010] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2010] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2010] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[2011]}, 88) = 2011 [pid 2010] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2010] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2010] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 2011 attached [pid 2011] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 2011] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2011] memfd_create("syzkaller", 0) = 3 [pid 2011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 2011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 2011] munmap(0x7f9627d89000, 262144) = 0 [pid 2011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 2011] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 2011] close(3) = 0 [pid 2011] mkdir("./file0", 0777) = 0 [pid 2011] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 2011] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 2011] chdir("./file0") = 0 [pid 2011] ioctl(4, LOOP_CLR_FD) = 0 [pid 2011] close(4) = 0 [pid 2011] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2011] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2010] <... futex resumed>) = 0 [pid 2010] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2010] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2011] <... futex resumed>) = 0 [pid 2011] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 2011] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... futex resumed>) = 0 [pid 2010] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2010] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2011] <... futex resumed>) = 1 [pid 2011] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 2011] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... futex resumed>) = 0 [pid 2010] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2010] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2011] <... futex resumed>) = 1 [pid 2011] creat("./bus", 000) = 6 [pid 2011] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... futex resumed>) = 0 [pid 2010] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2010] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2011] <... futex resumed>) = 1 [pid 2011] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 2011] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2011] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2010] <... futex resumed>) = 0 [pid 2010] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2010] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2011] <... futex resumed>) = 0 [pid 2011] open("./bus", O_RDONLY) = 7 [pid 2011] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... futex resumed>) = 0 [pid 2010] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2010] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2011] <... futex resumed>) = 1 [ 139.640931][ T2011] loop0: detected capacity change from 0 to 512 [ 139.649046][ T2011] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 139.662038][ T2011] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 139.672027][ T2011] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 2011] sendfile(6, 7, NULL, 140737974943952 [pid 2010] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2010] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2010] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2010] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 2010] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2010] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2010] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[2014]}, 88) = 2014 [pid 2010] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2010] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2010] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 2014 attached [pid 2014] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 2014] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2014] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 2014] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... futex resumed>) = 0 [pid 2010] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2010] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2014] <... futex resumed>) = 1 [pid 2014] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 2014] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2010] <... futex resumed>) = 0 [pid 2014] <... futex resumed>) = 1 [pid 2014] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2010] exit_group(0 [pid 2014] <... futex resumed>) = ? [pid 2010] <... exit_group resumed>) = ? [pid 2011] <... sendfile resumed>) = ? [pid 2014] +++ exited with 0 +++ [pid 2011] +++ exited with 0 +++ [pid 2010] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2010, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./394/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./394/binderfs") = 0 umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./394/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./394/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./394/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./394") = 0 mkdir("./395", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 2016 ./strace-static-x86_64: Process 2016 attached [pid 2016] set_robust_list(0x555556b826a0, 24) = 0 [pid 2016] chdir("./395") = 0 [pid 2016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2016] setpgid(0, 0) = 0 [pid 2016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2016] write(3, "1000", 4) = 4 [pid 2016] close(3) = 0 [pid 2016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2016] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2016] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 