./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1265740719 <...> udit: type=1400 audit(1695567701.577:64): avc: denied { rlimitinh } for pid=221 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.483677][ T30] audit: type=1400 audit(1695567701.577:65): avc: denied { siginh } for pid=221 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.718964][ T226] sftp-server (226) used greatest stack depth: 22096 bytes left Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. execve("./syz-executor1265740719", ["./syz-executor1265740719"], 0x7fffc8252ab0 /* 10 vars */) = 0 brk(NULL) = 0x555556b82000 brk(0x555556b82d40) = 0x555556b82d40 arch_prctl(ARCH_SET_FS, 0x555556b823c0) = 0 set_tid_address(0x555556b82690) = 291 set_robust_list(0x555556b826a0, 24) = 0 rseq(0x555556b82ce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1265740719", 4096) = 28 getrandom("\xef\xfe\x27\x29\x29\x95\xe6\xfd", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556b82d40 brk(0x555556ba3d40) = 0x555556ba3d40 brk(0x555556ba4000) = 0x555556ba4000 mprotect(0x7f963026e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.pMmUUH", 0700) = 0 chmod("./syzkaller.pMmUUH", 0777) = 0 chdir("./syzkaller.pMmUUH") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 293 ./strace-static-x86_64: Process 293 attached [pid 293] set_robust_list(0x555556b826a0, 24) = 0 [pid 293] chdir("./0") = 0 [pid 293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 293] setpgid(0, 0) = 0 [pid 293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 293] write(3, "1000", 4) = 4 [pid 293] close(3) = 0 [pid 293] symlink("/dev/binderfs", "./binderfs") = 0 [pid 293] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 293] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 293] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 293] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[294]}, 88) = 294 [pid 293] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 293] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 294 attached [pid 294] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 294] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 294] memfd_create("syzkaller", 0) = 3 [pid 294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 294] munmap(0x7f9627d89000, 262144) = 0 [pid 294] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 294] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 294] close(3) = 0 [pid 294] mkdir("./file0", 0777) = 0 [ 19.949724][ T30] audit: type=1400 audit(1695567710.057:66): avc: denied { execmem } for pid=291 comm="syz-executor126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.953173][ T30] audit: type=1400 audit(1695567710.057:67): avc: denied { read write } for pid=291 comm="syz-executor126" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.957664][ T30] audit: type=1400 audit(1695567710.057:68): avc: denied { open } for pid=291 comm="syz-executor126" path="/dev/loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.962473][ T30] audit: type=1400 audit(1695567710.057:69): avc: denied { ioctl } for pid=291 comm="syz-executor126" path="/dev/loop0" dev="devtmpfs" ino=112 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.970276][ T294] loop0: detected capacity change from 0 to 512 [ 19.977740][ T294] ======================================================= [ 19.977740][ T294] WARNING: The mand mount option has been deprecated and [ 19.977740][ T294] and is ignored by this kernel. Remove the mand [ 19.977740][ T294] option from the mount to silence this warning. [ 19.977740][ T294] ======================================================= [ 19.977758][ T30] audit: type=1400 audit(1695567710.077:70): avc: denied { mounton } for pid=293 comm="syz-executor126" path="/root/syzkaller.pMmUUH/0/file0" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [pid 294] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 294] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 294] chdir("./file0") = 0 [pid 294] ioctl(4, LOOP_CLR_FD) = 0 [pid 294] close(4) = 0 [pid 294] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 294] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] <... futex resumed>) = 0 [pid 293] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 293] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... futex resumed>) = 0 [pid 294] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 294] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... futex resumed>) = 0 [pid 293] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... futex resumed>) = 1 [pid 294] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 294] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... futex resumed>) = 0 [pid 293] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... futex resumed>) = 1 [pid 294] creat("./bus", 000) = 6 [pid 294] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... futex resumed>) = 0 [pid 293] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... futex resumed>) = 1 [pid 294] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 294] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... futex resumed>) = 0 [pid 293] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... futex resumed>) = 1 [pid 294] open("./bus", O_RDONLY) = 7 [pid 294] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... futex resumed>) = 0 [pid 293] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... futex resumed>) = 1 [ 20.015361][ T294] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 20.050915][ T294] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 20.060952][ T294] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 20.071731][ T30] audit: type=1400 audit(1695567710.177:71): avc: denied { mount } for pid=293 comm="syz-executor126" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [pid 294] sendfile(6, 7, NULL, 140737974943952 [pid 293] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 293] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 293] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 293] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[297]}, 88) = 297 [pid 293] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 293] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 20.095604][ T30] audit: type=1400 audit(1695567710.187:72): avc: denied { write } for pid=293 comm="syz-executor126" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 20.117460][ T30] audit: type=1400 audit(1695567710.187:73): avc: denied { add_name } for pid=293 comm="syz-executor126" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 293] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 297 attached [pid 297] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 297] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 297] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 293] <... futex resumed>) = 0 [pid 297] sendmsg(-1, 0x20000000, 0 [pid 293] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 293] <... futex resumed>) = 0 [pid 297] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 0 [pid 293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 20.138248][ T30] audit: type=1400 audit(1695567710.187:74): avc: denied { create } for pid=293 comm="syz-executor126" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 20.158460][ T30] audit: type=1400 audit(1695567710.187:75): avc: denied { read write open } for pid=293 comm="syz-executor126" path=2F726F6F742F73797A6B616C6C65722E704D6D5555482F302F66696C65302F627573202864656C6574656429 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [pid 297] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] exit_group(0 [pid 297] <... futex resumed>) = ? [pid 293] <... exit_group resumed>) = ? [pid 297] +++ exited with 0 +++ [pid 294] <... sendfile resumed>) = ? [pid 294] +++ exited with 0 +++ [pid 293] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=293, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 [ 20.310808][ T294] syz-executor126 (294) used greatest stack depth: 21552 bytes left clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 298 ./strace-static-x86_64: Process 298 attached [pid 298] set_robust_list(0x555556b826a0, 24) = 0 [pid 298] chdir("./1") = 0 [pid 298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 298] setpgid(0, 0) = 0 [pid 298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 298] write(3, "1000", 4) = 4 [pid 298] close(3) = 0 [pid 298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 298] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 298] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 298] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[299]}, 88) = 299 [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] memfd_create("syzkaller", 0) = 3 [pid 299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 299] munmap(0x7f9627d89000, 262144) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 299] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 299] close(3) = 0 [pid 299] mkdir("./file0", 0777) = 0 [pid 299] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 299] chdir("./file0") = 0 [pid 299] ioctl(4, LOOP_CLR_FD) = 0 [pid 299] close(4) = 0 [pid 299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [pid 299] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [pid 299] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 0 [pid 299] creat("./bus", 000) = 6 [pid 299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [pid 299] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [pid 299] open("./bus", O_RDONLY) = 7 [pid 299] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... futex resumed>) = 1 [ 20.377515][ T299] loop0: detected capacity change from 0 to 512 [ 20.385830][ T299] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 20.399299][ T299] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 20.408888][ T299] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 299] sendfile(6, 7, NULL, 140737974943952 [pid 298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 298] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 298] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 298] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 302 attached => {parent_tid=[302]}, 88) = 302 [pid 302] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 302] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 302] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 302] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 298] <... futex resumed>) = 0 [pid 298] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 302] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 298] <... futex resumed>) = 0 [pid 302] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] exit_group(0) = ? [pid 302] <... futex resumed>) = ? [pid 302] +++ exited with 0 +++ [pid 299] <... sendfile resumed>) = ? [pid 299] +++ exited with 0 +++ [pid 298] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=298, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 304 ./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x555556b826a0, 24) = 0 [pid 304] chdir("./2") = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] setpgid(0, 0) = 0 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 304] write(3, "1000", 4) = 4 [pid 304] close(3) = 0 [pid 304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 304] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 304] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 304] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[305]}, 88) = 305 [pid 304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 304] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 305 attached [pid 305] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] memfd_create("syzkaller", 0) = 3 [pid 305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 305] munmap(0x7f9627d89000, 262144) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 305] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 305] close(3) = 0 [pid 305] mkdir("./file0", 0777) = 0 [pid 305] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 305] chdir("./file0") = 0 [pid 305] ioctl(4, LOOP_CLR_FD) = 0 [pid 305] close(4) = 0 [pid 305] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 305] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 305] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] creat("./bus", 000) = 6 [pid 305] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 305] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 305] open("./bus", O_RDONLY) = 7 [pid 305] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [ 20.665427][ T305] loop0: detected capacity change from 0 to 512 [ 20.673865][ T305] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 20.687993][ T305] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 20.698555][ T305] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 305] sendfile(6, 7, NULL, 140737974943952 [pid 304] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 304] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 304] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 304] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[307]}, 88) = 307 ./strace-static-x86_64: Process 307 attached [pid 304] rt_sigprocmask(SIG_SETMASK, [], [pid 307] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 304] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... futex resumed>) = 0 [pid 307] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 307] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... futex resumed>) = 0 [pid 307] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 307] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 307] <... futex resumed>) = 1 [pid 307] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] exit_group(0 [pid 307] <... futex resumed>) = ? [pid 304] <... exit_group resumed>) = ? [pid 307] +++ exited with 0 +++ [pid 305] <... sendfile resumed>) = ? [pid 305] +++ exited with 0 +++ [pid 304] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./2/binderfs") = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 308 ./strace-static-x86_64: Process 308 attached [pid 308] set_robust_list(0x555556b826a0, 24) = 0 [pid 308] chdir("./3") = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] setpgid(0, 0) = 0 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 308] write(3, "1000", 4) = 4 [pid 308] close(3) = 0 [pid 308] symlink("/dev/binderfs", "./binderfs") = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 308] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 308] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[309]}, 88) = 309 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 309 attached [pid 309] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] memfd_create("syzkaller", 0) = 3 [pid 309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 309] munmap(0x7f9627d89000, 262144) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 309] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 309] close(3) = 0 [pid 309] mkdir("./file0", 0777) = 0 [pid 309] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 309] chdir("./file0") = 0 [pid 309] ioctl(4, LOOP_CLR_FD) = 0 [pid 309] close(4) = 0 [pid 309] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 309] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 309] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] creat("./bus", 000) = 6 [pid 309] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 309] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] open("./bus", O_RDONLY) = 7 [pid 309] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [ 20.967608][ T309] loop0: detected capacity change from 0 to 512 [ 20.975798][ T309] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 20.991769][ T309] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 21.002059][ T309] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 309] sendfile(6, 7, NULL, 140737974943952 [pid 308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 308] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 308] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 308] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 311 attached => {parent_tid=[311]}, 88) = 311 [pid 308] rt_sigprocmask(SIG_SETMASK, [], [pid 311] set_robust_list(0x7f9627dc89a0, 24 [pid 308] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 308] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... set_robust_list resumed>) = 0 [pid 311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 311] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 311] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] sendmsg(-1, 0x20000000, 0 [pid 308] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 311] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 311] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] exit_group(0 [pid 311] <... futex resumed>) = ? [pid 308] <... exit_group resumed>) = ? [pid 311] +++ exited with 0 +++ [pid 309] <... sendfile resumed>) = ? [pid 309] +++ exited with 0 +++ [pid 308] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./3/binderfs") = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 312 ./strace-static-x86_64: Process 312 attached [pid 312] set_robust_list(0x555556b826a0, 24) = 0 [pid 312] chdir("./4") = 0 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 312] setpgid(0, 0) = 0 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 312] write(3, "1000", 4) = 4 [pid 312] close(3) = 0 [pid 312] symlink("/dev/binderfs", "./binderfs") = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 312] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 312] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 313 attached => {parent_tid=[313]}, 88) = 313 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] set_robust_list(0x7f96301a99a0, 24 [pid 312] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 313] <... set_robust_list resumed>) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] memfd_create("syzkaller", 0) = 3 [pid 313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 313] munmap(0x7f9627d89000, 262144) = 0 [pid 313] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 313] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 313] close(3) = 0 [pid 313] mkdir("./file0", 0777) = 0 [pid 313] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 313] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 313] chdir("./file0") = 0 [pid 313] ioctl(4, LOOP_CLR_FD) = 0 [pid 313] close(4) = 0 [pid 313] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 313] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... futex resumed>) = 1 [pid 313] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 313] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... futex resumed>) = 1 [pid 313] creat("./bus", 000) = 6 [pid 313] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... futex resumed>) = 1 [pid 313] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 313] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... futex resumed>) = 1 [pid 313] open("./bus", O_RDONLY) = 7 [pid 313] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... futex resumed>) = 1 [ 21.245126][ T313] loop0: detected capacity change from 0 to 512 [ 21.253099][ T313] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 21.266382][ T313] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 21.276190][ T313] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 313] sendfile(6, 7, NULL, 140737974943952 [pid 312] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 312] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 312] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 312] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 315 attached => {parent_tid=[315]}, 88) = 315 [pid 315] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 315] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 312] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 315] <... futex resumed>) = 0 [pid 315] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 312] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... mmap resumed>) = 0x20000000 [pid 315] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 1 [pid 312] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 315] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 1 [pid 315] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] exit_group(0 [pid 315] <... futex resumed>) = ? [pid 312] <... exit_group resumed>) = ? [pid 315] +++ exited with 0 +++ [pid 313] <... sendfile resumed>) = ? [pid 313] +++ exited with 0 +++ [pid 312] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=312, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./4/binderfs") = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 316 ./strace-static-x86_64: Process 316 attached [pid 316] set_robust_list(0x555556b826a0, 24) = 0 [pid 316] chdir("./5") = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 316] setpgid(0, 0) = 0 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 316] write(3, "1000", 4) = 4 [pid 316] close(3) = 0 [pid 316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 316] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 316] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 317 attached => {parent_tid=[317]}, 88) = 317 [pid 317] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 317] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 316] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 317] <... futex resumed>) = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 317] memfd_create("syzkaller", 0) = 3 [pid 317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 317] munmap(0x7f9627d89000, 262144) = 0 [pid 317] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 317] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 317] close(3) = 0 [pid 317] mkdir("./file0", 0777) = 0 [pid 317] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 317] chdir("./file0") = 0 [pid 317] ioctl(4, LOOP_CLR_FD) = 0 [pid 317] close(4) = 0 [pid 317] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [pid 317] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 317] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 316] <... futex resumed>) = 0 [pid 317] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 316] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... open resumed>) = 5 [pid 316] <... futex resumed>) = 0 [pid 317] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 316] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [pid 317] creat("./bus", 000) = 6 [pid 317] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [pid 317] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 317] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [pid 317] open("./bus", O_RDONLY) = 7 [pid 317] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [ 21.545091][ T317] loop0: detected capacity change from 0 to 512 [ 21.553491][ T317] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 21.567819][ T317] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 21.577974][ T317] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 317] sendfile(6, 7, NULL, 140737974943952 [pid 316] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 316] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 316] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[320]}, 88) = 320 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 316] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 320 attached [pid 320] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 320] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 320] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 320] <... futex resumed>) = 1 [pid 320] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 320] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 320] <... futex resumed>) = 1 [pid 320] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 316] exit_group(0) = ? [pid 320] <... futex resumed>) = ? [pid 320] +++ exited with 0 +++ [pid 317] <... sendfile resumed>) = ? [pid 317] +++ exited with 0 +++ [pid 316] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=316, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./5/binderfs") = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 321 ./strace-static-x86_64: Process 321 attached [pid 321] set_robust_list(0x555556b826a0, 24) = 0 [pid 321] chdir("./6") = 0 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 321] setpgid(0, 0) = 0 [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 321] write(3, "1000", 4) = 4 [pid 321] close(3) = 0 [pid 321] symlink("/dev/binderfs", "./binderfs") = 0 [pid 321] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 321] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 321] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 321] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 321] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[322]}, 88) = 322 [pid 321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 321] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 322 attached [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 322] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 322] memfd_create("syzkaller", 0) = 3 [pid 322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 322] munmap(0x7f9627d89000, 262144) = 0 [pid 322] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 322] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 322] close(3) = 0 [pid 322] mkdir("./file0", 0777) = 0 [pid 322] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 322] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 322] chdir("./file0") = 0 [pid 322] ioctl(4, LOOP_CLR_FD) = 0 [pid 322] close(4) = 0 [pid 322] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 321] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... futex resumed>) = 1 [pid 322] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 322] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 321] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... futex resumed>) = 1 [pid 322] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 322] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 321] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... futex resumed>) = 1 [pid 322] creat("./bus", 000) = 6 [pid 322] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 321] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... futex resumed>) = 1 [pid 322] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 322] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 321] <... futex resumed>) = 0 [pid 322] open("./bus", O_RDONLY [pid 321] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... open resumed>) = 7 [pid 322] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 321] <... futex resumed>) = 1 [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 321] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... futex resumed>) = 0 [ 21.840716][ T322] loop0: detected capacity change from 0 to 512 [ 21.849090][ T322] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 21.862362][ T322] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 21.873267][ T322] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 322] sendfile(6, 7, NULL, 140737974943952 [pid 321] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 321] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 321] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 321] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 321] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 321] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[324]}, 88) = 324 [pid 321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 321] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 324] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 324] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 321] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... futex resumed>) = 1 [pid 324] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 324] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = 1 [pid 324] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 321] exit_group(0 [pid 324] <... futex resumed>) = ? [pid 321] <... exit_group resumed>) = ? [pid 322] <... sendfile resumed>) = ? [pid 322] +++ exited with 0 +++ [pid 324] +++ exited with 0 +++ [pid 321] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=321, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./6/binderfs") = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./6/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 325 ./strace-static-x86_64: Process 325 attached [pid 325] set_robust_list(0x555556b826a0, 24) = 0 [pid 325] chdir("./7") = 0 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 325] setpgid(0, 0) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 325] write(3, "1000", 4) = 4 [pid 325] close(3) = 0 [pid 325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 325] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 325] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[326]}, 88) = 326 ./strace-static-x86_64: Process 326 attached [pid 325] rt_sigprocmask(SIG_SETMASK, [], [pid 326] set_robust_list(0x7f96301a99a0, 24 [pid 325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 326] <... set_robust_list resumed>) = 0 [pid 325] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] rt_sigprocmask(SIG_SETMASK, [], [pid 325] <... futex resumed>) = 0 [pid 326] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 326] memfd_create("syzkaller", 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 326] <... memfd_create resumed>) = 3 [pid 326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 326] munmap(0x7f9627d89000, 262144) = 0 [pid 326] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 326] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 326] close(3) = 0 [pid 326] mkdir("./file0", 0777) = 0 [pid 326] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 326] chdir("./file0") = 0 [pid 326] ioctl(4, LOOP_CLR_FD) = 0 [pid 326] close(4) = 0 [pid 326] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... futex resumed>) = 1 [pid 326] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 326] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... futex resumed>) = 1 [pid 326] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 326] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... futex resumed>) = 1 [pid 326] creat("./bus", 000) = 6 [pid 326] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... futex resumed>) = 1 [pid 326] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 326] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... futex resumed>) = 1 [pid 326] open("./bus", O_RDONLY) = 7 [pid 326] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... futex resumed>) = 1 [ 22.115010][ T326] loop0: detected capacity change from 0 to 512 [ 22.123344][ T326] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 22.136541][ T326] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 22.146081][ T326] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 326] sendfile(6, 7, NULL, 140737974943952 [pid 325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 325] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 325] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[328]}, 88) = 328 [pid 325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 325] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 328] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 328] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] <... futex resumed>) = 1 [pid 328] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 328] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = 1 [pid 328] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 325] exit_group(0 [pid 328] <... futex resumed>) = ? [pid 325] <... exit_group resumed>) = ? [pid 328] +++ exited with 0 +++ [pid 326] <... sendfile resumed>) = ? [pid 326] +++ exited with 0 +++ [pid 325] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=325, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./7/binderfs") = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./7/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 329 ./strace-static-x86_64: Process 329 attached [pid 329] set_robust_list(0x555556b826a0, 24) = 0 [pid 329] chdir("./8") = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 329] setpgid(0, 0) = 0 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 329] write(3, "1000", 4) = 4 [pid 329] close(3) = 0 [pid 329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 329] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 329] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[330]}, 88) = 330 [pid 329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] memfd_create("syzkaller", 0) = 3 [pid 330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 330] munmap(0x7f9627d89000, 262144) = 0 [pid 330] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 330] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 330] close(3) = 0 [pid 330] mkdir("./file0", 0777) = 0 [pid 330] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 330] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 330] chdir("./file0") = 0 [pid 330] ioctl(4, LOOP_CLR_FD) = 0 [pid 330] close(4) = 0 [pid 330] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] <... futex resumed>) = 1 [pid 330] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 330] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] <... futex resumed>) = 1 [pid 330] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 330] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] <... futex resumed>) = 1 [pid 330] creat("./bus", 000) = 6 [pid 330] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] <... futex resumed>) = 1 [pid 329] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 330] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] <... futex resumed>) = 1 [pid 330] open("./bus", O_RDONLY) = 7 [pid 330] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] <... futex resumed>) = 1 [ 22.428905][ T330] loop0: detected capacity change from 0 to 512 [ 22.437164][ T330] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 22.450084][ T330] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 22.460241][ T330] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 330] sendfile(6, 7, NULL, 140737974943952 [pid 329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 329] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 329] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[332]}, 88) = 332 [pid 329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 332] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 332] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 329] <... futex resumed>) = 0 [pid 332] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] exit_group(0 [pid 332] <... futex resumed>) = ? [pid 329] <... exit_group resumed>) = ? [pid 332] +++ exited with 0 +++ [pid 330] <... sendfile resumed>) = ? [pid 330] +++ exited with 0 +++ [pid 329] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=329, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./8/binderfs") = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./8/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 334 ./strace-static-x86_64: Process 334 attached [pid 334] set_robust_list(0x555556b826a0, 24) = 0 [pid 334] chdir("./9") = 0 [pid 334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 334] setpgid(0, 0) = 0 [pid 334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 334] write(3, "1000", 4) = 4 [pid 334] close(3) = 0 [pid 334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 334] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 334] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 334] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[335]}, 88) = 335 [pid 334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 334] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 335] memfd_create("syzkaller", 0) = 3 [pid 335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 335] munmap(0x7f9627d89000, 262144) = 0 [pid 335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 335] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 335] close(3) = 0 [pid 335] mkdir("./file0", 0777) = 0 [pid 335] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 335] chdir("./file0") = 0 [pid 335] ioctl(4, LOOP_CLR_FD) = 0 [pid 335] close(4) = 0 [pid 335] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 335] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 335] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] creat("./bus", 000) = 6 [pid 335] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 335] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] open("./bus", O_RDONLY) = 7 [pid 335] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [ 22.729827][ T335] loop0: detected capacity change from 0 to 512 [ 22.738437][ T335] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 22.751470][ T335] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 22.761126][ T335] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 335] sendfile(6, 7, NULL, 140737974943952 [pid 334] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 334] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 334] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 334] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 334] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[337]}, 88) = 337 [pid 334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 334] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 337] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 337] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 337] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 334] <... futex resumed>) = 0 [pid 337] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 334] exit_group(0 [pid 337] <... futex resumed>) = ? [pid 334] <... exit_group resumed>) = ? [pid 337] +++ exited with 0 +++ [pid 335] <... sendfile resumed>) = ? [pid 335] +++ exited with 0 +++ [pid 334] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=334, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./9/binderfs") = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./9/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 338 ./strace-static-x86_64: Process 338 attached [pid 338] set_robust_list(0x555556b826a0, 24) = 0 [pid 338] chdir("./10") = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 [pid 338] close(3) = 0 [pid 338] symlink("/dev/binderfs", "./binderfs") = 0 [pid 338] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 338] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 338] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 338] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 338] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[339]}, 88) = 339 [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] memfd_create("syzkaller", 0) = 3 [pid 339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 339] munmap(0x7f9627d89000, 262144) = 0 [pid 339] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 339] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 339] close(3) = 0 [pid 339] mkdir("./file0", 0777) = 0 [pid 339] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 339] chdir("./file0") = 0 [pid 339] ioctl(4, LOOP_CLR_FD) = 0 [pid 339] close(4) = 0 [pid 339] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 339] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 0 [pid 339] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 339] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 339] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] creat("./bus", 000) = 6 [pid 339] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 339] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 339] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 0 [pid 339] open("./bus", O_RDONLY) = 7 [pid 339] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 23.034598][ T339] loop0: detected capacity change from 0 to 512 [ 23.043041][ T339] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 23.056081][ T339] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 23.066139][ T339] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 339] sendfile(6, 7, NULL, 140737974943952 [pid 338] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 338] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 338] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 338] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 338] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 341 attached => {parent_tid=[341]}, 88) = 341 [pid 341] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 341] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] <... futex resumed>) = 0 [pid 341] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 341] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 338] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] <... futex resumed>) = 0 [pid 341] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 341] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 338] exit_group(0 [pid 341] <... futex resumed>) = ? [pid 338] <... exit_group resumed>) = ? [pid 341] +++ exited with 0 +++ [pid 339] <... sendfile resumed>) = 230 [pid 339] +++ exited with 0 +++ [pid 338] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=338, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./10/binderfs") = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./10/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 342 ./strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x555556b826a0, 24) = 0 [pid 342] chdir("./11") = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 342] setpgid(0, 0) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 342] write(3, "1000", 4) = 4 [pid 342] close(3) = 0 [pid 342] symlink("/dev/binderfs", "./binderfs") = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 342] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[343]}, 88) = 343 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 343 attached [pid 343] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 343] memfd_create("syzkaller", 0) = 3 [pid 343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 343] munmap(0x7f9627d89000, 262144) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 343] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 343] close(3) = 0 [pid 343] mkdir("./file0", 0777) = 0 [pid 343] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 343] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 343] chdir("./file0") = 0 [pid 343] ioctl(4, LOOP_CLR_FD) = 0 [pid 343] close(4) = 0 [pid 343] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 343] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 343] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] creat("./bus", 000) = 6 [pid 343] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 343] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] open("./bus", O_RDONLY) = 7 [pid 343] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [ 23.368093][ T343] loop0: detected capacity change from 0 to 512 [ 23.376030][ T343] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 23.390648][ T343] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 23.401906][ T343] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 343] sendfile(6, 7, NULL, 140737974943952 [pid 342] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 342] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 345 attached => {parent_tid=[345]}, 88) = 345 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 345] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 345] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 345] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 345] <... futex resumed>) = 1 [pid 345] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] exit_group(0 [pid 345] <... futex resumed>) = ? [pid 342] <... exit_group resumed>) = ? [pid 345] +++ exited with 0 +++ [pid 343] <... sendfile resumed>) = ? [pid 343] +++ exited with 0 +++ [pid 342] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=342, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./11/binderfs") = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./11/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 347 ./strace-static-x86_64: Process 347 attached [pid 347] set_robust_list(0x555556b826a0, 24) = 0 [pid 347] chdir("./12") = 0 [pid 347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 347] setpgid(0, 0) = 0 [pid 347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 347] write(3, "1000", 4) = 4 [pid 347] close(3) = 0 [pid 347] symlink("/dev/binderfs", "./binderfs") = 0 [pid 347] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 347] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 347] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 347] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[348]}, 88) = 348 [pid 347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 347] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 348 attached [pid 348] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 348] memfd_create("syzkaller", 0) = 3 [pid 348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 348] munmap(0x7f9627d89000, 262144) = 0 [pid 348] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 348] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 348] close(3) = 0 [pid 348] mkdir("./file0", 0777) = 0 [pid 348] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 348] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 348] chdir("./file0") = 0 [pid 348] ioctl(4, LOOP_CLR_FD) = 0 [pid 348] close(4) = 0 [pid 348] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 0 [pid 348] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 348] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [pid 348] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 348] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] creat("./bus", 000) = 6 [pid 348] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 347] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 347] <... futex resumed>) = 0 [pid 348] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... writev resumed>) = 1 [pid 348] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [pid 348] open("./bus", O_RDONLY) = 7 [pid 348] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [ 23.643838][ T348] loop0: detected capacity change from 0 to 512 [ 23.652573][ T348] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 23.666012][ T348] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 23.676158][ T348] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 348] sendfile(6, 7, NULL, 140737974943952 [pid 347] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 347] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 347] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 347] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 347] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[351]}, 88) = 351 ./strace-static-x86_64: Process 351 attached [pid 347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 347] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 351] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 351] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 351] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 347] <... futex resumed>) = 0 [pid 351] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 347] exit_group(0 [pid 351] <... futex resumed>) = ? [pid 347] <... exit_group resumed>) = ? [pid 348] <... sendfile resumed>) = ? [pid 351] +++ exited with 0 +++ [pid 348] +++ exited with 0 +++ [pid 347] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=347, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./12/binderfs") = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./12/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 352 ./strace-static-x86_64: Process 352 attached [pid 352] set_robust_list(0x555556b826a0, 24) = 0 [pid 352] chdir("./13") = 0 [pid 352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 352] setpgid(0, 0) = 0 [pid 352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 352] write(3, "1000", 4) = 4 [pid 352] close(3) = 0 [pid 352] symlink("/dev/binderfs", "./binderfs") = 0 [pid 352] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 352] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 352] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 352] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[353]}, 88) = 353 [pid 352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 352] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 353 attached [pid 353] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 353] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 353] memfd_create("syzkaller", 0) = 3 [pid 353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 353] munmap(0x7f9627d89000, 262144) = 0 [pid 353] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 353] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 353] close(3) = 0 [pid 353] mkdir("./file0", 0777) = 0 [pid 353] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 353] chdir("./file0") = 0 [pid 353] ioctl(4, LOOP_CLR_FD) = 0 [pid 353] close(4) = 0 [pid 353] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 353] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 353] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] creat("./bus", 000) = 6 [pid 353] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 353] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 352] <... futex resumed>) = 0 [pid 353] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 0 [pid 353] open("./bus", O_RDONLY) = 7 [pid 353] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [ 23.987681][ T353] loop0: detected capacity change from 0 to 512 [ 23.996400][ T353] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 24.011144][ T353] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 24.021266][ T353] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 353] sendfile(6, 7, NULL, 140737974943952 [pid 352] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 352] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 352] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 352] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 352] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[355]}, 88) = 355 [pid 352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 352] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 355 attached [pid 355] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 355] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 355] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 355] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 352] <... futex resumed>) = 0 [pid 355] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] exit_group(0) = ? [pid 355] <... futex resumed>) = 231 [pid 355] +++ exited with 0 +++ [pid 353] <... sendfile resumed>) = ? [pid 353] +++ exited with 0 +++ [pid 352] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=352, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./13/binderfs") = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./13/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 356 ./strace-static-x86_64: Process 356 attached [pid 356] set_robust_list(0x555556b826a0, 24) = 0 [pid 356] chdir("./14") = 0 [pid 356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 356] setpgid(0, 0) = 0 [pid 356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 356] write(3, "1000", 4) = 4 [pid 356] close(3) = 0 [pid 356] symlink("/dev/binderfs", "./binderfs") = 0 [pid 356] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 356] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 356] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 356] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 356] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[357]}, 88) = 357 [pid 356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 356] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 357 attached [pid 357] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 357] memfd_create("syzkaller", 0) = 3 [pid 357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 357] munmap(0x7f9627d89000, 262144) = 0 [pid 357] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 357] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 357] close(3) = 0 [pid 357] mkdir("./file0", 0777) = 0 [pid 357] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 357] chdir("./file0") = 0 [pid 357] ioctl(4, LOOP_CLR_FD) = 0 [pid 357] close(4) = 0 [pid 357] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 357] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 356] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 0 [pid 357] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 357] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 357] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] creat("./bus", 000) = 6 [pid 357] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 356] <... futex resumed>) = 0 [pid 357] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 356] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... writev resumed>) = 1 [pid 357] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 356] <... futex resumed>) = 0 [pid 357] open("./bus", O_RDONLY [pid 356] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... open resumed>) = 7 [pid 357] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 356] <... futex resumed>) = 0 [pid 357] sendfile(6, 7, NULL, 140737974943952 [pid 356] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 24.329082][ T357] loop0: detected capacity change from 0 to 512 [ 24.337380][ T357] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 24.350768][ T357] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 24.361005][ T357] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 356] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 356] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 356] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 356] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 356] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 359 attached [pid 359] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 359] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 356] <... clone3 resumed> => {parent_tid=[359]}, 88) = 359 [pid 356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 356] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 356] <... futex resumed>) = 1 [pid 359] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 356] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] <... mmap resumed>) = 0x20000000 [pid 359] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 359] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 359] <... futex resumed>) = 1 [pid 359] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 356] exit_group(0 [pid 359] <... futex resumed>) = ? [pid 356] <... exit_group resumed>) = ? [pid 359] +++ exited with 0 +++ [pid 357] <... sendfile resumed>) = ? [pid 357] +++ exited with 0 +++ [pid 356] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=356, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./14/binderfs") = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./14/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 361 ./strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x555556b826a0, 24) = 0 [pid 361] chdir("./15") = 0 [pid 361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 361] setpgid(0, 0) = 0 [pid 361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 361] write(3, "1000", 4) = 4 [pid 361] close(3) = 0 [pid 361] symlink("/dev/binderfs", "./binderfs") = 0 [pid 361] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 361] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 361] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 361] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 361] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 362 attached => {parent_tid=[362]}, 88) = 362 [pid 362] set_robust_list(0x7f96301a99a0, 24 [pid 361] rt_sigprocmask(SIG_SETMASK, [], [pid 362] <... set_robust_list resumed>) = 0 [pid 361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 362] rt_sigprocmask(SIG_SETMASK, [], [pid 361] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 362] memfd_create("syzkaller", 0) = 3 [pid 362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 362] munmap(0x7f9627d89000, 262144) = 0 [pid 362] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 362] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 362] close(3) = 0 [pid 362] mkdir("./file0", 0777) = 0 [pid 362] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 362] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 362] chdir("./file0") = 0 [pid 362] ioctl(4, LOOP_CLR_FD) = 0 [pid 362] close(4) = 0 [pid 362] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 362] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = 0 [pid 362] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 362] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = 1 [pid 362] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 362] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = 1 [pid 362] creat("./bus", 000) = 6 [pid 362] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 362] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = 0 [pid 362] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 362] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = 1 [pid 362] open("./bus", O_RDONLY) = 7 [pid 362] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = 1 [ 24.671440][ T362] loop0: detected capacity change from 0 to 512 [ 24.679545][ T362] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 24.692999][ T362] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 24.702924][ T362] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 362] sendfile(6, 7, NULL, 140737974943952 [pid 361] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 361] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 361] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 361] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 361] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 361] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[364]}, 88) = 364 [pid 361] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 361] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 364] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 364] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] <... futex resumed>) = 1 [pid 364] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 364] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 364] <... futex resumed>) = 1 [pid 364] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] exit_group(0 [pid 364] <... futex resumed>) = ? [pid 361] <... exit_group resumed>) = ? [pid 364] +++ exited with 0 +++ [pid 362] <... sendfile resumed>) = ? [pid 362] +++ exited with 0 +++ [pid 361] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=361, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./15/binderfs") = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./15/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 365 attached [pid 365] set_robust_list(0x555556b826a0, 24) = 0 [pid 365] chdir("./16") = 0 [pid 365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 365] setpgid(0, 0) = 0 [pid 291] <... clone resumed>, child_tidptr=0x555556b82690) = 365 [pid 365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 365] write(3, "1000", 4) = 4 [pid 365] close(3) = 0 [pid 365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 365] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 365] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 365] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 366 attached => {parent_tid=[366]}, 88) = 366 [pid 366] set_robust_list(0x7f96301a99a0, 24 [pid 365] rt_sigprocmask(SIG_SETMASK, [], [pid 366] <... set_robust_list resumed>) = 0 [pid 365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 366] rt_sigprocmask(SIG_SETMASK, [], [pid 365] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 366] memfd_create("syzkaller", 0) = 3 [pid 366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 366] munmap(0x7f9627d89000, 262144) = 0 [pid 366] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 366] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 366] close(3) = 0 [pid 366] mkdir("./file0", 0777) = 0 [pid 366] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 366] chdir("./file0") = 0 [pid 366] ioctl(4, LOOP_CLR_FD) = 0 [pid 366] close(4) = 0 [pid 366] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 0 [pid 366] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 366] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 1 [pid 366] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 366] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 0 [pid 366] creat("./bus", 000) = 6 [pid 366] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 366] <... futex resumed>) = 1 [pid 365] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 366] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 1 [pid 366] open("./bus", O_RDONLY) = 7 [pid 366] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 1 [ 24.989467][ T366] loop0: detected capacity change from 0 to 512 [ 24.998482][ T366] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 25.012153][ T366] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.021870][ T366] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 366] sendfile(6, 7, NULL, 140737974943952 [pid 365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 365] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 365] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 365] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[368]}, 88) = 368 [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 368] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 368] <... futex resumed>) = 1 [pid 368] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 368] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 368] <... futex resumed>) = 1 [pid 368] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] exit_group(0 [pid 368] <... futex resumed>) = ? [pid 365] <... exit_group resumed>) = ? [pid 368] +++ exited with 0 +++ [pid 366] <... sendfile resumed>) = ? [pid 366] +++ exited with 0 +++ [pid 365] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=365, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./16/binderfs") = 0 umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./16/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 369 ./strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x555556b826a0, 24) = 0 [pid 369] chdir("./17") = 0 [pid 369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 369] setpgid(0, 0) = 0 [pid 369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 369] write(3, "1000", 4) = 4 [pid 369] close(3) = 0 [pid 369] symlink("/dev/binderfs", "./binderfs") = 0 [pid 369] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 369] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 369] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 369] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[370]}, 88) = 370 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] memfd_create("syzkaller", 0) = 3 [pid 370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 370] munmap(0x7f9627d89000, 262144) = 0 [pid 370] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 370] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 370] close(3) = 0 [pid 370] mkdir("./file0", 0777) = 0 [pid 370] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 370] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 370] chdir("./file0") = 0 [pid 370] ioctl(4, LOOP_CLR_FD) = 0 [pid 370] close(4) = 0 [pid 370] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 1 [pid 370] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 370] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] <... futex resumed>) = 0 [pid 370] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 369] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 0 [pid 370] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 370] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 1 [pid 370] creat("./bus", 000) = 6 [pid 370] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 369] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 1 [pid 370] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 370] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] <... futex resumed>) = 0 [pid 370] open("./bus", O_RDONLY [pid 369] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... open resumed>) = 7 [pid 369] <... futex resumed>) = 0 [pid 370] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 370] <... futex resumed>) = 0 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] sendfile(6, 7, NULL, 140737974943952 [pid 369] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 25.283341][ T370] loop0: detected capacity change from 0 to 512 [ 25.292209][ T370] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 25.306356][ T370] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.316292][ T370] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 369] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 369] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 369] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 369] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 372 attached [pid 372] set_robust_list(0x7f9627dc89a0, 24 [pid 369] <... clone3 resumed> => {parent_tid=[372]}, 88) = 372 [pid 372] <... set_robust_list resumed>) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], [pid 372] rt_sigprocmask(SIG_SETMASK, [], [pid 369] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 369] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 369] <... futex resumed>) = 0 [pid 372] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 369] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... mmap resumed>) = 0x20000000 [pid 372] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] <... futex resumed>) = 0 [pid 372] sendmsg(-1, 0x20000000, 0 [pid 369] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 369] <... futex resumed>) = 0 [pid 372] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = 0 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 369] exit_group(0) = ? [pid 372] <... futex resumed>) = ? [pid 372] +++ exited with 0 +++ [pid 370] <... sendfile resumed>) = ? [pid 370] +++ exited with 0 +++ [pid 369] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=369, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./17/binderfs") = 0 umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./17/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 373 ./strace-static-x86_64: Process 373 attached [pid 373] set_robust_list(0x555556b826a0, 24) = 0 [pid 373] chdir("./18") = 0 [pid 373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 373] setpgid(0, 0) = 0 [pid 373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 373] write(3, "1000", 4) = 4 [pid 373] close(3) = 0 [pid 373] symlink("/dev/binderfs", "./binderfs") = 0 [pid 373] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 373] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 373] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 373] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 373] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 374 attached [pid 374] set_robust_list(0x7f96301a99a0, 24 [pid 373] <... clone3 resumed> => {parent_tid=[374]}, 88) = 374 [pid 374] <... set_robust_list resumed>) = 0 [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 373] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 374] <... futex resumed>) = 0 [pid 374] memfd_create("syzkaller", 0) = 3 [pid 374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 374] munmap(0x7f9627d89000, 262144) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 374] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 374] close(3) = 0 [pid 374] mkdir("./file0", 0777) = 0 [pid 374] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 374] chdir("./file0") = 0 [pid 374] ioctl(4, LOOP_CLR_FD) = 0 [pid 374] close(4) = 0 [pid 374] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 374] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 374] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] creat("./bus", 000) = 6 [pid 374] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 374] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [pid 374] open("./bus", O_RDONLY) = 7 [pid 374] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... futex resumed>) = 1 [ 25.587649][ T374] loop0: detected capacity change from 0 to 512 [ 25.596347][ T374] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 25.609377][ T374] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.618998][ T374] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 374] sendfile(6, 7, NULL, 140737974943952 [pid 373] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 373] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 373] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 373] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 373] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 373] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 377 attached => {parent_tid=[377]}, 88) = 377 [pid 373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 0 [pid 377] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 377] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 377] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 377] <... futex resumed>) = 1 [pid 377] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] exit_group(0 [pid 377] <... futex resumed>) = ? [pid 373] <... exit_group resumed>) = ? [pid 377] +++ exited with 0 +++ [pid 374] <... sendfile resumed>) = ? [pid 374] +++ exited with 0 +++ [pid 373] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=373, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./18/binderfs") = 0 umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./18/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 378 ./strace-static-x86_64: Process 378 attached [pid 378] set_robust_list(0x555556b826a0, 24) = 0 [pid 378] chdir("./19") = 0 [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 378] setpgid(0, 0) = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 [pid 378] symlink("/dev/binderfs", "./binderfs") = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 378] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 378] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 378] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 378] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[379]}, 88) = 379 [pid 378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 379 attached [pid 379] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 379] memfd_create("syzkaller", 0) = 3 [pid 379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 379] munmap(0x7f9627d89000, 262144) = 0 [pid 379] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 379] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 379] close(3) = 0 [pid 379] mkdir("./file0", 0777) = 0 [pid 379] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 379] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 379] chdir("./file0") = 0 [pid 379] ioctl(4, LOOP_CLR_FD) = 0 [pid 379] close(4) = 0 [pid 379] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 379] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 379] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] creat("./bus", 000) = 6 [pid 379] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 379] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] open("./bus", O_RDONLY) = 7 [pid 379] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [ 25.890396][ T379] loop0: detected capacity change from 0 to 512 [ 25.898675][ T379] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 25.912923][ T379] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.922632][ T379] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 379] sendfile(6, 7, NULL, 140737974943952 [pid 378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 378] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 378] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 378] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 378] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 378] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 381 attached => {parent_tid=[381]}, 88) = 381 [pid 378] rt_sigprocmask(SIG_SETMASK, [], [pid 381] set_robust_list(0x7f9627dc89a0, 24 [pid 378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 381] <... set_robust_list resumed>) = 0 [pid 378] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] rt_sigprocmask(SIG_SETMASK, [], [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 381] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 381] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 1 [pid 378] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 381] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 1 [pid 381] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] exit_group(0) = ? [pid 381] <... futex resumed>) = ? [pid 379] <... sendfile resumed>) = ? [pid 379] +++ exited with 0 +++ [pid 381] +++ exited with 0 +++ [pid 378] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=378, si_uid=0, si_status=0, si_utime=0, si_stime=20} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./19/binderfs") = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./19/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 382 ./strace-static-x86_64: Process 382 attached [pid 382] set_robust_list(0x555556b826a0, 24) = 0 [pid 382] chdir("./20") = 0 [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 382] setpgid(0, 0) = 0 [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 382] write(3, "1000", 4) = 4 [pid 382] close(3) = 0 [pid 382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 382] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 382] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 382] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[383]}, 88) = 383 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 383 attached [pid 383] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 383] memfd_create("syzkaller", 0) = 3 [pid 383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 383] munmap(0x7f9627d89000, 262144) = 0 [pid 383] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 383] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 383] close(3) = 0 [pid 383] mkdir("./file0", 0777) = 0 [pid 383] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 383] chdir("./file0") = 0 [pid 383] ioctl(4, LOOP_CLR_FD) = 0 [pid 383] close(4) = 0 [pid 383] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 383] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 383] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 0 [pid 383] creat("./bus", 000) = 6 [pid 383] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 383] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] open("./bus", O_RDONLY) = 7 [pid 383] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [ 26.205864][ T383] loop0: detected capacity change from 0 to 512 [ 26.215192][ T383] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 26.228504][ T383] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.238011][ T383] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 383] sendfile(6, 7, NULL, 140737974943952 [pid 382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 382] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 382] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 382] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[385]}, 88) = 385 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 385 attached [pid 385] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 385] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 385] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 1 [pid 385] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 385] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] <... futex resumed>) = 0 [pid 385] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] exit_group(0 [pid 385] <... futex resumed>) = ? [pid 382] <... exit_group resumed>) = ? [pid 385] +++ exited with 0 +++ [pid 383] <... sendfile resumed>) = ? [pid 383] +++ exited with 0 +++ [pid 382] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=382, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./20/binderfs") = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./20/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 386 ./strace-static-x86_64: Process 386 attached [pid 386] set_robust_list(0x555556b826a0, 24) = 0 [pid 386] chdir("./21") = 0 [pid 386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 386] setpgid(0, 0) = 0 [pid 386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 386] write(3, "1000", 4) = 4 [pid 386] close(3) = 0 [pid 386] symlink("/dev/binderfs", "./binderfs") = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 386] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 386] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 386] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[387]}, 88) = 387 [pid 386] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 387 attached NULL, 8) = 0 [pid 387] set_robust_list(0x7f96301a99a0, 24 [pid 386] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 387] <... set_robust_list resumed>) = 0 [pid 387] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 387] memfd_create("syzkaller", 0) = 3 [pid 387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 387] munmap(0x7f9627d89000, 262144) = 0 [pid 387] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 387] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 387] close(3) = 0 [pid 387] mkdir("./file0", 0777) = 0 [pid 387] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 387] chdir("./file0") = 0 [pid 387] ioctl(4, LOOP_CLR_FD) = 0 [pid 387] close(4) = 0 [pid 387] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 387] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 387] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] creat("./bus", 000) = 6 [pid 387] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 387] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] open("./bus", O_RDONLY) = 7 [pid 387] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 26.541256][ T387] loop0: detected capacity change from 0 to 512 [ 26.549329][ T387] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 26.564147][ T387] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.574825][ T387] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 387] sendfile(6, 7, NULL, 140737974943952 [pid 386] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 386] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 386] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 386] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 386] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 390 attached [pid 390] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 390] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] <... clone3 resumed> => {parent_tid=[390]}, 88) = 390 [pid 386] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 386] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 0 [pid 390] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 390] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 390] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 390] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] exit_group(0 [pid 390] <... futex resumed>) = ? [pid 386] <... exit_group resumed>) = ? [pid 390] +++ exited with 0 +++ [pid 387] <... sendfile resumed>) = ? [pid 387] +++ exited with 0 +++ [pid 386] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=386, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./21/binderfs") = 0 umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./21/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 391 ./strace-static-x86_64: Process 391 attached [pid 391] set_robust_list(0x555556b826a0, 24) = 0 [pid 391] chdir("./22") = 0 [pid 391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 391] setpgid(0, 0) = 0 [pid 391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 391] write(3, "1000", 4) = 4 [pid 391] close(3) = 0 [pid 391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 391] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 391] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 391] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 391] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 392 attached => {parent_tid=[392]}, 88) = 392 [pid 392] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 392] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 392] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 391] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 392] memfd_create("syzkaller", 0 [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 392] <... memfd_create resumed>) = 3 [pid 392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 392] munmap(0x7f9627d89000, 262144) = 0 [pid 392] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 392] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 392] close(3) = 0 [pid 392] mkdir("./file0", 0777) = 0 [pid 392] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 392] chdir("./file0") = 0 [pid 392] ioctl(4, LOOP_CLR_FD) = 0 [pid 392] close(4) = 0 [pid 392] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] <... futex resumed>) = 0 [pid 392] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 392] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] <... futex resumed>) = 1 [pid 392] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 392] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] <... futex resumed>) = 0 [pid 392] creat("./bus", 000) = 6 [pid 392] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] <... futex resumed>) = 1 [pid 392] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 392] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] <... futex resumed>) = 1 [pid 392] open("./bus", O_RDONLY) = 7 [pid 392] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] <... futex resumed>) = 1 [ 26.892981][ T392] loop0: detected capacity change from 0 to 512 [ 26.901163][ T392] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 26.914926][ T392] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.924727][ T392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 392] sendfile(6, 7, NULL, 140737974943952 [pid 391] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 391] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 391] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 391] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 391] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[394]}, 88) = 394 [pid 391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 391] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 394 attached [pid 394] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 394] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 394] <... futex resumed>) = 1 [pid 394] sendmsg(-1, 0x20000000, 0 [pid 391] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 394] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 391] exit_group(0 [pid 394] <... futex resumed>) = ? [pid 391] <... exit_group resumed>) = ? [pid 392] <... sendfile resumed>) = ? [pid 394] +++ exited with 0 +++ [pid 392] +++ exited with 0 +++ [pid 391] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=391, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./22/binderfs") = 0 umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./22/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 395 ./strace-static-x86_64: Process 395 attached [pid 395] set_robust_list(0x555556b826a0, 24) = 0 [pid 395] chdir("./23") = 0 [pid 395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 395] setpgid(0, 0) = 0 [pid 395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 395] write(3, "1000", 4) = 4 [pid 395] close(3) = 0 [pid 395] symlink("/dev/binderfs", "./binderfs") = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 395] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 395] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 395] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[396]}, 88) = 396 [pid 395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 395] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 396 attached [pid 396] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 396] memfd_create("syzkaller", 0) = 3 [pid 396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 396] munmap(0x7f9627d89000, 262144) = 0 [pid 396] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 396] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 396] close(3) = 0 [pid 396] mkdir("./file0", 0777) = 0 [pid 396] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 396] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 396] chdir("./file0") = 0 [pid 396] ioctl(4, LOOP_CLR_FD) = 0 [pid 396] close(4) = 0 [pid 396] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 396] <... futex resumed>) = 1 [pid 396] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 396] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 396] <... futex resumed>) = 1 [pid 396] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 396] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 396] <... futex resumed>) = 1 [pid 396] creat("./bus", 000) = 6 [pid 396] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 396] <... futex resumed>) = 1 [pid 396] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 396] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 396] <... futex resumed>) = 1 [pid 396] open("./bus", O_RDONLY) = 7 [pid 396] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 396] <... futex resumed>) = 1 [ 27.208907][ T396] loop0: detected capacity change from 0 to 512 [ 27.218278][ T396] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 27.231534][ T396] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 27.241315][ T396] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 396] sendfile(6, 7, NULL, 140737974943952 [pid 395] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 395] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 395] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 395] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 395] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[398]}, 88) = 398 [pid 395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 395] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 398 attached [pid 398] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 398] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 398] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 395] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 395] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 398] <... futex resumed>) = 1 [pid 398] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 398] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 398] <... futex resumed>) = 1 [pid 398] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 395] exit_group(0) = ? [pid 398] <... futex resumed>) = ? [pid 398] +++ exited with 0 +++ [pid 396] <... sendfile resumed>) = ? [pid 396] +++ exited with 0 +++ [pid 395] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=395, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./23/binderfs") = 0 umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./23/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./23") = 0 mkdir("./24", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 399 ./strace-static-x86_64: Process 399 attached [pid 399] set_robust_list(0x555556b826a0, 24) = 0 [pid 399] chdir("./24") = 0 [pid 399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 399] setpgid(0, 0) = 0 [pid 399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 399] write(3, "1000", 4) = 4 [pid 399] close(3) = 0 [pid 399] symlink("/dev/binderfs", "./binderfs") = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 399] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 399] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 399] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[400]}, 88) = 400 [pid 399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 400 attached [pid 400] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 400] memfd_create("syzkaller", 0) = 3 [pid 400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 400] munmap(0x7f9627d89000, 262144) = 0 [pid 400] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 400] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 400] close(3) = 0 [pid 400] mkdir("./file0", 0777) = 0 [pid 400] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 400] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 400] chdir("./file0") = 0 [pid 400] ioctl(4, LOOP_CLR_FD) = 0 [pid 400] close(4) = 0 [pid 400] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 400] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 400] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] creat("./bus", 000) = 6 [pid 400] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 400] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] open("./bus", O_RDONLY) = 7 [pid 400] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [ 27.514195][ T400] loop0: detected capacity change from 0 to 512 [ 27.522096][ T400] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 27.535106][ T400] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 27.544876][ T400] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 400] sendfile(6, 7, NULL, 140737974943952 [pid 399] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 399] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 399] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 399] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 399] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[402]}, 88) = 402 ./strace-static-x86_64: Process 402 attached [pid 402] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... mmap resumed>) = 0x20000000 [pid 402] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... futex resumed>) = 1 [pid 402] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 402] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 402] <... futex resumed>) = 1 [pid 402] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] exit_group(0 [pid 402] <... futex resumed>) = ? [pid 399] <... exit_group resumed>) = ? [pid 402] +++ exited with 0 +++ [pid 400] <... sendfile resumed>) = ? [pid 400] +++ exited with 0 +++ [pid 399] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=399, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./24/binderfs") = 0 umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./24/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./24") = 0 mkdir("./25", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 404 ./strace-static-x86_64: Process 404 attached [pid 404] set_robust_list(0x555556b826a0, 24) = 0 [pid 404] chdir("./25") = 0 [pid 404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 404] setpgid(0, 0) = 0 [pid 404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 404] write(3, "1000", 4) = 4 [pid 404] close(3) = 0 [pid 404] symlink("/dev/binderfs", "./binderfs") = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 404] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 404] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 404] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[405]}, 88) = 405 ./strace-static-x86_64: Process 405 attached [pid 404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 404] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 405] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 405] memfd_create("syzkaller", 0) = 3 [pid 405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 405] munmap(0x7f9627d89000, 262144) = 0 [pid 405] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 405] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 405] close(3) = 0 [pid 405] mkdir("./file0", 0777) = 0 [pid 405] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 405] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 405] chdir("./file0") = 0 [pid 405] ioctl(4, LOOP_CLR_FD) = 0 [pid 405] close(4) = 0 [pid 405] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 405] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 405] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 405] creat("./bus", 000 [pid 404] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... creat resumed>) = 6 [pid 405] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 405] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] open("./bus", O_RDONLY) = 7 [pid 405] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [ 27.812539][ T405] loop0: detected capacity change from 0 to 512 [ 27.821508][ T405] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 27.834544][ T405] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 27.844256][ T405] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 405] sendfile(6, 7, NULL, 140737974943952 [pid 404] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 404] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 404] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 404] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 407 attached [pid 407] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 407] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] <... clone3 resumed> => {parent_tid=[407]}, 88) = 407 [pid 404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 404] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 407] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 404] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] <... mmap resumed>) = 0x20000000 [pid 407] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 404] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 407] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] <... futex resumed>) = 0 [pid 404] exit_group(0 [pid 407] <... futex resumed>) = ? [pid 404] <... exit_group resumed>) = ? [pid 407] +++ exited with 0 +++ [pid 405] <... sendfile resumed>) = ? [pid 405] +++ exited with 0 +++ [pid 404] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=404, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./25/binderfs") = 0 umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./25/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./25") = 0 mkdir("./26", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 408 ./strace-static-x86_64: Process 408 attached [pid 408] set_robust_list(0x555556b826a0, 24) = 0 [pid 408] chdir("./26") = 0 [pid 408] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 408] setpgid(0, 0) = 0 [pid 408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 408] write(3, "1000", 4) = 4 [pid 408] close(3) = 0 [pid 408] symlink("/dev/binderfs", "./binderfs") = 0 [pid 408] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 408] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 408] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 408] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 408] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 409 attached [pid 409] set_robust_list(0x7f96301a99a0, 24 [pid 408] <... clone3 resumed> => {parent_tid=[409]}, 88) = 409 [pid 409] <... set_robust_list resumed>) = 0 [pid 408] rt_sigprocmask(SIG_SETMASK, [], [pid 409] rt_sigprocmask(SIG_SETMASK, [], [pid 408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 408] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 409] memfd_create("syzkaller", 0) = 3 [pid 409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 409] munmap(0x7f9627d89000, 262144) = 0 [pid 409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 409] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 409] close(3) = 0 [pid 409] mkdir("./file0", 0777) = 0 [pid 409] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 409] chdir("./file0") = 0 [pid 409] ioctl(4, LOOP_CLR_FD) = 0 [pid 409] close(4) = 0 [pid 409] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 409] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 409] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] creat("./bus", 000) = 6 [pid 409] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 409] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 409] open("./bus", O_RDONLY [pid 408] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... open resumed>) = 7 [pid 409] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 409] sendfile(6, 7, NULL, 140737974943952 [pid 408] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 28.125068][ T409] loop0: detected capacity change from 0 to 512 [ 28.133116][ T409] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 28.146624][ T409] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 28.157488][ T409] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 408] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 408] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 408] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 408] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 408] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 411 attached => {parent_tid=[411]}, 88) = 411 [pid 411] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 408] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 408] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 408] <... futex resumed>) = 0 [pid 411] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 408] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... mmap resumed>) = 0x20000000 [pid 411] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 411] <... futex resumed>) = 1 [pid 408] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 411] sendmsg(-1, 0x20000000, 0 [pid 408] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 411] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 411] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 408] exit_group(0 [pid 411] <... futex resumed>) = ? [pid 408] <... exit_group resumed>) = ? [pid 411] +++ exited with 0 +++ [pid 409] <... sendfile resumed>) = ? [pid 409] +++ exited with 0 +++ [pid 408] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=408, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./26/binderfs") = 0 umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./26/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./26") = 0 mkdir("./27", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 412 ./strace-static-x86_64: Process 412 attached [pid 412] set_robust_list(0x555556b826a0, 24) = 0 [pid 412] chdir("./27") = 0 [pid 412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 412] setpgid(0, 0) = 0 [pid 412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 412] write(3, "1000", 4) = 4 [pid 412] close(3) = 0 [pid 412] symlink("/dev/binderfs", "./binderfs") = 0 [pid 412] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 412] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 412] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[413]}, 88) = 413 [pid 412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 412] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 413 attached [pid 413] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 413] memfd_create("syzkaller", 0) = 3 [pid 413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 413] munmap(0x7f9627d89000, 262144) = 0 [pid 413] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 413] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 413] close(3) = 0 [pid 413] mkdir("./file0", 0777) = 0 [pid 413] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 413] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 413] chdir("./file0") = 0 [pid 413] ioctl(4, LOOP_CLR_FD) = 0 [pid 413] close(4) = 0 [pid 413] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 413] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 0 [pid 413] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 413] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 413] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] creat("./bus", 000) = 6 [pid 413] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 413] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] open("./bus", O_RDONLY) = 7 [pid 413] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [ 28.412174][ T413] loop0: detected capacity change from 0 to 512 [ 28.420083][ T413] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 28.432959][ T413] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 28.442545][ T413] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 413] sendfile(6, 7, NULL, 140737974943952 [pid 412] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 412] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 412] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 415 attached => {parent_tid=[415]}, 88) = 415 [pid 412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 412] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 415] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 415] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 415] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 415] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 415] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] exit_group(0 [pid 415] <... futex resumed>) = ? [pid 412] <... exit_group resumed>) = ? [pid 415] +++ exited with 0 +++ [pid 413] <... sendfile resumed>) = ? [pid 413] +++ exited with 0 +++ [pid 412] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=412, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./27/binderfs") = 0 umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./27/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./27") = 0 mkdir("./28", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 417 ./strace-static-x86_64: Process 417 attached [pid 417] set_robust_list(0x555556b826a0, 24) = 0 [pid 417] chdir("./28") = 0 [pid 417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 417] setpgid(0, 0) = 0 [pid 417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 417] write(3, "1000", 4) = 4 [pid 417] close(3) = 0 [pid 417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 417] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 417] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 417] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 417] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 418 attached => {parent_tid=[418]}, 88) = 418 [pid 417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 417] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 418] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 418] memfd_create("syzkaller", 0) = 3 [pid 418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 418] munmap(0x7f9627d89000, 262144) = 0 [pid 418] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 418] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 418] close(3) = 0 [pid 418] mkdir("./file0", 0777) = 0 [pid 418] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 418] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 418] chdir("./file0") = 0 [pid 418] ioctl(4, LOOP_CLR_FD) = 0 [pid 418] close(4) = 0 [pid 418] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 0 [pid 418] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 418] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 418] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 418] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 418] creat("./bus", 000 [pid 417] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... creat resumed>) = 6 [pid 418] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 418] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] open("./bus", O_RDONLY) = 7 [pid 418] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 28.721528][ T418] loop0: detected capacity change from 0 to 512 [ 28.729808][ T418] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 28.742741][ T418] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 28.752809][ T418] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 418] sendfile(6, 7, NULL, 140737974943952 [pid 417] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 417] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 417] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 417] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 417] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[420]}, 88) = 420 [pid 417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 417] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 420 attached [pid 420] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 420] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 420] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 420] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 420] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 420] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] exit_group(0 [pid 420] <... futex resumed>) = ? [pid 417] <... exit_group resumed>) = ? [pid 420] +++ exited with 0 +++ [pid 418] <... sendfile resumed>) = ? [pid 418] +++ exited with 0 +++ [pid 417] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=417, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./28/binderfs") = 0 umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./28/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./28") = 0 mkdir("./29", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 421 ./strace-static-x86_64: Process 421 attached [pid 421] set_robust_list(0x555556b826a0, 24) = 0 [pid 421] chdir("./29") = 0 [pid 421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 421] setpgid(0, 0) = 0 [pid 421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 421] write(3, "1000", 4) = 4 [pid 421] close(3) = 0 [pid 421] symlink("/dev/binderfs", "./binderfs") = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 421] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 421] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 421] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 421] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[422]}, 88) = 422 [pid 421] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 421] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 422 attached [pid 422] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 422] memfd_create("syzkaller", 0) = 3 [pid 422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 422] munmap(0x7f9627d89000, 262144) = 0 [pid 422] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 422] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 422] close(3) = 0 [pid 422] mkdir("./file0", 0777) = 0 [pid 422] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 422] chdir("./file0") = 0 [pid 422] ioctl(4, LOOP_CLR_FD) = 0 [pid 422] close(4) = 0 [pid 422] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 1 [pid 422] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 422] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 1 [pid 422] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 422] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 1 [pid 422] creat("./bus", 000) = 6 [pid 422] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 1 [pid 422] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 422] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 1 [pid 422] open("./bus", O_RDONLY) = 7 [pid 422] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 1 [ 29.051191][ T422] loop0: detected capacity change from 0 to 512 [ 29.059371][ T422] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 29.073141][ T422] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 29.082908][ T422] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 422] sendfile(6, 7, NULL, 140737974943952 [pid 421] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 421] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 421] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 421] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 421] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[424]}, 88) = 424 [pid 421] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 421] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 424 attached [pid 424] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 424] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 424] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = 1 [pid 424] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 424] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 424] <... futex resumed>) = 1 [pid 424] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 421] exit_group(0 [pid 424] <... futex resumed>) = ? [pid 421] <... exit_group resumed>) = ? [pid 422] <... sendfile resumed>) = ? [pid 422] +++ exited with 0 +++ [pid 424] +++ exited with 0 +++ [pid 421] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=421, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./29/binderfs") = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./29/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./29") = 0 mkdir("./30", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 425 ./strace-static-x86_64: Process 425 attached [pid 425] set_robust_list(0x555556b826a0, 24) = 0 [pid 425] chdir("./30") = 0 [pid 425] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 425] setpgid(0, 0) = 0 [pid 425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 425] write(3, "1000", 4) = 4 [pid 425] close(3) = 0 [pid 425] symlink("/dev/binderfs", "./binderfs") = 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 425] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 425] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 425] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 426 attached => {parent_tid=[426]}, 88) = 426 [pid 426] set_robust_list(0x7f96301a99a0, 24 [pid 425] rt_sigprocmask(SIG_SETMASK, [], [pid 426] <... set_robust_list resumed>) = 0 [pid 426] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 426] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 425] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 426] memfd_create("syzkaller", 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 426] <... memfd_create resumed>) = 3 [pid 426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 426] munmap(0x7f9627d89000, 262144) = 0 [pid 426] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 426] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 426] close(3) = 0 [pid 426] mkdir("./file0", 0777) = 0 [pid 426] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 426] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 426] chdir("./file0") = 0 [pid 426] ioctl(4, LOOP_CLR_FD) = 0 [pid 426] close(4) = 0 [pid 426] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] <... futex resumed>) = 1 [pid 426] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 426] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] <... futex resumed>) = 1 [pid 426] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 426] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] <... futex resumed>) = 1 [pid 426] creat("./bus", 000) = 6 [pid 426] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] <... futex resumed>) = 1 [pid 426] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 426] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] <... futex resumed>) = 1 [pid 426] open("./bus", O_RDONLY) = 7 [pid 426] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 425] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 426] <... futex resumed>) = 1 [ 29.391820][ T426] loop0: detected capacity change from 0 to 512 [ 29.400074][ T426] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 29.413315][ T426] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 29.423012][ T426] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 426] sendfile(6, 7, NULL, 140737974943952 [pid 425] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 425] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 425] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 425] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 425] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 429 attached => {parent_tid=[429]}, 88) = 429 [pid 429] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 429] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 425] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 429] <... futex resumed>) = 0 [pid 429] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 429] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 425] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 429] <... futex resumed>) = 0 [pid 425] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 429] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 429] <... futex resumed>) = 1 [pid 429] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] exit_group(0) = ? [pid 429] <... futex resumed>) = ? [pid 429] +++ exited with 0 +++ [pid 426] <... sendfile resumed>) = ? [pid 426] +++ exited with 0 +++ [pid 425] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=425, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./30/binderfs") = 0 umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./30/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./30") = 0 mkdir("./31", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 431 ./strace-static-x86_64: Process 431 attached [pid 431] set_robust_list(0x555556b826a0, 24) = 0 [pid 431] chdir("./31") = 0 [pid 431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 431] setpgid(0, 0) = 0 [pid 431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 431] write(3, "1000", 4) = 4 [pid 431] close(3) = 0 [pid 431] symlink("/dev/binderfs", "./binderfs") = 0 [pid 431] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 431] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 431] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 431] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 432 attached => {parent_tid=[432]}, 88) = 432 [pid 431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 432] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 432] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 432] memfd_create("syzkaller", 0) = 3 [pid 432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 432] munmap(0x7f9627d89000, 262144) = 0 [pid 432] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 432] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 432] close(3) = 0 [pid 432] mkdir("./file0", 0777) = 0 [pid 432] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 432] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 432] chdir("./file0") = 0 [pid 432] ioctl(4, LOOP_CLR_FD) = 0 [pid 432] close(4) = 0 [pid 432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] creat("./bus", 000) = 6 [pid 432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 1 [pid 432] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 431] <... futex resumed>) = 0 [pid 432] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] <... futex resumed>) = 0 [pid 432] open("./bus", O_RDONLY [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... open resumed>) = 7 [pid 432] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... futex resumed>) = 0 [ 29.710213][ T432] loop0: detected capacity change from 0 to 512 [ 29.719118][ T432] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 29.732090][ T432] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 29.741879][ T432] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 432] sendfile(6, 7, NULL, 140737974943952 [pid 431] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 431] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 431] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 431] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 431] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[434]}, 88) = 434 [pid 431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 431] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 434 attached [pid 434] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 434] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 434] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 431] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 1 [pid 434] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 434] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 434] <... futex resumed>) = 1 [pid 434] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 431] exit_group(0 [pid 434] <... futex resumed>) = ? [pid 431] <... exit_group resumed>) = ? [pid 434] +++ exited with 0 +++ [pid 432] <... sendfile resumed>) = ? [pid 432] +++ exited with 0 +++ [pid 431] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=431, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./31/binderfs") = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./31/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./31") = 0 mkdir("./32", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 435 ./strace-static-x86_64: Process 435 attached [pid 435] set_robust_list(0x555556b826a0, 24) = 0 [pid 435] chdir("./32") = 0 [pid 435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 435] setpgid(0, 0) = 0 [pid 435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 435] write(3, "1000", 4) = 4 [pid 435] close(3) = 0 [pid 435] symlink("/dev/binderfs", "./binderfs") = 0 [pid 435] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 435] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 435] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 435] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 435] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 436 attached => {parent_tid=[436]}, 88) = 436 [pid 435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 435] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 436] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 436] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 436] memfd_create("syzkaller", 0) = 3 [pid 436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 436] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 436] munmap(0x7f9627d89000, 262144) = 0 [pid 436] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 436] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 436] close(3) = 0 [pid 436] mkdir("./file0", 0777) = 0 [pid 436] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 436] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 436] chdir("./file0") = 0 [pid 436] ioctl(4, LOOP_CLR_FD) = 0 [pid 436] close(4) = 0 [pid 436] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 0 [pid 436] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 436] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 1 [pid 436] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 436] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 1 [pid 436] creat("./bus", 000) = 6 [pid 436] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 1 [pid 436] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 436] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 1 [pid 436] open("./bus", O_RDONLY) = 7 [pid 436] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 1 [ 30.013112][ T436] loop0: detected capacity change from 0 to 512 [ 30.021424][ T436] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 30.034306][ T436] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 30.043939][ T436] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 436] sendfile(6, 7, NULL, 140737974943952 [pid 435] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 435] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 435] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 435] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 435] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 438 attached [pid 438] set_robust_list(0x7f9627dc89a0, 24 [pid 435] <... clone3 resumed> => {parent_tid=[438]}, 88) = 438 [pid 435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 435] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] <... set_robust_list resumed>) = 0 [pid 435] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 438] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... futex resumed>) = 1 [pid 438] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 438] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 438] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] exit_group(0) = ? [pid 438] <... futex resumed>) = ? [pid 438] +++ exited with 0 +++ [pid 436] <... sendfile resumed>) = ? [pid 436] +++ exited with 0 +++ [pid 435] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=435, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./32/binderfs") = 0 umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./32/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./32") = 0 mkdir("./33", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 439 ./strace-static-x86_64: Process 439 attached [pid 439] set_robust_list(0x555556b826a0, 24) = 0 [pid 439] chdir("./33") = 0 [pid 439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 439] setpgid(0, 0) = 0 [pid 439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 439] write(3, "1000", 4) = 4 [pid 439] close(3) = 0 [pid 439] symlink("/dev/binderfs", "./binderfs") = 0 [pid 439] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 439] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 439] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 439] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[440]}, 88) = 440 [pid 439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 440 attached [pid 440] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 440] memfd_create("syzkaller", 0) = 3 [pid 440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 440] munmap(0x7f9627d89000, 262144) = 0 [pid 440] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 440] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 440] close(3) = 0 [pid 440] mkdir("./file0", 0777) = 0 [ 30.304818][ T440] loop0: detected capacity change from 0 to 512 [ 30.323510][ T440] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 30.336504][ T440] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 440] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 440] chdir("./file0") = 0 [pid 440] ioctl(4, LOOP_CLR_FD) = 0 [pid 440] close(4) = 0 [pid 440] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... futex resumed>) = 1 [pid 440] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 440] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... futex resumed>) = 1 [pid 440] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 440] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... futex resumed>) = 1 [pid 440] creat("./bus", 000) = 6 [pid 440] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 440] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... futex resumed>) = 0 [pid 440] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 440] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] open("./bus", O_RDONLY) = 7 [pid 440] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] sendfile(6, 7, NULL, 140737974943952 [pid 439] <... futex resumed>) = 0 [ 30.346158][ T440] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 439] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 439] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 439] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 439] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[442]}, 88) = 442 [pid 439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 442 attached [pid 442] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 442] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 442] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 442] <... futex resumed>) = 1 [pid 442] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 442] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 442] <... futex resumed>) = 1 [pid 442] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] exit_group(0 [pid 442] <... futex resumed>) = ? [pid 439] <... exit_group resumed>) = ? [pid 440] <... sendfile resumed>) = ? [pid 440] +++ exited with 0 +++ [pid 442] +++ exited with 0 +++ [pid 439] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=439, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./33/binderfs") = 0 umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./33/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./33") = 0 mkdir("./34", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 443 ./strace-static-x86_64: Process 443 attached [pid 443] set_robust_list(0x555556b826a0, 24) = 0 [pid 443] chdir("./34") = 0 [pid 443] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 443] setpgid(0, 0) = 0 [pid 443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 443] write(3, "1000", 4) = 4 [pid 443] close(3) = 0 [pid 443] symlink("/dev/binderfs", "./binderfs") = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 443] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 443] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[444]}, 88) = 444 [pid 443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 443] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 444 attached [pid 444] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 444] memfd_create("syzkaller", 0) = 3 [pid 444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 444] munmap(0x7f9627d89000, 262144) = 0 [pid 444] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 444] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 444] close(3) = 0 [pid 444] mkdir("./file0", 0777) = 0 [pid 444] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 444] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 444] chdir("./file0") = 0 [pid 444] ioctl(4, LOOP_CLR_FD) = 0 [pid 444] close(4) = 0 [pid 444] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... futex resumed>) = 1 [pid 444] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 444] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... futex resumed>) = 1 [pid 444] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 444] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... futex resumed>) = 1 [pid 444] creat("./bus", 000) = 6 [pid 444] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... futex resumed>) = 1 [pid 444] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 444] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... futex resumed>) = 1 [pid 444] open("./bus", O_RDONLY) = 7 [pid 444] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... futex resumed>) = 1 [ 30.582129][ T444] loop0: detected capacity change from 0 to 512 [ 30.591099][ T444] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 30.604298][ T444] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 30.614181][ T444] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 444] sendfile(6, 7, NULL, 140737974943952 [pid 443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 443] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 443] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 443] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 447 attached => {parent_tid=[447]}, 88) = 447 [pid 443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 443] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 447] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 447] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 447] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 447] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 443] <... futex resumed>) = 0 [pid 447] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 443] exit_group(0 [pid 447] <... futex resumed>) = ? [pid 443] <... exit_group resumed>) = ? [pid 447] +++ exited with 0 +++ [pid 444] <... sendfile resumed>) = ? [pid 444] +++ exited with 0 +++ [pid 443] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=443, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./34/binderfs") = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./34/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./34") = 0 mkdir("./35", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 448 ./strace-static-x86_64: Process 448 attached [pid 448] set_robust_list(0x555556b826a0, 24) = 0 [pid 448] chdir("./35") = 0 [pid 448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 448] setpgid(0, 0) = 0 [pid 448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 448] write(3, "1000", 4) = 4 [pid 448] close(3) = 0 [pid 448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 448] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 448] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 448] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[449]}, 88) = 449 [pid 448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 448] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 449 attached [pid 449] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 449] memfd_create("syzkaller", 0) = 3 [pid 449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 449] munmap(0x7f9627d89000, 262144) = 0 [pid 449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 449] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 449] close(3) = 0 [pid 449] mkdir("./file0", 0777) = 0 [pid 449] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 449] chdir("./file0") = 0 [pid 449] ioctl(4, LOOP_CLR_FD) = 0 [pid 449] close(4) = 0 [pid 449] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 449] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 449] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] creat("./bus", 000) = 6 [pid 449] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 449] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] open("./bus", O_RDONLY) = 7 [pid 449] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 449] <... futex resumed>) = 1 [pid 448] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] sendfile(6, 7, NULL, 140737974943952 [pid 448] <... futex resumed>) = 0 [ 30.849973][ T449] loop0: detected capacity change from 0 to 512 [ 30.860171][ T449] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 30.873895][ T449] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 30.883818][ T449] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 448] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 448] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 448] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 451 attached => {parent_tid=[451]}, 88) = 451 [pid 451] set_robust_list(0x7f9627dc89a0, 24 [pid 448] rt_sigprocmask(SIG_SETMASK, [], [pid 451] <... set_robust_list resumed>) = 0 [pid 451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 451] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 448] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... mmap resumed>) = 0x20000000 [pid 451] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 451] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 451] <... futex resumed>) = 1 [pid 451] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] exit_group(0 [pid 451] <... futex resumed>) = ? [pid 448] <... exit_group resumed>) = ? [pid 449] <... sendfile resumed>) = ? [pid 451] +++ exited with 0 +++ [pid 449] +++ exited with 0 +++ [pid 448] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=448, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./35/binderfs") = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./35/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./35") = 0 mkdir("./36", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 452 ./strace-static-x86_64: Process 452 attached [pid 452] set_robust_list(0x555556b826a0, 24) = 0 [pid 452] chdir("./36") = 0 [pid 452] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 452] setpgid(0, 0) = 0 [pid 452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 452] write(3, "1000", 4) = 4 [pid 452] close(3) = 0 [pid 452] symlink("/dev/binderfs", "./binderfs") = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 452] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 452] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 452] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 452] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[453]}, 88) = 453 [pid 452] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 452] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 453 attached [pid 453] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 453] memfd_create("syzkaller", 0) = 3 [pid 453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 453] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 453] munmap(0x7f9627d89000, 262144) = 0 [pid 453] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 453] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 453] close(3) = 0 [pid 453] mkdir("./file0", 0777) = 0 [pid 453] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 453] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 453] chdir("./file0") = 0 [pid 453] ioctl(4, LOOP_CLR_FD) = 0 [pid 453] close(4) = 0 [pid 453] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 453] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 453] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] creat("./bus", 000) = 6 [pid 453] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 453] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] open("./bus", O_RDONLY) = 7 [pid 453] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [ 31.169219][ T453] loop0: detected capacity change from 0 to 512 [ 31.178661][ T453] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 31.194288][ T453] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 31.204673][ T453] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 453] sendfile(6, 7, NULL, 140737974943952 [pid 452] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 452] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 452] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 452] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 452] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 452] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[455]}, 88) = 455 [pid 452] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 455 attached NULL, 8) = 0 [pid 455] set_robust_list(0x7f9627dc89a0, 24 [pid 452] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... set_robust_list resumed>) = 0 [pid 452] <... futex resumed>) = 0 [pid 455] rt_sigprocmask(SIG_SETMASK, [], [pid 452] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 455] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 455] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 455] <... futex resumed>) = 1 [pid 452] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 455] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 455] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 452] <... futex resumed>) = 0 [pid 455] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 452] exit_group(0) = ? [pid 455] <... futex resumed>) = ? [pid 455] +++ exited with 0 +++ [pid 453] <... sendfile resumed>) = ? [pid 453] +++ exited with 0 +++ [pid 452] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=452, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./36/binderfs") = 0 umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./36/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./36") = 0 mkdir("./37", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 456 ./strace-static-x86_64: Process 456 attached [pid 456] set_robust_list(0x555556b826a0, 24) = 0 [pid 456] chdir("./37") = 0 [pid 456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 456] setpgid(0, 0) = 0 [pid 456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 456] write(3, "1000", 4) = 4 [pid 456] close(3) = 0 [pid 456] symlink("/dev/binderfs", "./binderfs") = 0 [pid 456] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 456] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 456] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 456] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[457]}, 88) = 457 [pid 456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 456] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 457 attached [pid 457] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 457] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 457] memfd_create("syzkaller", 0) = 3 [pid 457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 457] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 457] munmap(0x7f9627d89000, 262144) = 0 [pid 457] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 457] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 457] close(3) = 0 [pid 457] mkdir("./file0", 0777) = 0 [pid 457] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 457] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 457] chdir("./file0") = 0 [pid 457] ioctl(4, LOOP_CLR_FD) = 0 [pid 457] close(4) = 0 [pid 457] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 457] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 457] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] creat("./bus", 000) = 6 [pid 457] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 457] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 457] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] open("./bus", O_RDONLY) = 7 [pid 457] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 457] sendfile(6, 7, NULL, 140737974943952 [pid 456] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 31.489189][ T457] loop0: detected capacity change from 0 to 512 [ 31.497702][ T457] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 31.510871][ T457] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 31.521479][ T457] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 456] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 456] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 456] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 456] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[460]}, 88) = 460 [pid 456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 460 attached [pid 460] set_robust_list(0x7f9627dc89a0, 24 [pid 456] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... set_robust_list resumed>) = 0 [pid 456] <... futex resumed>) = 0 [pid 460] rt_sigprocmask(SIG_SETMASK, [], [pid 456] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 460] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 460] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 456] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 460] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 460] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] exit_group(0 [pid 460] <... futex resumed>) = ? [pid 456] <... exit_group resumed>) = ? [pid 457] <... sendfile resumed>) = ? [pid 457] +++ exited with 0 +++ [pid 460] +++ exited with 0 +++ [pid 456] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=456, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./37/binderfs") = 0 umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./37/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./37") = 0 mkdir("./38", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 462 ./strace-static-x86_64: Process 462 attached [pid 462] set_robust_list(0x555556b826a0, 24) = 0 [pid 462] chdir("./38") = 0 [pid 462] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 462] setpgid(0, 0) = 0 [pid 462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 462] write(3, "1000", 4) = 4 [pid 462] close(3) = 0 [pid 462] symlink("/dev/binderfs", "./binderfs") = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 462] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 462] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 462] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[463]}, 88) = 463 [pid 462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 462] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 463 attached [pid 463] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 463] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 463] memfd_create("syzkaller", 0) = 3 [pid 463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 463] munmap(0x7f9627d89000, 262144) = 0 [pid 463] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 463] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 463] close(3) = 0 [pid 463] mkdir("./file0", 0777) = 0 [pid 463] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 463] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 463] chdir("./file0") = 0 [pid 463] ioctl(4, LOOP_CLR_FD) = 0 [pid 463] close(4) = 0 [pid 463] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [pid 463] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 463] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [pid 463] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 463] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [pid 463] creat("./bus", 000) = 6 [pid 463] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [pid 463] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 463] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [pid 463] open("./bus", O_RDONLY) = 7 [pid 463] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [ 31.807876][ T463] loop0: detected capacity change from 0 to 512 [ 31.815820][ T463] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 31.828775][ T463] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 31.838546][ T463] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 463] sendfile(6, 7, NULL, 140737974943952 [pid 462] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 462] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 462] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 462] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[465]}, 88) = 465 [pid 462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 462] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 465 attached [pid 465] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 465] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 465] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 1 [pid 465] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 465] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 465] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] exit_group(0 [pid 465] <... futex resumed>) = ? [pid 462] <... exit_group resumed>) = ? [pid 465] +++ exited with 0 +++ [pid 463] <... sendfile resumed>) = ? [pid 463] +++ exited with 0 +++ [pid 462] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=462, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./38/binderfs") = 0 umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./38/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./38") = 0 mkdir("./39", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 466 ./strace-static-x86_64: Process 466 attached [pid 466] set_robust_list(0x555556b826a0, 24) = 0 [pid 466] chdir("./39") = 0 [pid 466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 466] setpgid(0, 0) = 0 [pid 466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 466] write(3, "1000", 4) = 4 [pid 466] close(3) = 0 [pid 466] symlink("/dev/binderfs", "./binderfs") = 0 [pid 466] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 466] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 466] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 466] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 467 attached => {parent_tid=[467]}, 88) = 467 [pid 466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 467] set_robust_list(0x7f96301a99a0, 24 [pid 466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... set_robust_list resumed>) = 0 [pid 466] <... futex resumed>) = 0 [pid 467] rt_sigprocmask(SIG_SETMASK, [], [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 467] memfd_create("syzkaller", 0) = 3 [pid 467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 467] munmap(0x7f9627d89000, 262144) = 0 [pid 467] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 467] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 467] close(3) = 0 [pid 467] mkdir("./file0", 0777) = 0 [pid 467] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 467] chdir("./file0") = 0 [pid 467] ioctl(4, LOOP_CLR_FD) = 0 [pid 467] close(4) = 0 [pid 467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 467] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... open resumed>) = 4 [pid 467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 1 [pid 467] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... open resumed>) = 5 [pid 467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... futex resumed>) = 1 [pid 467] creat("./bus", 000) = 6 [pid 467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... futex resumed>) = 1 [pid 467] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] open("./bus", O_RDONLY) = 7 [pid 467] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 32.081128][ T467] loop0: detected capacity change from 0 to 512 [ 32.089426][ T467] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 32.102480][ T467] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 32.112241][ T467] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 467] sendfile(6, 7, NULL, 140737974943952 [pid 466] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 466] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 466] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 466] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 466] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 469 attached [pid 469] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 469] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 466] <... clone3 resumed> => {parent_tid=[469]}, 88) = 469 [pid 466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 466] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 469] <... futex resumed>) = 0 [pid 469] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 466] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... mmap resumed>) = 0x20000000 [pid 469] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 469] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 466] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 469] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 469] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 466] exit_group(0 [pid 469] <... futex resumed>) = ? [pid 466] <... exit_group resumed>) = ? [pid 469] +++ exited with 0 +++ [pid 467] <... sendfile resumed>) = ? [pid 467] +++ exited with 0 +++ [pid 466] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=466, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./39/binderfs") = 0 umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./39/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./39") = 0 mkdir("./40", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 470 ./strace-static-x86_64: Process 470 attached [pid 470] set_robust_list(0x555556b826a0, 24) = 0 [pid 470] chdir("./40") = 0 [pid 470] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 470] setpgid(0, 0) = 0 [pid 470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 470] write(3, "1000", 4) = 4 [pid 470] close(3) = 0 [pid 470] symlink("/dev/binderfs", "./binderfs") = 0 [pid 470] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 470] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 470] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 470] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[471]}, 88) = 471 ./strace-static-x86_64: Process 471 attached [pid 471] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 471] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 471] memfd_create("syzkaller", 0) = 3 [pid 471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 471] munmap(0x7f9627d89000, 262144) = 0 [pid 471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 471] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 471] close(3) = 0 [pid 471] mkdir("./file0", 0777) = 0 [pid 471] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 471] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 471] chdir("./file0") = 0 [pid 471] ioctl(4, LOOP_CLR_FD) = 0 [pid 471] close(4) = 0 [pid 471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 0 [pid 471] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] creat("./bus", 000) = 6 [pid 471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] open("./bus", O_RDONLY) = 7 [pid 471] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [ 32.413524][ T471] loop0: detected capacity change from 0 to 512 [ 32.421756][ T471] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 32.434785][ T471] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 32.444450][ T471] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 471] sendfile(6, 7, NULL, 140737974943952 [pid 470] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 470] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 470] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 470] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 470] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 473 attached => {parent_tid=[473]}, 88) = 473 [pid 470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 470] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 473] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 473] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 473] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 473] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] <... futex resumed>) = 0 [pid 473] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] exit_group(0 [pid 473] <... futex resumed>) = ? [pid 470] <... exit_group resumed>) = ? [pid 473] +++ exited with 0 +++ [pid 471] <... sendfile resumed>) = ? [pid 471] +++ exited with 0 +++ [pid 470] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=470, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./40/binderfs") = 0 umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./40/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./40") = 