2016] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 2016] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2016] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2016] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[2017]}, 88) = 2017 [pid 2016] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2016] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 2017 attached [pid 2017] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 2017] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2017] memfd_create("syzkaller", 0) = 3 [pid 2017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 2017] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 2017] munmap(0x7f9627d89000, 262144) = 0 [pid 2017] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 2017] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 2017] close(3) = 0 [pid 2017] mkdir("./file0", 0777) = 0 [pid 2017] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 2017] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 2017] chdir("./file0") = 0 [pid 2017] ioctl(4, LOOP_CLR_FD) = 0 [pid 2017] close(4) = 0 [pid 2017] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2016] <... futex resumed>) = 0 [pid 2016] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2017] <... futex resumed>) = 1 [pid 2017] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 2017] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2016] <... futex resumed>) = 0 [pid 2016] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2017] <... futex resumed>) = 1 [pid 2017] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 2017] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2016] <... futex resumed>) = 0 [pid 2016] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2017] <... futex resumed>) = 1 [pid 2017] creat("./bus", 000) = 6 [pid 2017] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2016] <... futex resumed>) = 0 [pid 2016] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2017] <... futex resumed>) = 1 [pid 2017] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 2017] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2016] <... futex resumed>) = 0 [pid 2016] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2017] <... futex resumed>) = 1 [pid 2017] open("./bus", O_RDONLY) = 7 [pid 2017] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2016] <... futex resumed>) = 0 [pid 2016] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2017] <... futex resumed>) = 1 [ 139.968535][ T2017] loop0: detected capacity change from 0 to 512 [ 139.976459][ T2017] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 139.989375][ T2017] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 139.999095][ T2017] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 2017] sendfile(6, 7, NULL, 140737974943952 [pid 2016] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2016] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2016] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 2016] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2016] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2016] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[2019]}, 88) = 2019 [pid 2016] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2016] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2016] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 2019 attached [pid 2019] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 2019] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2019] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 2019] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2016] <... futex resumed>) = 0 [pid 2016] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2016] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2019] <... futex resumed>) = 1 [pid 2019] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 2019] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2016] <... futex resumed>) = 0 [pid 2019] <... futex resumed>) = 1 [pid 2019] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2016] exit_group(0 [pid 2019] <... futex resumed>) = ? [pid 2016] <... exit_group resumed>) = ? [pid 2019] +++ exited with 0 +++ [pid 2017] <... sendfile resumed>) = ? [pid 2017] +++ exited with 0 +++ [pid 2016] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2016, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./395", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./395/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./395/binderfs") = 0 umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./395/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./395/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./395/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./395") = 0 mkdir("./396", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 2020 ./strace-static-x86_64: Process 2020 attached [pid 2020] set_robust_list(0x555556b826a0, 24) = 0 [pid 2020] chdir("./396") = 0 [pid 2020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2020] setpgid(0, 0) = 0 [pid 2020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2020] write(3, "1000", 4) = 4 [pid 2020] close(3) = 0 [pid 2020] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2020] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2020] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 2020] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2020] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 2020] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2020] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2020] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 2021 attached => {parent_tid=[2021]}, 88) = 2021 [pid 2020] rt_sigprocmask(SIG_SETMASK, [], [pid 2021] set_robust_list(0x7f96301a99a0, 24 [pid 2020] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2021] <... set_robust_list resumed>) = 0 [pid 2020] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2021] rt_sigprocmask(SIG_SETMASK, [], [pid 2020] <... futex resumed>) = 0 [pid 2021] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 2021] memfd_create("syzkaller", 0) = 3 [pid 2021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 2021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 2021] munmap(0x7f9627d89000, 262144) = 0 [pid 2021] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 2021] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 2021] close(3) = 0 [pid 2021] mkdir("./file0", 0777) = 0 [pid 2021] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 2021] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 2021] chdir("./file0") = 0 [pid 2021] ioctl(4, LOOP_CLR_FD) = 0 [pid 2021] close(4) = 0 [pid 2021] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2020] <... futex resumed>) = 0 [pid 2020] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2021] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 2020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2021] <... open resumed>) = 4 [pid 2021] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2020] <... futex resumed>) = 0 [pid 2020] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2021] <... futex resumed>) = 1 [pid 2021] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 2021] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2020] <... futex resumed>) = 0 [pid 2020] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2021] creat("./bus", 000 [pid 2020] <... futex resumed>) = 0 [pid 2020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2021] <... creat resumed>) = 6 [pid 2021] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2020] <... futex resumed>) = 0 [pid 2020] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2021] <... futex resumed>) = 1 [pid 2021] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 2021] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2020] <... futex resumed>) = 0 [pid 2020] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2021] open("./bus", O_RDONLY) = 7 [pid 2021] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2020] <... futex resumed>) = 0 [pid 2020] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2020] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 140.327902][ T2021] loop0: detected capacity change from 0 to 512 [ 140.335718][ T2021] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 140.349143][ T2021] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 140.358740][ T2021] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 2021] sendfile(6, 7, NULL, 140737974943952 [pid 2020] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2020] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2020] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 2020] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2020] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2020] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[2023]}, 88) = 2023 [pid 2020] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2020] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2020] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 2023 attached [pid 2023] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 2023] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2023] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 2023] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2020] <... futex resumed>) = 0 [pid 2020] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2020] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2023] <... futex resumed>) = 1 [pid 2023] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 2023] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2020] <... futex resumed>) = 0 [pid 2023] <... futex resumed>) = 1 [pid 2023] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2020] exit_group(0 [pid 2023] <... futex resumed>) = ? [pid 2020] <... exit_group resumed>) = ? [pid 2023] +++ exited with 0 +++ [pid 2021] <... sendfile resumed>) = ? [pid 2021] +++ exited with 0 +++ [pid 2020] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2020, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./396", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./396/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./396/binderfs") = 0 umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./396/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./396/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./396/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./396") = 0 mkdir("./397", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 2024 ./strace-static-x86_64: Process 2024 attached [pid 2024] set_robust_list(0x555556b826a0, 24) = 0 [pid 2024] chdir("./397") = 0 [pid 2024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2024] setpgid(0, 0) = 0 [pid 2024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2024] write(3, "1000", 4) = 4 [pid 2024] close(3) = 0 [pid 2024] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2024] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2024] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 2024] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2024] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 2024] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2024] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2024] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[2025]}, 88) = 2025 [pid 2024] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2024] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2024] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 2025 attached [pid 2025] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 2025] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2025] memfd_create("syzkaller", 0) = 3 [pid 2025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 2025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 2025] munmap(0x7f9627d89000, 262144) = 0 [pid 2025] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 2025] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 2025] close(3) = 0 [pid 2025] mkdir("./file0", 0777) = 0 [pid 2025] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 2025] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 2025] chdir("./file0") = 0 [pid 2025] ioctl(4, LOOP_CLR_FD) = 0 [pid 2025] close(4) = 0 [pid 2025] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2024] <... futex resumed>) = 0 [pid 2024] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2024] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2025] <... futex resumed>) = 1 [pid 2025] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 2025] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2024] <... futex resumed>) = 0 [pid 2024] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2024] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2025] <... futex resumed>) = 1 [pid 2025] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 2025] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2024] <... futex resumed>) = 0 [pid 2024] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2024] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2025] <... futex resumed>) = 1 [pid 2025] creat("./bus", 000) = 6 [pid 2025] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2024] <... futex resumed>) = 0 [pid 2025] <... futex resumed>) = 1 [pid 2024] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2024] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2025] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 2025] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2024] <... futex resumed>) = 0 [pid 2024] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2024] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2025] <... futex resumed>) = 1 [pid 2025] open("./bus", O_RDONLY) = 7 [pid 2025] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2024] <... futex resumed>) = 0 [pid 2024] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2024] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2025] <... futex resumed>) = 1 [ 140.610010][ T2025] loop0: detected capacity change from 0 to 512 [ 140.617750][ T2025] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 140.630757][ T2025] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 140.640457][ T2025] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 2025] sendfile(6, 7, NULL, 140737974943952 [pid 2024] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2024] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2024] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2024] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2024] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 2024] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2024] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2024] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[2027]}, 88) = 2027 [pid 2024] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2024] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2024] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 2027 attached [pid 2027] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 2027] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2027] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 2027] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2024] <... futex resumed>) = 0 [pid 2024] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2024] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2027] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 2027] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2024] <... futex resumed>) = 0 [pid 2027] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2024] exit_group(0 [pid 2027] <... futex resumed>) = ? [pid 2024] <... exit_group resumed>) = ? [pid 2025] <... sendfile resumed>) = ? [pid 2025] +++ exited with 0 +++ [pid 2027] +++ exited with 0 +++ [pid 2024] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2024, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- umount2("./397", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./397/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./397/binderfs") = 0 umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./397/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./397/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./397/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./397") = 0 mkdir("./398", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 2029 ./strace-static-x86_64: Process 2029 attached [pid 2029] set_robust_list(0x555556b826a0, 24) = 0 [pid 2029] chdir("./398") = 0 [pid 2029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2029] setpgid(0, 0) = 0 [pid 2029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2029] write(3, "1000", 4) = 4 [pid 2029] close(3) = 0 [pid 2029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2029] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2029] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 2029] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 2029] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2029] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2029] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[2030]}, 88) = 2030 [pid 2029] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 2030 attached [pid 2029] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 2030] set_robust_list(0x7f96301a99a0, 24 [pid 2029] <... futex resumed>) = 0 [pid 2030] <... set_robust_list resumed>) = 0 [pid 2030] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 2030] memfd_create("syzkaller", 0) = 3 [pid 2030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 2030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 2030] munmap(0x7f9627d89000, 262144) = 0 [pid 2030] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 2030] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 2030] close(3) = 0 [pid 2030] mkdir("./file0", 0777) = 0 [pid 2030] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 2030] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 2030] chdir("./file0") = 0 [pid 2030] ioctl(4, LOOP_CLR_FD) = 0 [pid 2030] close(4) = 0 [pid 2030] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2030] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2029] <... futex resumed>) = 0 [pid 2029] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2030] <... futex resumed>) = 0 [pid 2030] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 2030] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2029] <... futex resumed>) = 0 [pid 2030] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 2029] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2030] <... open resumed>) = 5 [pid 2030] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2030] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2029] <... futex resumed>) = 0 [pid 2029] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2030] <... futex resumed>) = 0 [pid 2030] creat("./bus", 000) = 6 [pid 2030] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2029] <... futex resumed>) = 0 [pid 2029] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2030] <... futex resumed>) = 1 [pid 2030] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 2030] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2029] <... futex resumed>) = 0 [pid 2029] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2030] <... futex resumed>) = 1 [pid 2030] open("./bus", O_RDONLY) = 7 [pid 2030] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2029] <... futex resumed>) = 0 [pid 2029] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2030] <... futex resumed>) = 1 [ 140.884133][ T2030] loop0: detected capacity change from 0 to 512 [ 140.891913][ T2030] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 140.904948][ T2030] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 140.914595][ T2030] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 2030] sendfile(6, 7, NULL, 140737974943952 [pid 2029] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2029] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2029] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 2029] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2029] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2029] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[2032]}, 88) = 2032 ./strace-static-x86_64: Process 2032 attached [pid 2029] rt_sigprocmask(SIG_SETMASK, [], [pid 2032] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 2032] rt_sigprocmask(SIG_SETMASK, [], [pid 2029] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2032] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 2029] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2032] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 2029] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2032] <... mmap resumed>) = 0x20000000 [pid 2032] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 2029] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2029] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2032] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 2032] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2029] <... futex resumed>) = 0 [pid 2032] <... futex resumed>) = 1 [pid 2032] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2029] exit_group(0) = ? [pid 2032] <... futex resumed>) = ? [pid 2032] +++ exited with 0 +++ [pid 2030] <... sendfile resumed>) = ? [pid 2030] +++ exited with 0 +++ [pid 2029] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2029, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./398", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./398/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./398/binderfs") = 0 umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./398/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./398/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./398/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./398") = 0 mkdir("./399", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 2033 ./strace-static-x86_64: Process 2033 attached [pid 2033] set_robust_list(0x555556b826a0, 24) = 0 [pid 2033] chdir("./399") = 0 [pid 2033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 2033] setpgid(0, 0) = 0 [pid 2033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 2033] write(3, "1000", 4) = 4 [pid 2033] close(3) = 0 [pid 2033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 2033] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2033] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 2033] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 2033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 2033] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2033] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2033] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[2034]}, 88) = 2034 [pid 2033] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2033] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 2034 attached [pid 2034] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 2034] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2034] memfd_create("syzkaller", 0) = 3 [pid 2034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 2034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 2034] munmap(0x7f9627d89000, 262144) = 0 [pid 2034] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 2034] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 2034] close(3) = 0 [pid 2034] mkdir("./file0", 0777) = 0 [pid 2034] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 2034] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 2034] chdir("./file0") = 0 [pid 2034] ioctl(4, LOOP_CLR_FD) = 0 [pid 2034] close(4) = 0 [pid 2034] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2033] <... futex resumed>) = 0 [pid 2033] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2034] <... futex resumed>) = 1 [pid 2034] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 2034] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2033] <... futex resumed>) = 0 [pid 2033] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2034] <... futex resumed>) = 1 [pid 2034] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 2034] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2033] <... futex resumed>) = 0 [pid 2033] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2034] <... futex resumed>) = 1 [pid 2034] creat("./bus", 000) = 6 [pid 2034] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2033] <... futex resumed>) = 0 [pid 2033] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2034] <... futex resumed>) = 1 [pid 2034] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 2034] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2033] <... futex resumed>) = 0 [pid 2033] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2034] <... futex resumed>) = 1 [pid 2034] open("./bus", O_RDONLY) = 7 [pid 2034] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 2033] <... futex resumed>) = 0 [pid 2033] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2034] <... futex resumed>) = 1 [ 141.210197][ T2034] loop0: detected capacity change from 0 to 512 [ 141.218293][ T2034] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 141.231435][ T2034] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 141.241160][ T2034] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 2034] sendfile(6, 7, NULL, 140737974943952 [pid 2033] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 2033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2033] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 2033] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 2033] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 2033] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 2033] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 2036 attached => {parent_tid=[2036]}, 88) = 2036 [pid 2033] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2033] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 2033] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 2036] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 2036] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 2036] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 2036] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2036] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 2033] <... futex resumed>) = 0 [pid 2033] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 2036] <... futex resumed>) = 0 [pid 2033] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 141.310360][ T2034] ------------[ cut here ]------------ [ 141.315653][ T2034] kernel BUG at fs/ext4/inline.c:781! [ 141.320907][ T2034] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 141.326739][ T2034] CPU: 0 PID: 2034 Comm: syz-executor126 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 141.336889][ T2034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 141.346794][ T2034] RIP: 0010:ext4_write_inline_data_end+0xe13/0xe30 [ 141.353136][ T2034] Code: f8 ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 28 fa ff ff 4c 89 ff e8 4c d3 cc ff e9 1b fa ff ff e8 02 97 db 02 e8 dd e7 8a ff <0f> 0b e8 d6 e7 8a ff 0f 0b e8 cf e7 8a ff 0f 0b e8 c8 e7 8a ff 0f [ 141.372577][ T2034] RSP: 0018:ffffc90002bc7040 EFLAGS: 00010293 [ 141.378465][ T2034] RAX: ffffffff81e50da3 RBX: 0000000000000000 RCX: ffff88811ecb2780 [ 141.386277][ T2034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.394085][ T2034] RBP: ffffc90002bc7198 R08: ffffffff81e50210 R09: ffffed1023f38c76 [ 141.401899][ T2034] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 141.409712][ T2034] R13: 0000000000000001 R14: 0000001c00000000 R15: 1ffff11023f38c75 [ 141.417523][ T2034] FS: 00007f96301a96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 141.426289][ T2034] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.432796][ T2034] CR2: 00007f9627dc8000 CR3: 000000011f6f0000 CR4: 00000000003506b0 [ 141.440618][ T2034] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.448422][ T2034] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.456241][ T2034] Call Trace: [pid 2033] exit_group(0) = ? [ 141.459356][ T2034] [ 141.462134][ T2034] ? __die_body+0x62/0xb0 [ 141.466299][ T2034] ? die+0x88/0xb0 [ 141.469946][ T2034] ? do_trap+0x103/0x330 [ 141.474028][ T2034] ? ext4_write_inline_data_end+0xe13/0xe30 [ 141.479754][ T2034] ? handle_invalid_op+0x95/0xc0 [ 141.484530][ T2034] ? ext4_write_inline_data_end+0xe13/0xe30 [ 141.490256][ T2034] ? exc_invalid_op+0x32/0x50 [ 141.494770][ T2034] ? asm_exc_invalid_op+0x1b/0x20 [ 141.499628][ T2034] ? ext4_write_inline_data_end+0x280/0xe30 [ 141.505358][ T2034] ? ext4_write_inline_data_end+0xe13/0xe30 [ 141.511089][ T2034] ? ext4_write_inline_data_end+0xe13/0xe30 [ 141.516815][ T2034] ? put_page+0xc0/0xc0 [ 141.520807][ T2034] ? copy_page_from_iter_atomic+0x61b/0x10e0 [ 141.526620][ T2034] ext4_write_end+0x374/0xa00 [ 141.531144][ T2034] ext4_da_write_end+0x88/0xab0 [ 141.535821][ T2034] ? current_time+0x1af/0x2f0 [ 141.540335][ T2034] ? ext4_da_write_begin+0xc30/0xc30 [ 141.545454][ T2034] generic_perform_write+0x3b4/0x5a0 [ 141.550577][ T2034] ? grab_cache_page_write_begin+0xa0/0xa0 [ 141.556216][ T2034] ? is_bpf_text_address+0x172/0x190 [ 141.561336][ T2034] ? generic_write_checks+0x3b9/0x470 [ 141.566545][ T2034] ext4_buffered_write_iter+0x48a/0x610 [ 141.571929][ T2034] ext4_file_write_iter+0x443/0x1c80 [ 141.577048][ T2034] ? stack_trace_save+0x113/0x1c0 [ 141.581905][ T2034] ? current_time+0x2f0/0x2f0 [ 141.586421][ T2034] ? stack_trace_snprint+0xf0/0xf0 [ 141.591367][ T2034] ? __stack_depot_save+0x34/0x470 [ 141.596315][ T2034] ? __kasan_slab_alloc+0x63/0xe0 [ 141.601176][ T2034] ? ext4_file_read_iter+0x4b0/0x4b0 [ 141.606298][ T2034] ? ____kasan_kmalloc+0xed/0x110 [ 141.611156][ T2034] ? ____kasan_kmalloc+0xdb/0x110 [ 141.616016][ T2034] ? __kasan_kmalloc+0x9/0x10 [ 141.620554][ T2034] ? __kmalloc+0x13a/0x270 [ 141.624786][ T2034] ? iter_file_splice_write+0x278/0xf90 [ 141.630172][ T2034] ? direct_splice_actor+0xff/0x130 [ 141.635290][ T2034] ? splice_direct_to_actor+0x4f1/0xbe0 [ 141.640667][ T2034] ? do_splice_direct+0x27f/0x3c0 [ 141.645527][ T2034] ? do_sendfile+0x616/0xfe0 [ 141.649957][ T2034] do_iter_readv_writev+0x58e/0x790 [ 141.654990][ T2034] ? generic_file_rw_checks+0x270/0x270 [ 141.660372][ T2034] ? fsnotify_perm+0x6a/0x5d0 [ 141.664887][ T2034] ? security_file_permission+0x86/0xb0 [ 141.670267][ T2034] do_iter_write+0x1f5/0x760 [ 141.674690][ T2034] ? __kasan_check_read+0x11/0x20 [ 141.679638][ T2034] ? splice_from_pipe_next+0x5e9/0x640 [ 141.684943][ T2034] vfs_iter_write+0x7c/0xa0 [ 141.689276][ T2034] iter_file_splice_write+0x7f8/0xf90 [ 141.694481][ T2034] ? splice_from_pipe+0x230/0x230 [ 141.699346][ T2034] ? generic_file_splice_read+0x547/0x780 [ 141.704905][ T2034] ? splice_shrink_spd+0xb0/0xb0 [ 141.709669][ T2034] ? __kasan_check_read+0x11/0x20 [ 141.714531][ T2034] ? fsnotify_perm+0x470/0x5d0 [ 141.719138][ T2034] ? splice_from_pipe+0x230/0x230 [ 141.723990][ T2034] direct_splice_actor+0xff/0x130 [ 141.728857][ T2034] splice_direct_to_actor+0x4f1/0xbe0 [ 141.734059][ T2034] ? do_splice_direct+0x3c0/0x3c0 [ 141.738917][ T2034] ? pipe_to_sendpage+0x340/0x340 [ 141.743785][ T2034] ? rw_verify_area+0xa7/0x1c0 [ 141.748378][ T2034] do_splice_direct+0x27f/0x3c0 [ 141.753065][ T2034] ? splice_direct_to_actor+0xbe0/0xbe0 [ 141.758458][ T2034] ? fsnotify_perm+0x6a/0x5d0 [ 141.762963][ T2034] ? security_file_permission+0x86/0xb0 [ 141.768345][ T2034] do_sendfile+0x616/0xfe0 [ 141.772597][ T2034] ? _raw_spin_unlock_irq+0x4e/0x70 [ 141.777630][ T2034] ? ptrace_stop+0x6eb/0xa90 [ 141.782057][ T2034] ? do_preadv+0x350/0x350 [ 141.786308][ T2034] ? ptrace_notify+0x24c/0x350 [ 141.790908][ T2034] __x64_sys_sendfile64+0x1ce/0x230 [ 141.795941][ T2034] ? __ia32_sys_sendfile+0x240/0x240 [ 141.801060][ T2034] ? __kasan_check_read+0x11/0x20 [ 141.805922][ T2034] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 141.811739][ T2034] do_syscall_64+0x3d/0xb0 [ 141.815991][ T2034] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 141.821807][ T2034] RIP: 0033:0x7f96301ecc19 [ 141.826061][ T2034] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 141.845502][ T2034] RSP: 002b:00007f96301a9218 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 141.853748][ T2034] RAX: ffffffffffffffda RBX: 00007f96302746c8 RCX: 00007f96301ecc19 [ 141.861558][ T2034] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 141.869380][ T2034] RBP: 00007f96302746c0 R08: 0000000000000000 R09: 0000000000000000 [ 141.877192][ T2034] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 00007f96302414f8 [ 141.884992][ T2034] R13: 00007f96302410c0 R14: 0000000020000ac0 R15: 0030656c69662f2e [ 141.892805][ T2034] [ 141.895666][ T2034] Modules linked in: [ 141.899631][ T2034] ---[ end trace e5b541819ad0d3a2 ]--- [ 141.904947][ T2034] RIP: 0010:ext4_write_inline_data_end+0xe13/0xe30 [ 141.911259][ T2034] Code: f8 ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 28 fa ff ff 4c 89 ff e8 4c d3 cc ff e9 1b fa ff ff e8 02 97 db 02 e8 dd e7 8a ff <0f> 0b e8 d6 e7 8a ff 0f 0b e8 cf e7 8a ff 0f 0b e8 c8 e7 8a ff 0f [ 141.930806][ T2034] RSP: 0018:ffffc90002bc7040 EFLAGS: 00010293 [ 141.936664][ T2034] RAX: ffffffff81e50da3 RBX: 0000000000000000 RCX: ffff88811ecb2780 [ 141.944499][ T2034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.952387][ T2034] RBP: ffffc90002bc7198 R08: ffffffff81e50210 R09: ffffed1023f38c76 [ 141.960121][ T2034] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 141.967905][ T2034] R13: 0000000000000001 R14: 0000001c00000000 R15: 1ffff11023f38c75 [ 141.975746][ T2034] FS: 00007f96301a96c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 141.984584][ T2034] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.991014][ T2034] CR2: 00007f9630240718 CR3: 000000011f6f0000 CR4: 00000000003506a0 [ 141.998906][ T2034] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 142.006702][ T2034] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 142.014565][ T2034] Kernel panic - not syncing: Fatal exception [ 142.020627][ T2034] Kernel Offset: disabled [ 142.024752][ T2034] Rebooting in 86400 seconds..