0 mkdir("./41", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 475 ./strace-static-x86_64: Process 475 attached [pid 475] set_robust_list(0x555556b826a0, 24) = 0 [pid 475] chdir("./41") = 0 [pid 475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 475] setpgid(0, 0) = 0 [pid 475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 475] write(3, "1000", 4) = 4 [pid 475] close(3) = 0 [pid 475] symlink("/dev/binderfs", "./binderfs") = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 475] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 475] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 475] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[476]}, 88) = 476 [pid 475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 475] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 476 attached ) = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 476] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 476] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 476] memfd_create("syzkaller", 0) = 3 [pid 476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 476] munmap(0x7f9627d89000, 262144) = 0 [pid 476] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 476] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 476] close(3) = 0 [pid 476] mkdir("./file0", 0777) = 0 [pid 476] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 476] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 476] chdir("./file0") = 0 [pid 476] ioctl(4, LOOP_CLR_FD) = 0 [pid 476] close(4) = 0 [pid 476] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] <... futex resumed>) = 1 [pid 476] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 476] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] <... futex resumed>) = 1 [pid 476] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 476] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] <... futex resumed>) = 1 [pid 476] creat("./bus", 000) = 6 [pid 476] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] <... futex resumed>) = 1 [pid 476] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 476] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] open("./bus", O_RDONLY) = 7 [pid 476] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 32.734436][ T476] loop0: detected capacity change from 0 to 512 [ 32.742422][ T476] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 32.756008][ T476] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 32.766310][ T476] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 476] sendfile(6, 7, NULL, 140737974943952 [pid 475] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 475] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 475] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 475] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 475] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 478 attached => {parent_tid=[478]}, 88) = 478 [pid 475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 475] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 478] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 478] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 478] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 478] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 478] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 475] exit_group(0) = ? [pid 476] <... sendfile resumed>) = ? [pid 476] +++ exited with 0 +++ [pid 478] <... futex resumed>) = ? [pid 478] +++ exited with 0 +++ [pid 475] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=475, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./41/binderfs") = 0 umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./41/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./41") = 0 mkdir("./42", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 479 ./strace-static-x86_64: Process 479 attached [pid 479] set_robust_list(0x555556b826a0, 24) = 0 [pid 479] chdir("./42") = 0 [pid 479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 479] setpgid(0, 0) = 0 [pid 479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 479] write(3, "1000", 4) = 4 [pid 479] close(3) = 0 [pid 479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 479] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 479] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[480]}, 88) = 480 [pid 479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 480 attached [pid 480] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 480] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 480] memfd_create("syzkaller", 0) = 3 [pid 480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 480] munmap(0x7f9627d89000, 262144) = 0 [pid 480] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 480] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 480] close(3) = 0 [pid 480] mkdir("./file0", 0777) = 0 [pid 480] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 480] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 480] chdir("./file0") = 0 [pid 480] ioctl(4, LOOP_CLR_FD) = 0 [pid 480] close(4) = 0 [pid 480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] creat("./bus", 000) = 6 [pid 480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] open("./bus", O_RDONLY) = 7 [pid 480] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [ 33.047262][ T480] loop0: detected capacity change from 0 to 512 [ 33.055530][ T480] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 33.068813][ T480] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.079213][ T480] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 480] sendfile(6, 7, NULL, 140737974943952 [pid 479] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 479] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 479] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 482 attached => {parent_tid=[482]}, 88) = 482 [pid 482] set_robust_list(0x7f9627dc89a0, 24 [pid 479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 479] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... set_robust_list resumed>) = 0 [pid 479] <... futex resumed>) = 0 [pid 482] rt_sigprocmask(SIG_SETMASK, [], [pid 479] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 482] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 482] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] sendmsg(-1, 0x20000000, 0 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 482] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 482] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 482] <... futex resumed>) = 1 [pid 482] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 479] exit_group(0) = ? [pid 482] <... futex resumed>) = ? [pid 480] <... sendfile resumed>) = ? [pid 480] +++ exited with 0 +++ [pid 482] +++ exited with 0 +++ [pid 479] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=479, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./42/binderfs") = 0 umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./42/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./42") = 0 mkdir("./43", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 483 ./strace-static-x86_64: Process 483 attached [pid 483] set_robust_list(0x555556b826a0, 24) = 0 [pid 483] chdir("./43") = 0 [pid 483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 483] setpgid(0, 0) = 0 [pid 483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 483] write(3, "1000", 4) = 4 [pid 483] close(3) = 0 [pid 483] symlink("/dev/binderfs", "./binderfs") = 0 [pid 483] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 483] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 483] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[484]}, 88) = 484 [pid 483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 484 attached [pid 484] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 484] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 484] memfd_create("syzkaller", 0) = 3 [pid 484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 484] munmap(0x7f9627d89000, 262144) = 0 [pid 484] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 484] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 484] close(3) = 0 [pid 484] mkdir("./file0", 0777) = 0 [pid 484] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 484] chdir("./file0") = 0 [pid 484] ioctl(4, LOOP_CLR_FD) = 0 [pid 484] close(4) = 0 [pid 484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 484] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 0 [pid 484] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 1 [pid 484] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 1 [pid 484] creat("./bus", 000) = 6 [pid 484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 1 [pid 484] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 1 [pid 484] open("./bus", O_RDONLY) = 7 [pid 484] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 1 [ 33.363824][ T484] loop0: detected capacity change from 0 to 512 [ 33.372337][ T484] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 33.385684][ T484] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.395498][ T484] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 484] sendfile(6, 7, NULL, 140737974943952 [pid 483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 483] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 483] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 483] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 486 attached => {parent_tid=[486]}, 88) = 486 [pid 483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 483] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 486] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 486] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 486] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 486] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 483] <... futex resumed>) = 0 [pid 486] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 483] exit_group(0 [pid 486] <... futex resumed>) = ? [pid 483] <... exit_group resumed>) = ? [pid 484] <... sendfile resumed>) = ? [pid 484] +++ exited with 0 +++ [pid 486] +++ exited with 0 +++ [pid 483] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=483, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./43/binderfs") = 0 umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./43/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./43") = 0 mkdir("./44", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 488 ./strace-static-x86_64: Process 488 attached [pid 488] set_robust_list(0x555556b826a0, 24) = 0 [pid 488] chdir("./44") = 0 [pid 488] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 488] setpgid(0, 0) = 0 [pid 488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 488] write(3, "1000", 4) = 4 [pid 488] close(3) = 0 [pid 488] symlink("/dev/binderfs", "./binderfs") = 0 [pid 488] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 488] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 488] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 488] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[489]}, 88) = 489 ./strace-static-x86_64: Process 489 attached [pid 488] rt_sigprocmask(SIG_SETMASK, [], [pid 489] set_robust_list(0x7f96301a99a0, 24 [pid 488] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 489] <... set_robust_list resumed>) = 0 [pid 488] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] rt_sigprocmask(SIG_SETMASK, [], [pid 488] <... futex resumed>) = 0 [pid 489] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 489] memfd_create("syzkaller", 0) = 3 [pid 489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 489] munmap(0x7f9627d89000, 262144) = 0 [pid 489] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 489] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 489] close(3) = 0 [pid 489] mkdir("./file0", 0777) = 0 [pid 489] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 489] chdir("./file0") = 0 [pid 489] ioctl(4, LOOP_CLR_FD) = 0 [pid 489] close(4) = 0 [pid 489] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 489] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 0 [pid 489] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 489] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 489] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] creat("./bus", 000) = 6 [pid 489] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 489] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 489] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 488] <... futex resumed>) = 0 [pid 489] open("./bus", O_RDONLY [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... open resumed>) = 7 [pid 489] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 489] sendfile(6, 7, NULL, 140737974943952 [pid 488] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 33.665997][ T489] loop0: detected capacity change from 0 to 512 [ 33.674501][ T489] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 33.687624][ T489] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.697573][ T489] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 488] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 488] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 488] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 488] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 491 attached => {parent_tid=[491]}, 88) = 491 [pid 488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 488] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 491] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 491] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 491] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 491] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 491] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] exit_group(0) = ? [pid 491] <... futex resumed>) = ? [pid 489] <... sendfile resumed>) = ? [pid 489] +++ exited with 0 +++ [pid 491] +++ exited with 0 +++ [pid 488] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=488, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./44/binderfs") = 0 umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./44/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./44") = 0 mkdir("./45", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 492 ./strace-static-x86_64: Process 492 attached [pid 492] set_robust_list(0x555556b826a0, 24) = 0 [pid 492] chdir("./45") = 0 [pid 492] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 492] setpgid(0, 0) = 0 [pid 492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 492] write(3, "1000", 4) = 4 [pid 492] close(3) = 0 [pid 492] symlink("/dev/binderfs", "./binderfs") = 0 [pid 492] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 492] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 492] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[493]}, 88) = 493 [pid 492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 493 attached [pid 493] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 493] memfd_create("syzkaller", 0) = 3 [pid 493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 493] munmap(0x7f9627d89000, 262144) = 0 [pid 493] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 493] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 493] close(3) = 0 [pid 493] mkdir("./file0", 0777) = 0 [pid 493] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 493] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 493] chdir("./file0") = 0 [pid 493] ioctl(4, LOOP_CLR_FD) = 0 [pid 493] close(4) = 0 [pid 493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] creat("./bus", 000) = 6 [pid 493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] open("./bus", O_RDONLY) = 7 [pid 493] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [pid 493] sendfile(6, 7, NULL, 140737974943952 [pid 492] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 33.940102][ T493] loop0: detected capacity change from 0 to 512 [ 33.947963][ T493] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 33.961697][ T493] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.973054][ T493] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 492] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 492] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 492] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[496]}, 88) = 496 [pid 492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 492] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 496 attached [pid 496] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 496] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 496] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = 1 [pid 492] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] sendmsg(-1, 0x20000000, 0 [pid 492] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 496] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 496] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = 1 [pid 496] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 492] exit_group(0 [pid 496] <... futex resumed>) = 231 [pid 492] <... exit_group resumed>) = ? [pid 496] +++ exited with 0 +++ [pid 493] <... sendfile resumed>) = ? [pid 493] +++ exited with 0 +++ [pid 492] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=492, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./45/binderfs") = 0 umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./45/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./45") = 0 mkdir("./46", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 497 ./strace-static-x86_64: Process 497 attached [pid 497] set_robust_list(0x555556b826a0, 24) = 0 [pid 497] chdir("./46") = 0 [pid 497] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 497] setpgid(0, 0) = 0 [pid 497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 497] write(3, "1000", 4) = 4 [pid 497] close(3) = 0 [pid 497] symlink("/dev/binderfs", "./binderfs") = 0 [pid 497] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 497] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 497] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 497] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 497] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 498 attached => {parent_tid=[498]}, 88) = 498 [pid 497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 497] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 498] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 498] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 498] memfd_create("syzkaller", 0) = 3 [pid 498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 498] munmap(0x7f9627d89000, 262144) = 0 [pid 498] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 498] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 498] close(3) = 0 [pid 498] mkdir("./file0", 0777) = 0 [pid 498] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 498] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 498] chdir("./file0") = 0 [pid 498] ioctl(4, LOOP_CLR_FD) = 0 [pid 498] close(4) = 0 [pid 498] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... futex resumed>) = 0 [pid 498] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 498] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... futex resumed>) = 1 [pid 498] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 498] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... futex resumed>) = 1 [pid 498] creat("./bus", 000) = 6 [pid 498] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... futex resumed>) = 1 [pid 498] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 498] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... futex resumed>) = 1 [pid 498] open("./bus", O_RDONLY) = 7 [pid 498] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 34.207883][ T498] loop0: detected capacity change from 0 to 512 [ 34.216072][ T498] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 34.229205][ T498] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.238951][ T498] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 498] sendfile(6, 7, NULL, 140737974943952 [pid 497] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 497] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 497] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 497] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 497] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 497] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[500]}, 88) = 500 [pid 497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 497] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 500 attached [pid 500] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 500] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 500] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 497] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] sendmsg(-1, 0x20000000, 0 [pid 497] <... futex resumed>) = 0 [pid 500] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 500] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] exit_group(0 [pid 500] <... futex resumed>) = ? [pid 497] <... exit_group resumed>) = ? [pid 500] +++ exited with 0 +++ [pid 498] <... sendfile resumed>) = ? [pid 498] +++ exited with 0 +++ [pid 497] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=497, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./46/binderfs") = 0 umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./46/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./46") = 0 mkdir("./47", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 501 ./strace-static-x86_64: Process 501 attached [pid 501] set_robust_list(0x555556b826a0, 24) = 0 [pid 501] chdir("./47") = 0 [pid 501] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 501] setpgid(0, 0) = 0 [pid 501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 501] write(3, "1000", 4) = 4 [pid 501] close(3) = 0 [pid 501] symlink("/dev/binderfs", "./binderfs") = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 501] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 501] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 501] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 501] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[502]}, 88) = 502 [pid 501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 501] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 502 attached [pid 502] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 502] memfd_create("syzkaller", 0) = 3 [pid 502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 502] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 502] munmap(0x7f9627d89000, 262144) = 0 [pid 502] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 502] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 502] close(3) = 0 [pid 502] mkdir("./file0", 0777) = 0 [pid 502] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 502] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 502] chdir("./file0") = 0 [pid 502] ioctl(4, LOOP_CLR_FD) = 0 [pid 502] close(4) = 0 [pid 502] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 502] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 502] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] creat("./bus", 000) = 6 [pid 502] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 502] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] open("./bus", O_RDONLY) = 7 [pid 502] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [ 34.530513][ T502] loop0: detected capacity change from 0 to 512 [ 34.538518][ T502] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 34.552331][ T502] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.561991][ T502] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 502] sendfile(6, 7, NULL, 140737974943952 [pid 501] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 501] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 501] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 501] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 501] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 501] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 504 attached => {parent_tid=[504]}, 88) = 504 [pid 504] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 504] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 501] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = 0 [pid 501] <... futex resumed>) = 1 [pid 504] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 501] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... mmap resumed>) = 0x20000000 [pid 504] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 501] <... futex resumed>) = 0 [pid 501] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 504] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 501] <... futex resumed>) = 0 [pid 504] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 501] exit_group(0 [pid 504] <... futex resumed>) = ? [pid 501] <... exit_group resumed>) = ? [pid 504] +++ exited with 0 +++ [pid 502] <... sendfile resumed>) = ? [pid 502] +++ exited with 0 +++ [pid 501] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=501, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./47/binderfs") = 0 umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./47/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./47") = 0 mkdir("./48", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 506 ./strace-static-x86_64: Process 506 attached [pid 506] set_robust_list(0x555556b826a0, 24) = 0 [pid 506] chdir("./48") = 0 [pid 506] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 506] setpgid(0, 0) = 0 [pid 506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 506] write(3, "1000", 4) = 4 [pid 506] close(3) = 0 [pid 506] symlink("/dev/binderfs", "./binderfs") = 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 506] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 506] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 506] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 507 attached [pid 507] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 506] <... clone3 resumed> => {parent_tid=[507]}, 88) = 507 [pid 507] rt_sigprocmask(SIG_SETMASK, [], [pid 506] rt_sigprocmask(SIG_SETMASK, [], [pid 507] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 507] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 506] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 507] <... futex resumed>) = 0 [pid 507] memfd_create("syzkaller", 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 507] <... memfd_create resumed>) = 3 [pid 507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 507] munmap(0x7f9627d89000, 262144) = 0 [pid 507] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 507] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 507] close(3) = 0 [pid 507] mkdir("./file0", 0777) = 0 [pid 507] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 507] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 507] chdir("./file0") = 0 [pid 507] ioctl(4, LOOP_CLR_FD) = 0 [pid 507] close(4) = 0 [pid 507] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 507] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 507] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] creat("./bus", 000) = 6 [pid 507] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 507] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] open("./bus", O_RDONLY) = 7 [pid 507] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [ 34.847715][ T507] loop0: detected capacity change from 0 to 512 [ 34.857598][ T507] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 34.871616][ T507] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.881433][ T507] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 507] sendfile(6, 7, NULL, 140737974943952 [pid 506] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 506] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 506] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 506] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 506] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[509]}, 88) = 509 [pid 506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 506] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 509 attached [pid 509] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 509] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 509] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 509] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 509] <... futex resumed>) = 1 [pid 506] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 509] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] <... futex resumed>) = 0 [pid 509] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 506] exit_group(0) = ? [pid 509] <... futex resumed>) = ? [pid 509] +++ exited with 0 +++ [pid 507] <... sendfile resumed>) = ? [pid 507] +++ exited with 0 +++ [pid 506] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=506, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./48/binderfs") = 0 umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./48/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./48") = 0 mkdir("./49", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 510 ./strace-static-x86_64: Process 510 attached [pid 510] set_robust_list(0x555556b826a0, 24) = 0 [pid 510] chdir("./49") = 0 [pid 510] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 510] setpgid(0, 0) = 0 [pid 510] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 510] write(3, "1000", 4) = 4 [pid 510] close(3) = 0 [pid 510] symlink("/dev/binderfs", "./binderfs") = 0 [pid 510] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 510] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 510] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 510] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 510] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 510] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[511]}, 88) = 511 [pid 510] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 510] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 511 attached [pid 511] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 511] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 511] memfd_create("syzkaller", 0) = 3 [pid 511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 511] munmap(0x7f9627d89000, 262144) = 0 [pid 511] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 511] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 511] close(3) = 0 [pid 511] mkdir("./file0", 0777) = 0 [pid 511] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 511] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 511] chdir("./file0") = 0 [pid 511] ioctl(4, LOOP_CLR_FD) = 0 [pid 511] close(4) = 0 [pid 511] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 511] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 511] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] creat("./bus", 000) = 6 [pid 511] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 511] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 510] <... futex resumed>) = 0 [pid 511] open("./bus", O_RDONLY [pid 510] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 511] <... open resumed>) = 7 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 511] <... futex resumed>) = 0 [pid 511] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 510] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 510] <... futex resumed>) = 0 [pid 511] sendfile(6, 7, NULL, 140737974943952 [ 35.171060][ T511] loop0: detected capacity change from 0 to 512 [ 35.180124][ T511] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 35.195166][ T511] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 35.205242][ T511] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 510] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 510] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 510] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 510] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 510] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[513]}, 88) = 513 [pid 510] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 510] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 513 attached [pid 513] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 513] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 513] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 513] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 513] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 513] <... futex resumed>) = 1 [pid 513] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 510] exit_group(0 [pid 513] <... futex resumed>) = ? [pid 510] <... exit_group resumed>) = ? [pid 513] +++ exited with 0 +++ [pid 511] <... sendfile resumed>) = ? [pid 511] +++ exited with 0 +++ [pid 510] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=510, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./49/binderfs") = 0 umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./49/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./49") = 0 mkdir("./50", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 514 attached , child_tidptr=0x555556b82690) = 514 [pid 514] set_robust_list(0x555556b826a0, 24) = 0 [pid 514] chdir("./50") = 0 [pid 514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 514] setpgid(0, 0) = 0 [pid 514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 514] write(3, "1000", 4) = 4 [pid 514] close(3) = 0 [pid 514] symlink("/dev/binderfs", "./binderfs") = 0 [pid 514] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 514] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 514] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 514] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 515 attached => {parent_tid=[515]}, 88) = 515 [pid 515] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 515] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 515] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 514] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] <... futex resumed>) = 0 [pid 515] memfd_create("syzkaller", 0 [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 515] <... memfd_create resumed>) = 3 [pid 515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 515] munmap(0x7f9627d89000, 262144) = 0 [pid 515] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 515] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 515] close(3) = 0 [pid 515] mkdir("./file0", 0777) = 0 [pid 515] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 515] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 515] chdir("./file0") = 0 [pid 515] ioctl(4, LOOP_CLR_FD) = 0 [pid 515] close(4) = 0 [pid 515] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 0 [pid 515] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 515] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [pid 515] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 515] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [pid 515] creat("./bus", 000) = 6 [pid 515] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [pid 515] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 515] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [pid 515] open("./bus", O_RDONLY) = 7 [pid 515] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [ 35.471742][ T515] loop0: detected capacity change from 0 to 512 [ 35.479815][ T515] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 35.492757][ T515] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 35.502868][ T515] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 515] sendfile(6, 7, NULL, 140737974943952 [pid 514] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 514] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 514] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 514] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 514] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 517 attached => {parent_tid=[517]}, 88) = 517 [pid 517] set_robust_list(0x7f9627dc89a0, 24 [pid 514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 517] <... set_robust_list resumed>) = 0 [pid 517] rt_sigprocmask(SIG_SETMASK, [], [pid 514] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 517] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 514] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 517] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] <... futex resumed>) = 0 [pid 517] sendmsg(-1, 0x20000000, 0 [pid 514] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 517] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 514] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 517] <... futex resumed>) = 0 [pid 517] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 514] exit_group(0 [pid 517] <... futex resumed>) = ? [pid 514] <... exit_group resumed>) = ? [pid 515] <... sendfile resumed>) = ? [pid 517] +++ exited with 0 +++ [pid 515] +++ exited with 0 +++ [pid 514] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=514, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./50/binderfs") = 0 umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./50/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./50") = 0 mkdir("./51", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 519 ./strace-static-x86_64: Process 519 attached [pid 519] set_robust_list(0x555556b826a0, 24) = 0 [pid 519] chdir("./51") = 0 [pid 519] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 519] setpgid(0, 0) = 0 [pid 519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 519] write(3, "1000", 4) = 4 [pid 519] close(3) = 0 [pid 519] symlink("/dev/binderfs", "./binderfs") = 0 [pid 519] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 519] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 519] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 519] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 519] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[520]}, 88) = 520 [pid 519] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 519] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 520 attached [pid 520] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 520] memfd_create("syzkaller", 0) = 3 [pid 520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 520] munmap(0x7f9627d89000, 262144) = 0 [pid 520] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 520] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 520] close(3) = 0 [pid 520] mkdir("./file0", 0777) = 0 [pid 520] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 520] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 520] chdir("./file0") = 0 [pid 520] ioctl(4, LOOP_CLR_FD) = 0 [pid 520] close(4) = 0 [pid 520] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... futex resumed>) = 1 [pid 520] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 520] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... futex resumed>) = 1 [pid 520] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 520] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 520] creat("./bus", 000) = 6 [pid 520] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 519] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 519] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... futex resumed>) = 0 [pid 520] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 520] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... futex resumed>) = 1 [pid 520] open("./bus", O_RDONLY) = 7 [pid 520] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... futex resumed>) = 1 [ 35.807172][ T520] loop0: detected capacity change from 0 to 512 [ 35.815135][ T520] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 35.828364][ T520] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 35.837814][ T520] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 520] sendfile(6, 7, NULL, 140737974943952 [pid 519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 519] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 519] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 519] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 519] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 522 attached => {parent_tid=[522]}, 88) = 522 [pid 522] set_robust_list(0x7f9627dc89a0, 24 [pid 519] rt_sigprocmask(SIG_SETMASK, [], [pid 522] <... set_robust_list resumed>) = 0 [pid 519] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 522] rt_sigprocmask(SIG_SETMASK, [], [pid 519] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 522] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 519] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] <... mmap resumed>) = 0x20000000 [pid 522] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] sendmsg(-1, 0x20000000, 0 [pid 519] <... futex resumed>) = 0 [pid 522] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 519] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 522] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] exit_group(0) = ? [pid 522] <... futex resumed>) = ? [pid 520] <... sendfile resumed>) = ? [pid 520] +++ exited with 0 +++ [pid 522] +++ exited with 0 +++ [pid 519] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=519, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./51/binderfs") = 0 umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./51/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./51") = 0 mkdir("./52", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 523 ./strace-static-x86_64: Process 523 attached [pid 523] set_robust_list(0x555556b826a0, 24) = 0 [pid 523] chdir("./52") = 0 [pid 523] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 523] setpgid(0, 0) = 0 [pid 523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 523] write(3, "1000", 4) = 4 [pid 523] close(3) = 0 [pid 523] symlink("/dev/binderfs", "./binderfs") = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 523] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 523] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 523] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 523] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 524 attached => {parent_tid=[524]}, 88) = 524 [pid 523] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 523] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 524] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 524] memfd_create("syzkaller", 0) = 3 [pid 524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 524] munmap(0x7f9627d89000, 262144) = 0 [pid 524] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 524] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 524] close(3) = 0 [pid 524] mkdir("./file0", 0777) = 0 [pid 524] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 524] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 524] chdir("./file0") = 0 [pid 524] ioctl(4, LOOP_CLR_FD) = 0 [pid 524] close(4) = 0 [pid 524] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... futex resumed>) = 1 [pid 524] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 524] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... futex resumed>) = 1 [pid 524] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 524] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... futex resumed>) = 1 [pid 524] creat("./bus", 000) = 6 [pid 524] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... futex resumed>) = 1 [pid 524] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 524] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... futex resumed>) = 1 [pid 524] open("./bus", O_RDONLY) = 7 [pid 524] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] <... futex resumed>) = 1 [ 36.102110][ T524] loop0: detected capacity change from 0 to 512 [ 36.110014][ T524] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 36.123114][ T524] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 36.132882][ T524] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 524] sendfile(6, 7, NULL, 140737974943952 [pid 523] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 523] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 523] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 523] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 523] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 523] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[526]}, 88) = 526 [pid 523] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 523] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 526 attached [pid 526] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 526] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 526] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] sendmsg(-1, 0x20000000, 0 [pid 523] <... futex resumed>) = 0 [pid 526] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 523] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 523] <... futex resumed>) = 0 [pid 526] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 523] exit_group(0) = ? [pid 526] <... futex resumed>) = ? [pid 526] +++ exited with 0 +++ [pid 524] <... sendfile resumed>) = ? [pid 524] +++ exited with 0 +++ [pid 523] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=523, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./52/binderfs") = 0 umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./52/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./52") = 0 mkdir("./53", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 527 ./strace-static-x86_64: Process 527 attached [pid 527] set_robust_list(0x555556b826a0, 24) = 0 [pid 527] chdir("./53") = 0 [pid 527] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 527] setpgid(0, 0) = 0 [pid 527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 527] write(3, "1000", 4) = 4 [pid 527] close(3) = 0 [pid 527] symlink("/dev/binderfs", "./binderfs") = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 527] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 527] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 527] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[528]}, 88) = 528 [pid 527] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 527] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 528 attached [pid 528] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 528] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 528] memfd_create("syzkaller", 0) = 3 [pid 528] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 528] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 528] munmap(0x7f9627d89000, 262144) = 0 [pid 528] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 528] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 528] close(3) = 0 [pid 528] mkdir("./file0", 0777) = 0 [pid 528] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 528] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 528] chdir("./file0") = 0 [pid 528] ioctl(4, LOOP_CLR_FD) = 0 [pid 528] close(4) = 0 [pid 528] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] <... futex resumed>) = 1 [pid 528] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 528] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] <... futex resumed>) = 1 [pid 528] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 528] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] <... futex resumed>) = 1 [pid 528] creat("./bus", 000) = 6 [pid 528] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] <... futex resumed>) = 1 [pid 528] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 528] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] <... futex resumed>) = 1 [pid 528] open("./bus", O_RDONLY) = 7 [pid 528] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] <... futex resumed>) = 1 [ 36.395088][ T528] loop0: detected capacity change from 0 to 512 [ 36.403193][ T528] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 36.416216][ T528] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 36.425963][ T528] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 528] sendfile(6, 7, NULL, 140737974943952 [pid 527] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 527] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 527] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 527] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 530 attached [pid 530] set_robust_list(0x7f9627dc89a0, 24 [pid 527] <... clone3 resumed> => {parent_tid=[530]}, 88) = 530 [pid 530] <... set_robust_list resumed>) = 0 [pid 527] rt_sigprocmask(SIG_SETMASK, [], [pid 530] rt_sigprocmask(SIG_SETMASK, [], [pid 527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 527] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 530] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 530] <... mmap resumed>) = 0x20000000 [pid 530] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] <... futex resumed>) = 0 [pid 527] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 530] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 530] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 530] <... futex resumed>) = 1 [pid 530] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] exit_group(0) = ? [pid 530] <... futex resumed>) = ? [pid 528] <... sendfile resumed>) = 231 [pid 530] +++ exited with 0 +++ [pid 528] +++ exited with 0 +++ [pid 527] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=527, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./53/binderfs") = 0 umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./53/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./53") = 0 mkdir("./54", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 532 ./strace-static-x86_64: Process 532 attached [pid 532] set_robust_list(0x555556b826a0, 24) = 0 [pid 532] chdir("./54") = 0 [pid 532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 532] setpgid(0, 0) = 0 [pid 532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 532] write(3, "1000", 4) = 4 [pid 532] close(3) = 0 [pid 532] symlink("/dev/binderfs", "./binderfs") = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 532] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 532] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 532] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[533]}, 88) = 533 [pid 532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 532] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 533 attached [pid 533] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 533] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 533] memfd_create("syzkaller", 0) = 3 [pid 533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 533] munmap(0x7f9627d89000, 262144) = 0 [pid 533] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 533] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 533] close(3) = 0 [pid 533] mkdir("./file0", 0777) = 0 [pid 533] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 533] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 533] chdir("./file0") = 0 [pid 533] ioctl(4, LOOP_CLR_FD) = 0 [pid 533] close(4) = 0 [pid 533] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 533] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 533] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] creat("./bus", 000) = 6 [pid 533] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 533] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] open("./bus", O_RDONLY) = 7 [pid 533] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [ 36.682293][ T533] loop0: detected capacity change from 0 to 512 [ 36.692189][ T533] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 36.705170][ T533] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 36.715083][ T533] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 533] sendfile(6, 7, NULL, 140737974943952 [pid 532] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 532] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 532] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 532] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 532] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 535 attached [pid 535] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 535] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 535] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] <... clone3 resumed> => {parent_tid=[535]}, 88) = 535 [pid 532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 532] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = 1 [pid 535] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 532] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] <... mmap resumed>) = 0x20000000 [pid 535] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] <... futex resumed>) = 1 [pid 535] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 535] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 535] <... futex resumed>) = 1 [pid 535] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] exit_group(0 [pid 535] <... futex resumed>) = ? [pid 532] <... exit_group resumed>) = ? [pid 535] +++ exited with 0 +++ [pid 533] <... sendfile resumed>) = ? [pid 533] +++ exited with 0 +++ [pid 532] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=532, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./54/binderfs") = 0 umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./54/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./54") = 0 mkdir("./55", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 536 ./strace-static-x86_64: Process 536 attached [pid 536] set_robust_list(0x555556b826a0, 24) = 0 [pid 536] chdir("./55") = 0 [pid 536] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 536] setpgid(0, 0) = 0 [pid 536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 536] write(3, "1000", 4) = 4 [pid 536] close(3) = 0 [pid 536] symlink("/dev/binderfs", "./binderfs") = 0 [pid 536] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 536] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 536] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 536] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 537 attached [pid 537] set_robust_list(0x7f96301a99a0, 24 [pid 536] <... clone3 resumed> => {parent_tid=[537]}, 88) = 537 [pid 537] <... set_robust_list resumed>) = 0 [pid 537] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 537] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 536] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 537] <... futex resumed>) = 0 [pid 537] memfd_create("syzkaller", 0) = 3 [pid 537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 537] munmap(0x7f9627d89000, 262144) = 0 [pid 537] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 537] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 537] close(3) = 0 [pid 537] mkdir("./file0", 0777) = 0 [pid 537] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 537] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 537] chdir("./file0") = 0 [pid 537] ioctl(4, LOOP_CLR_FD) = 0 [pid 537] close(4) = 0 [pid 537] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 537] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 537] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] creat("./bus", 000) = 6 [pid 537] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 537] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = 0 [pid 537] <... futex resumed>) = 1 [pid 536] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] open("./bus", O_RDONLY) = 7 [pid 537] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] <... futex resumed>) = 1 [pid 536] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 536] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 0 [ 36.953300][ T537] loop0: detected capacity change from 0 to 512 [ 36.961504][ T537] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 36.976874][ T537] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 36.989438][ T537] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 537] sendfile(6, 7, NULL, 140737974943952 [pid 536] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 536] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 536] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 536] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[539]}, 88) = 539 [pid 536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 536] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 539 attached [pid 539] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 539] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 539] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 539] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 539] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] exit_group(0 [pid 539] <... futex resumed>) = ? [pid 536] <... exit_group resumed>) = ? [pid 539] +++ exited with 0 +++ [pid 537] <... sendfile resumed>) = ? [pid 537] +++ exited with 0 +++ [pid 536] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=536, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./55/binderfs") = 0 umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./55/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./55") = 0 mkdir("./56", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 540 ./strace-static-x86_64: Process 540 attached [pid 540] set_robust_list(0x555556b826a0, 24) = 0 [pid 540] chdir("./56") = 0 [pid 540] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 540] setpgid(0, 0) = 0 [pid 540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 540] write(3, "1000", 4) = 4 [pid 540] close(3) = 0 [pid 540] symlink("/dev/binderfs", "./binderfs") = 0 [pid 540] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 540] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 540] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[541]}, 88) = 541 ./strace-static-x86_64: Process 541 attached [pid 540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 540] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] set_robust_list(0x7f96301a99a0, 24 [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 541] <... set_robust_list resumed>) = 0 [pid 541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 541] memfd_create("syzkaller", 0) = 3 [pid 541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 541] munmap(0x7f9627d89000, 262144) = 0 [pid 541] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 541] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 541] close(3) = 0 [pid 541] mkdir("./file0", 0777) = 0 [pid 541] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 541] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 541] chdir("./file0") = 0 [pid 541] ioctl(4, LOOP_CLR_FD) = 0 [pid 541] close(4) = 0 [pid 541] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 541] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 541] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] creat("./bus", 000) = 6 [pid 541] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 541] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 541] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 541] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 541] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 0 [pid 541] open("./bus", O_RDONLY) = 7 [pid 541] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [ 37.259659][ T541] loop0: detected capacity change from 0 to 512 [ 37.267466][ T541] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 37.280587][ T541] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 37.291248][ T541] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 541] sendfile(6, 7, NULL, 140737974943952 [pid 540] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 540] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 540] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 540] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 543 attached => {parent_tid=[543]}, 88) = 543 [pid 543] set_robust_list(0x7f9627dc89a0, 24 [pid 540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 540] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... set_robust_list resumed>) = 0 [pid 543] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 543] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 543] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 543] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 543] <... futex resumed>) = 1 [pid 543] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] exit_group(0) = ? [pid 543] <... futex resumed>) = ? [pid 543] +++ exited with 0 +++ [pid 541] <... sendfile resumed>) = ? [pid 541] +++ exited with 0 +++ [pid 540] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=540, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./56/binderfs") = 0 umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./56/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./56") = 0 mkdir("./57", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 544 ./strace-static-x86_64: Process 544 attached [pid 544] set_robust_list(0x555556b826a0, 24) = 0 [pid 544] chdir("./57") = 0 [pid 544] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 544] setpgid(0, 0) = 0 [pid 544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 544] write(3, "1000", 4) = 4 [pid 544] close(3) = 0 [pid 544] symlink("/dev/binderfs", "./binderfs") = 0 [pid 544] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 544] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 544] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 544] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[545]}, 88) = 545 [pid 544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 544] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 545 attached [pid 545] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 545] memfd_create("syzkaller", 0) = 3 [pid 545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 545] munmap(0x7f9627d89000, 262144) = 0 [pid 545] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 545] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 545] close(3) = 0 [pid 545] mkdir("./file0", 0777) = 0 [pid 545] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 545] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 545] chdir("./file0") = 0 [pid 545] ioctl(4, LOOP_CLR_FD) = 0 [pid 545] close(4) = 0 [pid 545] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 1 [pid 545] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 545] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = 1 [pid 544] <... futex resumed>) = 0 [pid 545] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 544] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 0 [pid 545] creat("./bus", 000) = 6 [pid 545] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 1 [pid 545] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 545] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 544] <... futex resumed>) = 0 [pid 545] open("./bus", O_RDONLY [pid 544] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... open resumed>) = 7 [pid 544] <... futex resumed>) = 0 [pid 545] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 0 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 545] sendfile(6, 7, NULL, 140737974943952 [pid 544] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 37.571920][ T545] loop0: detected capacity change from 0 to 512 [ 37.580269][ T545] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 37.593561][ T545] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 37.603486][ T545] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 544] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 544] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 544] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 544] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[548]}, 88) = 548 [pid 544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 544] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 548 attached [pid 548] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 548] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 548] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 548] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 548] <... futex resumed>) = 1 [pid 548] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 548] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 548] <... futex resumed>) = 1 [pid 548] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 544] exit_group(0) = ? [pid 548] <... futex resumed>) = ? [pid 548] +++ exited with 0 +++ [pid 545] <... sendfile resumed>) = ? [pid 545] +++ exited with 0 +++ [pid 544] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=544, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./57/binderfs") = 0 umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./57/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./57") = 0 mkdir("./58", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 549 ./strace-static-x86_64: Process 549 attached [pid 549] set_robust_list(0x555556b826a0, 24) = 0 [pid 549] chdir("./58") = 0 [pid 549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 549] setpgid(0, 0) = 0 [pid 549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 549] write(3, "1000", 4) = 4 [pid 549] close(3) = 0 [pid 549] symlink("/dev/binderfs", "./binderfs") = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 549] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 549] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 549] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 549] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[550]}, 88) = 550 [pid 549] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 549] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 550 attached [pid 550] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 550] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 550] memfd_create("syzkaller", 0) = 3 [pid 550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 550] munmap(0x7f9627d89000, 262144) = 0 [pid 550] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 550] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 550] close(3) = 0 [pid 550] mkdir("./file0", 0777) = 0 [pid 550] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 550] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 550] chdir("./file0") = 0 [pid 550] ioctl(4, LOOP_CLR_FD) = 0 [pid 550] close(4) = 0 [pid 550] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [pid 550] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 550] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [pid 550] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 550] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [pid 550] creat("./bus", 000) = 6 [pid 550] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [pid 550] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 550] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [pid 550] open("./bus", O_RDONLY) = 7 [pid 550] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [ 37.887152][ T550] loop0: detected capacity change from 0 to 512 [ 37.895469][ T550] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 37.908890][ T550] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 37.918665][ T550] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 550] sendfile(6, 7, NULL, 140737974943952 [pid 549] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 549] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 549] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 549] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 549] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 549] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[552]}, 88) = 552 [pid 549] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 549] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 552 attached [pid 552] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 552] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 552] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 552] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 552] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 552] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 549] <... futex resumed>) = 0 [pid 552] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 549] exit_group(0) = ? [pid 552] <... futex resumed>) = ? [pid 552] +++ exited with 0 +++ [pid 550] <... sendfile resumed>) = ? [pid 550] +++ exited with 0 +++ [pid 549] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=549, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./58/binderfs") = 0 umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./58/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./58") = 0 mkdir("./59", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 553 ./strace-static-x86_64: Process 553 attached [pid 553] set_robust_list(0x555556b826a0, 24) = 0 [pid 553] chdir("./59") = 0 [pid 553] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 553] setpgid(0, 0) = 0 [pid 553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 553] write(3, "1000", 4) = 4 [pid 553] close(3) = 0 [pid 553] symlink("/dev/binderfs", "./binderfs") = 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 553] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 553] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 553] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 553] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 554 attached => {parent_tid=[554]}, 88) = 554 [pid 554] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 554] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 554] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 553] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 553] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] <... futex resumed>) = 0 [pid 554] memfd_create("syzkaller", 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 554] <... memfd_create resumed>) = 3 [pid 554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 554] munmap(0x7f9627d89000, 262144) = 0 [pid 554] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 554] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 554] close(3) = 0 [pid 554] mkdir("./file0", 0777) = 0 [pid 554] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 554] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 554] chdir("./file0") = 0 [pid 554] ioctl(4, LOOP_CLR_FD) = 0 [pid 554] close(4) = 0 [pid 554] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] <... futex resumed>) = 1 [pid 554] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 554] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] <... futex resumed>) = 1 [pid 554] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 554] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] <... futex resumed>) = 1 [pid 554] creat("./bus", 000) = 6 [pid 554] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] <... futex resumed>) = 1 [pid 554] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 554] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] <... futex resumed>) = 1 [pid 554] open("./bus", O_RDONLY) = 7 [pid 554] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] <... futex resumed>) = 1 [ 38.193977][ T554] loop0: detected capacity change from 0 to 512 [ 38.202095][ T554] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 38.215509][ T554] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 38.229599][ T554] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 554] sendfile(6, 7, NULL, 140737974943952 [pid 553] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 553] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 553] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 553] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 553] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 553] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 556 attached => {parent_tid=[556]}, 88) = 556 [pid 556] set_robust_list(0x7f9627dc89a0, 24 [pid 553] rt_sigprocmask(SIG_SETMASK, [], [pid 556] <... set_robust_list resumed>) = 0 [pid 553] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 556] rt_sigprocmask(SIG_SETMASK, [], [pid 553] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 553] <... futex resumed>) = 0 [pid 556] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 553] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] <... mmap resumed>) = 0x20000000 [pid 556] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] sendmsg(-1, 0x20000000, 0 [pid 553] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 556] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 553] <... futex resumed>) = 0 [pid 556] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 553] exit_group(0 [pid 556] <... futex resumed>) = ? [pid 553] <... exit_group resumed>) = ? [pid 556] +++ exited with 0 +++ [pid 554] <... sendfile resumed>) = ? [pid 554] +++ exited with 0 +++ [pid 553] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=553, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./59/binderfs") = 0 umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./59/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./59") = 0 mkdir("./60", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 557 ./strace-static-x86_64: Process 557 attached [pid 557] set_robust_list(0x555556b826a0, 24) = 0 [pid 557] chdir("./60") = 0 [pid 557] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 557] setpgid(0, 0) = 0 [pid 557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 557] write(3, "1000", 4) = 4 [pid 557] close(3) = 0 [pid 557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 557] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 557] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 557] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[558]}, 88) = 558 [pid 557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 557] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 558 attached [pid 558] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 558] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 558] memfd_create("syzkaller", 0) = 3 [pid 558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 558] munmap(0x7f9627d89000, 262144) = 0 [pid 558] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 558] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 558] close(3) = 0 [pid 558] mkdir("./file0", 0777) = 0 [pid 558] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 558] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 558] chdir("./file0") = 0 [pid 558] ioctl(4, LOOP_CLR_FD) = 0 [pid 558] close(4) = 0 [pid 558] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [pid 558] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 558] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [pid 558] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 558] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [pid 558] creat("./bus", 000) = 6 [pid 558] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [pid 558] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 558] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [pid 558] open("./bus", O_RDONLY) = 7 [pid 558] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [ 38.542308][ T558] loop0: detected capacity change from 0 to 512 [ 38.550245][ T558] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 38.563771][ T558] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 38.574004][ T558] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 558] sendfile(6, 7, NULL, 140737974943952 [pid 557] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 557] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 557] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 557] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 557] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[560]}, 88) = 560 [pid 557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 557] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 560 attached [pid 560] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 560] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 560] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 560] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 560] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 557] <... futex resumed>) = 0 [pid 560] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 557] exit_group(0 [pid 560] <... futex resumed>) = ? [pid 557] <... exit_group resumed>) = ? [pid 560] +++ exited with 0 +++ [pid 558] <... sendfile resumed>) = ? [pid 558] +++ exited with 0 +++ [pid 557] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=557, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./60/binderfs") = 0 umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./60/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./60") = 0 mkdir("./61", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 562 ./strace-static-x86_64: Process 562 attached [pid 562] set_robust_list(0x555556b826a0, 24) = 0 [pid 562] chdir("./61") = 0 [pid 562] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 562] setpgid(0, 0) = 0 [pid 562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 562] write(3, "1000", 4) = 4 [pid 562] close(3) = 0 [pid 562] symlink("/dev/binderfs", "./binderfs") = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 562] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 562] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 562] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 562] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[563]}, 88) = 563 [pid 562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 562] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 563 attached [pid 563] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 563] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 563] memfd_create("syzkaller", 0) = 3 [pid 563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 563] munmap(0x7f9627d89000, 262144) = 0 [pid 563] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 563] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 563] close(3) = 0 [pid 563] mkdir("./file0", 0777) = 0 [pid 563] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 563] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 563] chdir("./file0") = 0 [pid 563] ioctl(4, LOOP_CLR_FD) = 0 [pid 563] close(4) = 0 [pid 563] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... futex resumed>) = 1 [pid 563] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 563] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... futex resumed>) = 1 [pid 563] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 563] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] creat("./bus", 000) = 6 [pid 563] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... futex resumed>) = 1 [pid 563] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 563] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... futex resumed>) = 1 [pid 563] open("./bus", O_RDONLY) = 7 [pid 563] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... futex resumed>) = 1 [ 38.831775][ T563] loop0: detected capacity change from 0 to 512 [ 38.839862][ T563] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 38.854012][ T563] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 38.864037][ T563] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 563] sendfile(6, 7, NULL, 140737974943952 [pid 562] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 562] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 562] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 562] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 562] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 562] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 565 attached => {parent_tid=[565]}, 88) = 565 [pid 562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 562] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 565] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 565] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 565] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 565] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 562] exit_group(0) = ? [pid 565] <... futex resumed>) = ? [pid 565] +++ exited with 0 +++ [pid 563] <... sendfile resumed>) = ? [pid 563] +++ exited with 0 +++ [pid 562] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=562, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./61/binderfs") = 0 umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./61/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./61") = 0 mkdir("./62", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 566 ./strace-static-x86_64: Process 566 attached [pid 566] set_robust_list(0x555556b826a0, 24) = 0 [pid 566] chdir("./62") = 0 [pid 566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 566] setpgid(0, 0) = 0 [pid 566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 566] write(3, "1000", 4) = 4 [pid 566] close(3) = 0 [pid 566] symlink("/dev/binderfs", "./binderfs") = 0 [pid 566] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 566] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 566] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[567]}, 88) = 567 [pid 566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 567 attached [pid 567] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 567] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 567] memfd_create("syzkaller", 0) = 3 [pid 567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 567] munmap(0x7f9627d89000, 262144) = 0 [pid 567] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 567] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 567] close(3) = 0 [pid 567] mkdir("./file0", 0777) = 0 [pid 567] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 567] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 567] chdir("./file0") = 0 [pid 567] ioctl(4, LOOP_CLR_FD) = 0 [pid 567] close(4) = 0 [pid 567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 39.160693][ T567] loop0: detected capacity change from 0 to 512 [ 39.177707][ T567] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 39.190801][ T567] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 39.200434][ T567] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 567] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 0 [pid 567] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] creat("./bus", 000) = 6 [pid 567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] open("./bus", O_RDONLY) = 7 [pid 567] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 567] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 566] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 0 [pid 567] sendfile(6, 7, NULL, 140737974943952 [pid 566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 566] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 566] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[569]}, 88) = 569 [pid 566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 566] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 569 attached [pid 569] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 569] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 569] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 569] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... futex resumed>) = 1 [pid 569] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 569] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 569] <... futex resumed>) = 1 [pid 569] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 566] exit_group(0 [pid 569] <... futex resumed>) = ? [pid 566] <... exit_group resumed>) = ? [pid 567] <... sendfile resumed>) = ? [pid 567] +++ exited with 0 +++ [pid 569] +++ exited with 0 +++ [pid 566] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=566, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./62/binderfs") = 0 umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./62/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./62") = 0 mkdir("./63", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 570 ./strace-static-x86_64: Process 570 attached [pid 570] set_robust_list(0x555556b826a0, 24) = 0 [pid 570] chdir("./63") = 0 [pid 570] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 570] setpgid(0, 0) = 0 [pid 570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 570] write(3, "1000", 4) = 4 [pid 570] close(3) = 0 [pid 570] symlink("/dev/binderfs", "./binderfs") = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 570] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 570] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 570] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[571]}, 88) = 571 [pid 570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 571 attached [pid 571] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 571] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 571] memfd_create("syzkaller", 0) = 3 [pid 571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 571] munmap(0x7f9627d89000, 262144) = 0 [pid 571] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 571] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 571] close(3) = 0 [pid 571] mkdir("./file0", 0777) = 0 [pid 571] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 571] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 571] chdir("./file0") = 0 [pid 571] ioctl(4, LOOP_CLR_FD) = 0 [pid 571] close(4) = 0 [pid 571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] creat("./bus", 000) = 6 [pid 571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] open("./bus", O_RDONLY) = 7 [pid 571] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [ 39.485543][ T571] loop0: detected capacity change from 0 to 512 [ 39.494082][ T571] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 39.507273][ T571] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 39.517011][ T571] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 571] sendfile(6, 7, NULL, 140737974943952 [pid 570] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 570] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 570] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 570] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 570] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 573 attached => {parent_tid=[573]}, 88) = 573 [pid 573] set_robust_list(0x7f9627dc89a0, 24 [pid 570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 570] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... set_robust_list resumed>) = 0 [pid 573] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 573] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 573] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 573] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 573] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 570] exit_group(0 [pid 573] <... futex resumed>) = ? [pid 570] <... exit_group resumed>) = ? [pid 573] +++ exited with 0 +++ [pid 571] <... sendfile resumed>) = ? [pid 571] +++ exited with 0 +++ [pid 570] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=570, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./63/binderfs") = 0 umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./63/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./63") = 0 mkdir("./64", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 575 ./strace-static-x86_64: Process 575 attached [pid 575] set_robust_list(0x555556b826a0, 24) = 0 [pid 575] chdir("./64") = 0 [pid 575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 575] setpgid(0, 0) = 0 [pid 575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 575] write(3, "1000", 4) = 4 [pid 575] close(3) = 0 [pid 575] symlink("/dev/binderfs", "./binderfs") = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 575] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 575] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 575] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 575] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[576]}, 88) = 576 [pid 575] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 575] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 576 attached [pid 576] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 576] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 576] memfd_create("syzkaller", 0) = 3 [pid 576] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 576] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 576] munmap(0x7f9627d89000, 262144) = 0 [pid 576] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 576] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 576] close(3) = 0 [pid 576] mkdir("./file0", 0777) = 0 [ 39.810369][ T576] loop0: detected capacity change from 0 to 512 [ 39.828141][ T576] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 39.841352][ T576] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 576] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 576] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 576] chdir("./file0") = 0 [pid 576] ioctl(4, LOOP_CLR_FD) = 0 [pid 576] close(4) = 0 [pid 576] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 1 [pid 576] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 576] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 1 [pid 576] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 576] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 1 [pid 576] creat("./bus", 000) = 6 [pid 576] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 1 [pid 576] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 576] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 1 [pid 576] open("./bus", O_RDONLY) = 7 [pid 576] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 1 [ 39.851561][ T576] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 576] sendfile(6, 7, NULL, 140737974943952 [pid 575] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 575] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 575] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 575] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 575] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[578]}, 88) = 578 [pid 575] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 575] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 578 attached [pid 578] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 578] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 578] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 578] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... futex resumed>) = 1 [pid 578] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 578] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 578] <... futex resumed>) = 1 [pid 578] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 575] exit_group(0 [pid 578] <... futex resumed>) = ? [pid 575] <... exit_group resumed>) = ? [pid 578] +++ exited with 0 +++ [pid 576] <... sendfile resumed>) = ? [pid 576] +++ exited with 0 +++ [pid 575] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=575, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./64/binderfs") = 0 umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./64/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./64") = 0 mkdir("./65", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 579 ./strace-static-x86_64: Process 579 attached [pid 579] set_robust_list(0x555556b826a0, 24) = 0 [pid 579] chdir("./65") = 0 [pid 579] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 579] setpgid(0, 0) = 0 [pid 579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 579] write(3, "1000", 4) = 4 [pid 579] close(3) = 0 [pid 579] symlink("/dev/binderfs", "./binderfs") = 0 [pid 579] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 579] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 579] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 579] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 579] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 580 attached => {parent_tid=[580]}, 88) = 580 [pid 579] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 580] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 580] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 580] memfd_create("syzkaller", 0) = 3 [pid 580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 580] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 580] munmap(0x7f9627d89000, 262144) = 0 [pid 580] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 580] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 580] close(3) = 0 [pid 580] mkdir("./file0", 0777) = 0 [pid 580] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 580] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 580] chdir("./file0") = 0 [pid 580] ioctl(4, LOOP_CLR_FD) = 0 [pid 580] close(4) = 0 [pid 580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 1 [pid 580] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 1 [pid 580] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 1 [pid 580] creat("./bus", 000) = 6 [pid 580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 1 [pid 580] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... futex resumed>) = 1 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] open("./bus", O_RDONLY) = 7 [pid 580] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 579] <... futex resumed>) = 0 [pid 580] sendfile(6, 7, NULL, 140737974943952 [pid 579] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 40.147570][ T580] loop0: detected capacity change from 0 to 512 [ 40.156519][ T580] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 40.170624][ T580] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 40.181194][ T580] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 579] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 579] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 579] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 579] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 579] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[582]}, 88) = 582 [pid 579] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 579] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 582 attached [pid 582] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 582] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 582] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 582] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] <... futex resumed>) = 1 [pid 582] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 582] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 582] <... futex resumed>) = 1 [pid 582] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 579] exit_group(0 [pid 582] <... futex resumed>) = 231 [pid 579] <... exit_group resumed>) = ? [pid 580] <... sendfile resumed>) = ? [pid 582] +++ exited with 0 +++ [pid 580] +++ exited with 0 +++ [pid 579] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=579, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./65/binderfs") = 0 umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./65/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./65") = 0 mkdir("./66", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 583 ./strace-static-x86_64: Process 583 attached [pid 583] set_robust_list(0x555556b826a0, 24) = 0 [pid 583] chdir("./66") = 0 [pid 583] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 583] setpgid(0, 0) = 0 [pid 583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 583] write(3, "1000", 4) = 4 [pid 583] close(3) = 0 [pid 583] symlink("/dev/binderfs", "./binderfs") = 0 [pid 583] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 583] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 583] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 583] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 583] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[584]}, 88) = 584 [pid 583] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 584 attached [pid 584] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 584] memfd_create("syzkaller", 0) = 3 [pid 584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 584] munmap(0x7f9627d89000, 262144) = 0 [pid 584] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 584] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 584] close(3) = 0 [pid 584] mkdir("./file0", 0777) = 0 [pid 584] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 584] chdir("./file0") = 0 [pid 584] ioctl(4, LOOP_CLR_FD) = 0 [pid 584] close(4) = 0 [pid 584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 584] <... futex resumed>) = 1 [pid 584] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 584] <... futex resumed>) = 1 [pid 584] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 584] <... futex resumed>) = 1 [pid 584] creat("./bus", 000) = 6 [pid 584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 584] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 584] <... futex resumed>) = 0 [pid 584] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 584] open("./bus", O_RDONLY) = 7 [pid 584] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 40.452071][ T584] loop0: detected capacity change from 0 to 512 [ 40.460876][ T584] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 40.474504][ T584] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 40.484529][ T584] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 584] sendfile(6, 7, NULL, 140737974943952 [pid 583] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 583] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 583] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 583] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 583] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 583] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[586]}, 88) = 586 [pid 583] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 583] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 586 attached [pid 586] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 586] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 586] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 586] <... futex resumed>) = 1 [pid 586] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 586] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = 0 [pid 586] <... futex resumed>) = 1 [pid 586] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 583] exit_group(0 [pid 586] <... futex resumed>) = ? [pid 583] <... exit_group resumed>) = ? [pid 584] <... sendfile resumed>) = ? [pid 586] +++ exited with 0 +++ [pid 584] +++ exited with 0 +++ [pid 583] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=583, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./66/binderfs") = 0 umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./66/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./66") = 0 mkdir("./67", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 588 ./strace-static-x86_64: Process 588 attached [pid 588] set_robust_list(0x555556b826a0, 24) = 0 [pid 588] chdir("./67") = 0 [pid 588] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 588] setpgid(0, 0) = 0 [pid 588] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 588] write(3, "1000", 4) = 4 [pid 588] close(3) = 0 [pid 588] symlink("/dev/binderfs", "./binderfs") = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 588] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 588] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 588] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 588] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 588] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[589]}, 88) = 589 [pid 588] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 588] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 589 attached [pid 589] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 589] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 589] memfd_create("syzkaller", 0) = 3 [pid 589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 589] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 589] munmap(0x7f9627d89000, 262144) = 0 [pid 589] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 589] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 589] close(3) = 0 [pid 589] mkdir("./file0", 0777) = 0 [pid 589] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 589] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 589] chdir("./file0") = 0 [pid 589] ioctl(4, LOOP_CLR_FD) = 0 [pid 589] close(4) = 0 [pid 589] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 589] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 589] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] creat("./bus", 000) = 6 [pid 589] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 589] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] open("./bus", O_RDONLY) = 7 [pid 589] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [ 40.767858][ T589] loop0: detected capacity change from 0 to 512 [ 40.777177][ T589] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 40.791335][ T589] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 40.801016][ T589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 589] sendfile(6, 7, NULL, 140737974943952 [pid 588] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 588] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 588] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 588] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 588] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[591]}, 88) = 591 ./strace-static-x86_64: Process 591 attached [pid 591] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 591] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 591] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 588] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 588] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 591] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 591] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 591] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 588] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 588] <... futex resumed>) = 0 [pid 591] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 588] exit_group(0 [pid 591] <... futex resumed>) = ? [pid 588] <... exit_group resumed>) = ? [pid 591] +++ exited with 0 +++ [pid 589] <... sendfile resumed>) = ? [pid 589] +++ exited with 0 +++ [pid 588] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=588, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./67/binderfs") = 0 umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./67/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./67") = 0 mkdir("./68", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 592 ./strace-static-x86_64: Process 592 attached [pid 592] set_robust_list(0x555556b826a0, 24) = 0 [pid 592] chdir("./68") = 0 [pid 592] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 592] setpgid(0, 0) = 0 [pid 592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 592] write(3, "1000", 4) = 4 [pid 592] close(3) = 0 [pid 592] symlink("/dev/binderfs", "./binderfs") = 0 [pid 592] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 592] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 592] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 592] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 592] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[593]}, 88) = 593 [pid 592] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 593 attached [pid 593] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 593] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 593] memfd_create("syzkaller", 0) = 3 [pid 593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 593] munmap(0x7f9627d89000, 262144) = 0 [pid 593] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 593] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 593] close(3) = 0 [pid 593] mkdir("./file0", 0777) = 0 [pid 593] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 593] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 593] chdir("./file0") = 0 [pid 593] ioctl(4, LOOP_CLR_FD) = 0 [pid 593] close(4) = 0 [pid 593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = 1 [pid 593] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = 1 [pid 593] creat("./bus", 000) = 6 [pid 593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = 1 [pid 593] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 593] open("./bus", O_RDONLY [pid 592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] <... open resumed>) = 7 [pid 592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 593] <... futex resumed>) = 0 [pid 592] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] sendfile(6, 7, NULL, 140737974943952 [pid 592] <... futex resumed>) = 0 [ 41.085042][ T593] loop0: detected capacity change from 0 to 512 [ 41.096121][ T593] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 41.109434][ T593] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 41.119230][ T593] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 592] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 592] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 592] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 592] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 592] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 596 attached => {parent_tid=[596]}, 88) = 596 [pid 596] set_robust_list(0x7f9627dc89a0, 24 [pid 592] rt_sigprocmask(SIG_SETMASK, [], [pid 596] <... set_robust_list resumed>) = 0 [pid 592] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 596] rt_sigprocmask(SIG_SETMASK, [], [pid 592] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 592] <... futex resumed>) = 0 [pid 596] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 592] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... mmap resumed>) = 0x20000000 [pid 596] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 596] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 596] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] exit_group(0) = ? [pid 596] <... futex resumed>) = ? [pid 593] <... sendfile resumed>) = ? [pid 596] +++ exited with 0 +++ [pid 593] +++ exited with 0 +++ [pid 592] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=592, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./68/binderfs") = 0 umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./68/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./68") = 0 mkdir("./69", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 597 ./strace-static-x86_64: Process 597 attached [pid 597] set_robust_list(0x555556b826a0, 24) = 0 [pid 597] chdir("./69") = 0 [pid 597] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 597] setpgid(0, 0) = 0 [pid 597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 597] write(3, "1000", 4) = 4 [pid 597] close(3) = 0 [pid 597] symlink("/dev/binderfs", "./binderfs") = 0 [pid 597] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 597] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 597] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[598]}, 88) = 598 [pid 597] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 598 attached NULL, 8) = 0 [pid 598] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 598] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 598] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 597] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 598] memfd_create("syzkaller", 0 [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 598] <... memfd_create resumed>) = 3 [pid 598] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 598] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 598] munmap(0x7f9627d89000, 262144) = 0 [pid 598] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 598] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 598] close(3) = 0 [pid 598] mkdir("./file0", 0777) = 0 [pid 598] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 598] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 598] chdir("./file0") = 0 [pid 598] ioctl(4, LOOP_CLR_FD) = 0 [pid 598] close(4) = 0 [pid 598] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... futex resumed>) = 1 [pid 598] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 598] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... futex resumed>) = 1 [pid 598] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 598] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... futex resumed>) = 1 [pid 598] creat("./bus", 000) = 6 [pid 598] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... futex resumed>) = 0 [pid 598] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 598] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 597] <... futex resumed>) = 0 [pid 598] open("./bus", O_RDONLY [pid 597] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... open resumed>) = 7 [pid 598] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... futex resumed>) = 1 [ 41.377942][ T598] loop0: detected capacity change from 0 to 512 [ 41.387052][ T598] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 41.400624][ T598] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 41.410592][ T598] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 598] sendfile(6, 7, NULL, 140737974943952 [pid 597] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 597] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 597] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 597] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[600]}, 88) = 600 [pid 597] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 597] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 600 attached [pid 600] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 600] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 600] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 600] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 597] <... futex resumed>) = 0 [pid 600] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 597] exit_group(0 [pid 600] <... futex resumed>) = ? [pid 597] <... exit_group resumed>) = ? [pid 598] <... sendfile resumed>) = ? [pid 598] +++ exited with 0 +++ [pid 600] +++ exited with 0 +++ [pid 597] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=597, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./69/binderfs") = 0 umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./69/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./69") = 0 mkdir("./70", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 602 ./strace-static-x86_64: Process 602 attached [pid 602] set_robust_list(0x555556b826a0, 24) = 0 [pid 602] chdir("./70") = 0 [pid 602] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 602] setpgid(0, 0) = 0 [pid 602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 602] write(3, "1000", 4) = 4 [pid 602] close(3) = 0 [pid 602] symlink("/dev/binderfs", "./binderfs") = 0 [pid 602] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 602] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 602] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 602] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 602] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[603]}, 88) = 603 [pid 602] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 602] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 603 attached [pid 603] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 603] memfd_create("syzkaller", 0) = 3 [pid 603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 603] munmap(0x7f9627d89000, 262144) = 0 [pid 603] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 603] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 603] close(3) = 0 [pid 603] mkdir("./file0", 0777) = 0 [pid 603] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 603] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 603] chdir("./file0") = 0 [pid 603] ioctl(4, LOOP_CLR_FD) = 0 [pid 603] close(4) = 0 [pid 603] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 1 [pid 603] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 603] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 1 [pid 603] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 603] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 1 [pid 603] creat("./bus", 000) = 6 [pid 603] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 603] <... futex resumed>) = 1 [pid 602] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 603] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 603] open("./bus", O_RDONLY [pid 602] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... open resumed>) = 7 [pid 603] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 603] sendfile(6, 7, NULL, 140737974943952 [pid 602] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 41.704223][ T603] loop0: detected capacity change from 0 to 512 [ 41.711949][ T603] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 41.725014][ T603] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 41.734763][ T603] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 602] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 602] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 602] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 602] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 602] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[605]}, 88) = 605 ./strace-static-x86_64: Process 605 attached [pid 602] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 602] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 605] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 605] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 605] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 605] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 602] exit_group(0 [pid 605] <... futex resumed>) = ? [pid 602] <... exit_group resumed>) = ? [pid 605] +++ exited with 0 +++ [pid 603] <... sendfile resumed>) = ? [pid 603] +++ exited with 0 +++ [pid 602] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=602, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./70/binderfs") = 0 umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./70/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./70") = 0 mkdir("./71", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 606 ./strace-static-x86_64: Process 606 attached [pid 606] set_robust_list(0x555556b826a0, 24) = 0 [pid 606] chdir("./71") = 0 [pid 606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 606] setpgid(0, 0) = 0 [pid 606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 606] write(3, "1000", 4) = 4 [pid 606] close(3) = 0 [pid 606] symlink("/dev/binderfs", "./binderfs") = 0 [pid 606] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 606] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 606] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[607]}, 88) = 607 [pid 606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 606] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 607 attached [pid 607] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 607] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 607] memfd_create("syzkaller", 0) = 3 [pid 607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 607] munmap(0x7f9627d89000, 262144) = 0 [pid 607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 607] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 607] close(3) = 0 [pid 607] mkdir("./file0", 0777) = 0 [pid 607] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 607] chdir("./file0") = 0 [pid 607] ioctl(4, LOOP_CLR_FD) = 0 [pid 607] close(4) = 0 [pid 607] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 607] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 0 [pid 607] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 607] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 1 [pid 607] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 607] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 1 [pid 607] creat("./bus", 000) = 6 [pid 607] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 1 [pid 607] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 607] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 1 [pid 607] open("./bus", O_RDONLY) = 7 [pid 607] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 1 [ 42.001849][ T607] loop0: detected capacity change from 0 to 512 [ 42.010250][ T607] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 42.023241][ T607] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 42.033044][ T607] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 607] sendfile(6, 7, NULL, 140737974943952 [pid 606] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 606] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 606] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 606] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 609 attached [pid 609] set_robust_list(0x7f9627dc89a0, 24 [pid 606] <... clone3 resumed> => {parent_tid=[609]}, 88) = 609 [pid 606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 606] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... set_robust_list resumed>) = 0 [pid 609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 609] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 609] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 609] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] <... futex resumed>) = 0 [pid 609] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] exit_group(0 [pid 609] <... futex resumed>) = ? [pid 606] <... exit_group resumed>) = ? [pid 609] +++ exited with 0 +++ [pid 607] <... sendfile resumed>) = ? [pid 607] +++ exited with 0 +++ [pid 606] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=606, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./71/binderfs") = 0 umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./71/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./71") = 0 mkdir("./72", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 610 ./strace-static-x86_64: Process 610 attached [pid 610] set_robust_list(0x555556b826a0, 24) = 0 [pid 610] chdir("./72") = 0 [pid 610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 610] setpgid(0, 0) = 0 [pid 610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 610] write(3, "1000", 4) = 4 [pid 610] close(3) = 0 [pid 610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 610] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 610] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 611 attached => {parent_tid=[611]}, 88) = 611 [pid 611] set_robust_list(0x7f96301a99a0, 24 [pid 610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 610] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... set_robust_list resumed>) = 0 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 611] memfd_create("syzkaller", 0) = 3 [pid 611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 611] munmap(0x7f9627d89000, 262144) = 0 [pid 611] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 611] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 611] close(3) = 0 [pid 611] mkdir("./file0", 0777) = 0 [pid 611] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 611] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 611] chdir("./file0") = 0 [pid 611] ioctl(4, LOOP_CLR_FD) = 0 [pid 611] close(4) = 0 [pid 611] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 611] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 611] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] creat("./bus", 000) = 6 [pid 611] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 611] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] open("./bus", O_RDONLY) = 7 [pid 611] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [ 42.293422][ T611] loop0: detected capacity change from 0 to 512 [ 42.301732][ T611] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 42.314921][ T611] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 42.324476][ T611] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 611] sendfile(6, 7, NULL, 140737974943952 [pid 610] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 610] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 610] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[613]}, 88) = 613 [pid 610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 610] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 613 attached [pid 613] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 613] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 613] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... futex resumed>) = 1 [pid 613] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 613] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 610] <... futex resumed>) = 0 [pid 613] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 610] exit_group(0) = ? [pid 613] <... futex resumed>) = ? [pid 613] +++ exited with 0 +++ [pid 611] <... sendfile resumed>) = ? [pid 611] +++ exited with 0 +++ [pid 610] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=610, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./72/binderfs") = 0 umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./72/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./72") = 0 mkdir("./73", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 614 ./strace-static-x86_64: Process 614 attached [pid 614] set_robust_list(0x555556b826a0, 24) = 0 [pid 614] chdir("./73") = 0 [pid 614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 614] setpgid(0, 0) = 0 [pid 614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 614] write(3, "1000", 4) = 4 [pid 614] close(3) = 0 [pid 614] symlink("/dev/binderfs", "./binderfs") = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 614] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 614] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 614] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[615]}, 88) = 615 [pid 614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 614] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 615 attached [pid 615] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 615] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 615] memfd_create("syzkaller", 0) = 3 [pid 615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 615] munmap(0x7f9627d89000, 262144) = 0 [pid 615] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 615] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 615] close(3) = 0 [pid 615] mkdir("./file0", 0777) = 0 [pid 615] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 615] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 615] chdir("./file0") = 0 [pid 615] ioctl(4, LOOP_CLR_FD) = 0 [pid 615] close(4) = 0 [pid 615] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 615] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 615] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] creat("./bus", 000) = 6 [pid 615] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 615] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] open("./bus", O_RDONLY) = 7 [pid 615] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [ 42.608390][ T615] loop0: detected capacity change from 0 to 512 [ 42.616660][ T615] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 42.630041][ T615] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 42.639657][ T615] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 615] sendfile(6, 7, NULL, 140737974943952 [pid 614] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 614] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 614] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 614] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 614] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 618 attached => {parent_tid=[618]}, 88) = 618 [pid 614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 614] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 618] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 618] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 618] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 614] <... futex resumed>) = 0 [pid 618] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 614] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 618] <... futex resumed>) = 0 [pid 618] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 618] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 618] <... futex resumed>) = 1 [pid 618] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] exit_group(0 [pid 618] <... futex resumed>) = ? [pid 614] <... exit_group resumed>) = ? [pid 618] +++ exited with 0 +++ [pid 615] <... sendfile resumed>) = ? [pid 615] +++ exited with 0 +++ [pid 614] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=614, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./73/binderfs") = 0 umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./73/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./73") = 0 mkdir("./74", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 619 ./strace-static-x86_64: Process 619 attached [pid 619] set_robust_list(0x555556b826a0, 24) = 0 [pid 619] chdir("./74") = 0 [pid 619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 619] setpgid(0, 0) = 0 [pid 619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 619] write(3, "1000", 4) = 4 [pid 619] close(3) = 0 [pid 619] symlink("/dev/binderfs", "./binderfs") = 0 [pid 619] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 619] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 619] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 619] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[620]}, 88) = 620 [pid 619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 619] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 620 attached [pid 620] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 620] memfd_create("syzkaller", 0) = 3 [pid 620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 620] munmap(0x7f9627d89000, 262144) = 0 [pid 620] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 620] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 620] close(3) = 0 [pid 620] mkdir("./file0", 0777) = 0 [pid 620] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 620] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 620] chdir("./file0") = 0 [pid 620] ioctl(4, LOOP_CLR_FD) = 0 [pid 620] close(4) = 0 [pid 620] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] <... futex resumed>) = 1 [pid 620] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 620] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 620] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 619] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 619] <... futex resumed>) = 0 [pid 620] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 619] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] <... open resumed>) = 5 [pid 620] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 620] creat("./bus", 000 [pid 619] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 620] <... creat resumed>) = 6 [pid 619] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 620] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 620] open("./bus", O_RDONLY) = 7 [pid 620] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 42.882219][ T620] loop0: detected capacity change from 0 to 512 [ 42.890236][ T620] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 42.903663][ T620] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 42.913382][ T620] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 620] sendfile(6, 7, NULL, 140737974943952 [pid 619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 619] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 619] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 619] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[622]}, 88) = 622 ./strace-static-x86_64: Process 622 attached [pid 622] set_robust_list(0x7f9627dc89a0, 24 [pid 619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 622] <... set_robust_list resumed>) = 0 [pid 619] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 619] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 622] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 622] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] sendmsg(-1, 0x20000000, 0 [pid 619] <... futex resumed>) = 0 [pid 619] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 622] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 622] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 622] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 619] exit_group(0) = ? [pid 622] <... futex resumed>) = ? [pid 622] +++ exited with 0 +++ [pid 620] <... sendfile resumed>) = ? [pid 620] +++ exited with 0 +++ [pid 619] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=619, si_uid=0, si_status=0, si_utime=0, si_stime=19} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./74/binderfs") = 0 umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./74/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./74") = 0 mkdir("./75", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 623 ./strace-static-x86_64: Process 623 attached [pid 623] set_robust_list(0x555556b826a0, 24) = 0 [pid 623] chdir("./75") = 0 [pid 623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 623] setpgid(0, 0) = 0 [pid 623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 623] write(3, "1000", 4) = 4 [pid 623] close(3) = 0 [pid 623] symlink("/dev/binderfs", "./binderfs") = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 623] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 623] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 623] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 623] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[624]}, 88) = 624 [pid 623] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 624 attached [pid 624] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 624] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 624] memfd_create("syzkaller", 0) = 3 [pid 624] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 624] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 624] munmap(0x7f9627d89000, 262144) = 0 [pid 624] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 624] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 624] close(3) = 0 [pid 624] mkdir("./file0", 0777) = 0 [pid 624] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 624] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 624] chdir("./file0") = 0 [pid 624] ioctl(4, LOOP_CLR_FD) = 0 [pid 624] close(4) = 0 [pid 624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 624] <... futex resumed>) = 1 [pid 624] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 624] <... futex resumed>) = 1 [pid 624] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 624] <... futex resumed>) = 1 [pid 624] creat("./bus", 000) = 6 [pid 624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 624] <... futex resumed>) = 1 [pid 624] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 624] <... futex resumed>) = 1 [pid 624] open("./bus", O_RDONLY) = 7 [pid 624] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 623] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 624] <... futex resumed>) = 1 [ 43.214696][ T624] loop0: detected capacity change from 0 to 512 [ 43.222779][ T624] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 43.236140][ T624] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 43.245760][ T624] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 624] sendfile(6, 7, NULL, 140737974943952 [pid 623] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 623] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 623] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 623] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 623] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[626]}, 88) = 626 ./strace-static-x86_64: Process 626 attached [pid 626] set_robust_list(0x7f9627dc89a0, 24 [pid 623] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 626] <... set_robust_list resumed>) = 0 [pid 623] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] rt_sigprocmask(SIG_SETMASK, [], [pid 623] <... futex resumed>) = 0 [pid 623] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 626] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 626] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 626] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = 1 [pid 623] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 626] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 626] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 623] <... futex resumed>) = 0 [pid 626] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 623] exit_group(0 [pid 626] <... futex resumed>) = ? [pid 623] <... exit_group resumed>) = ? [pid 626] +++ exited with 0 +++ [pid 624] <... sendfile resumed>) = ? [pid 624] +++ exited with 0 +++ [pid 623] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=623, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./75/binderfs") = 0 umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./75/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./75") = 0 mkdir("./76", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 627 ./strace-static-x86_64: Process 627 attached [pid 627] set_robust_list(0x555556b826a0, 24) = 0 [pid 627] chdir("./76") = 0 [pid 627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 627] setpgid(0, 0) = 0 [pid 627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 627] write(3, "1000", 4) = 4 [pid 627] close(3) = 0 [pid 627] symlink("/dev/binderfs", "./binderfs") = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 627] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 627] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 627] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[628]}, 88) = 628 [pid 627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 628 attached [pid 628] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 628] memfd_create("syzkaller", 0) = 3 [pid 628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 628] munmap(0x7f9627d89000, 262144) = 0 [pid 628] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 628] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 628] close(3) = 0 [pid 628] mkdir("./file0", 0777) = 0 [pid 628] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 628] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 628] chdir("./file0") = 0 [pid 628] ioctl(4, LOOP_CLR_FD) = 0 [pid 628] close(4) = 0 [pid 628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [pid 627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 1 [pid 628] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [pid 627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 1 [pid 628] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [pid 627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 1 [pid 628] creat("./bus", 000) = 6 [pid 628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [pid 627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 1 [pid 628] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [pid 627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 1 [pid 628] open("./bus", O_RDONLY) = 7 [pid 628] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = 0 [pid 627] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 628] <... futex resumed>) = 1 [ 43.531263][ T628] loop0: detected capacity change from 0 to 512 [ 43.539310][ T628] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 43.552605][ T628] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 43.570309][ T628] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 628] sendfile(6, 7, NULL, 140737974943952 [pid 627] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 627] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 627] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 627] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 627] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[630]}, 88) = 630 ./strace-static-x86_64: Process 630 attached [pid 630] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 630] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 627] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] <... futex resumed>) = 0 [pid 627] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 630] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 630] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 627] <... futex resumed>) = 0 [pid 630] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 627] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 627] <... futex resumed>) = 0 [pid 630] sendmsg(-1, 0x20000000, 0 [pid 627] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 630] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 630] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 627] <... futex resumed>) = 0 [pid 630] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 627] exit_group(0) = ? [pid 630] <... futex resumed>) = 230 [pid 630] +++ exited with 0 +++ [pid 628] <... sendfile resumed>) = ? [pid 628] +++ exited with 0 +++ [pid 627] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=627, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./76/binderfs") = 0 umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./76/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./76") = 0 mkdir("./77", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 632 ./strace-static-x86_64: Process 632 attached [pid 632] set_robust_list(0x555556b826a0, 24) = 0 [pid 632] chdir("./77") = 0 [pid 632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 632] setpgid(0, 0) = 0 [pid 632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 632] write(3, "1000", 4) = 4 [pid 632] close(3) = 0 [pid 632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 632] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 632] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 632] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 632] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[633]}, 88) = 633 [pid 632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 632] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 633 attached [pid 633] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 633] memfd_create("syzkaller", 0) = 3 [pid 633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 633] munmap(0x7f9627d89000, 262144) = 0 [pid 633] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 633] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 633] close(3) = 0 [pid 633] mkdir("./file0", 0777) = 0 [pid 633] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 633] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 633] chdir("./file0") = 0 [pid 633] ioctl(4, LOOP_CLR_FD) = 0 [pid 633] close(4) = 0 [pid 633] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 633] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 633] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] creat("./bus", 000) = 6 [pid 633] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 633] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] open("./bus", O_RDONLY) = 7 [pid 633] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [ 43.840066][ T633] loop0: detected capacity change from 0 to 512 [ 43.848682][ T633] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 43.862338][ T633] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 43.871978][ T633] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 633] sendfile(6, 7, NULL, 140737974943952 [pid 632] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 632] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 632] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 632] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 632] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[635]}, 88) = 635 ./strace-static-x86_64: Process 635 attached [pid 635] set_robust_list(0x7f9627dc89a0, 24 [pid 632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 635] <... set_robust_list resumed>) = 0 [pid 632] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 635] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 635] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = 1 [pid 635] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] exit_group(0) = ? [pid 635] <... futex resumed>) = ? [pid 633] <... sendfile resumed>) = ? [pid 633] +++ exited with 0 +++ [pid 635] +++ exited with 0 +++ [pid 632] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=632, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./77/binderfs") = 0 umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./77/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./77") = 0 mkdir("./78", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 636 ./strace-static-x86_64: Process 636 attached [pid 636] set_robust_list(0x555556b826a0, 24) = 0 [pid 636] chdir("./78") = 0 [pid 636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 636] setpgid(0, 0) = 0 [pid 636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 636] write(3, "1000", 4) = 4 [pid 636] close(3) = 0 [pid 636] symlink("/dev/binderfs", "./binderfs") = 0 [pid 636] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 636] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 636] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[637]}, 88) = 637 [pid 636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 636] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 637 attached [pid 637] set_robust_list(0x7f96301a99a0, 24 [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 637] <... set_robust_list resumed>) = 0 [pid 637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 637] memfd_create("syzkaller", 0) = 3 [pid 637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 637] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 637] munmap(0x7f9627d89000, 262144) = 0 [pid 637] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 637] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 637] close(3) = 0 [pid 637] mkdir("./file0", 0777) = 0 [pid 637] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 637] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 637] chdir("./file0") = 0 [pid 637] ioctl(4, LOOP_CLR_FD) = 0 [pid 637] close(4) = 0 [pid 637] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... futex resumed>) = 1 [pid 637] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 637] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 637] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] creat("./bus", 000) = 6 [pid 637] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 637] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] open("./bus", O_RDONLY) = 7 [pid 637] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 44.172045][ T637] loop0: detected capacity change from 0 to 512 [ 44.180812][ T637] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 44.194048][ T637] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 44.203955][ T637] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 637] sendfile(6, 7, NULL, 140737974943952 [pid 636] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 636] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 636] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 636] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 639 attached [pid 639] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 639] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 636] <... clone3 resumed> => {parent_tid=[639]}, 88) = 639 [pid 636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 636] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 639] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 639] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... futex resumed>) = 1 [pid 639] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 639] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 639] <... futex resumed>) = 1 [pid 639] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 636] exit_group(0) = ? [pid 639] <... futex resumed>) = ? [pid 639] +++ exited with 0 +++ [pid 637] <... sendfile resumed>) = ? [pid 637] +++ exited with 0 +++ [pid 636] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=636, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./78/binderfs") = 0 umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./78/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./78") = 0 mkdir("./79", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 640 ./strace-static-x86_64: Process 640 attached [pid 640] set_robust_list(0x555556b826a0, 24) = 0 [pid 640] chdir("./79") = 0 [pid 640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 640] setpgid(0, 0) = 0 [pid 640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 640] write(3, "1000", 4) = 4 [pid 640] close(3) = 0 [pid 640] symlink("/dev/binderfs", "./binderfs") = 0 [pid 640] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 640] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 640] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 640] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 641 attached => {parent_tid=[641]}, 88) = 641 [pid 640] rt_sigprocmask(SIG_SETMASK, [], [pid 641] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 640] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 641] rt_sigprocmask(SIG_SETMASK, [], [pid 640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 641] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 641] memfd_create("syzkaller", 0) = 3 [pid 641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 641] munmap(0x7f9627d89000, 262144) = 0 [pid 641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 641] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 641] close(3) = 0 [pid 641] mkdir("./file0", 0777) = 0 [pid 641] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 641] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 641] chdir("./file0") = 0 [pid 641] ioctl(4, LOOP_CLR_FD) = 0 [pid 641] close(4) = 0 [pid 641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 641] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 0 [pid 641] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 641] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 0 [pid 641] creat("./bus", 000) = 6 [pid 641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] open("./bus", O_RDONLY) = 7 [pid 641] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [ 44.494209][ T641] loop0: detected capacity change from 0 to 512 [ 44.502233][ T641] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 44.515477][ T641] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 44.525566][ T641] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 641] sendfile(6, 7, NULL, 140737974943952 [pid 640] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 640] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 640] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 640] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 643 attached [pid 643] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 643] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 640] <... clone3 resumed> => {parent_tid=[643]}, 88) = 643 [pid 640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 640] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] <... futex resumed>) = 0 [pid 640] <... futex resumed>) = 1 [pid 643] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 640] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] <... mmap resumed>) = 0x20000000 [pid 643] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 643] <... futex resumed>) = 1 [pid 640] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 643] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 640] <... futex resumed>) = 0 [pid 643] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 640] exit_group(0 [pid 643] <... futex resumed>) = ? [pid 640] <... exit_group resumed>) = ? [pid 643] +++ exited with 0 +++ [pid 641] <... sendfile resumed>) = ? [pid 641] +++ exited with 0 +++ [pid 640] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=640, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./79/binderfs") = 0 umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./79/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./79") = 0 mkdir("./80", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 645 ./strace-static-x86_64: Process 645 attached [pid 645] set_robust_list(0x555556b826a0, 24) = 0 [pid 645] chdir("./80") = 0 [pid 645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 645] setpgid(0, 0) = 0 [pid 645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 645] write(3, "1000", 4) = 4 [pid 645] close(3) = 0 [pid 645] symlink("/dev/binderfs", "./binderfs") = 0 [pid 645] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 645] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 645] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 645] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[646]}, 88) = 646 [pid 645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 645] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 646 attached [pid 646] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 646] memfd_create("syzkaller", 0) = 3 [pid 646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 646] munmap(0x7f9627d89000, 262144) = 0 [pid 646] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 646] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 646] close(3) = 0 [pid 646] mkdir("./file0", 0777) = 0 [pid 646] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 646] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 646] chdir("./file0") = 0 [pid 646] ioctl(4, LOOP_CLR_FD) = 0 [pid 646] close(4) = 0 [pid 646] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 646] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 645] <... futex resumed>) = 0 [pid 645] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] <... futex resumed>) = 0 [pid 646] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 646] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 645] <... futex resumed>) = 0 [pid 646] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 645] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] <... open resumed>) = 5 [pid 645] <... futex resumed>) = 0 [pid 646] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] <... futex resumed>) = 0 [pid 646] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 645] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] creat("./bus", 000 [pid 645] <... futex resumed>) = 0 [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] <... creat resumed>) = 6 [pid 646] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 645] <... futex resumed>) = 0 [pid 646] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 645] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] <... writev resumed>) = 1 [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 646] <... futex resumed>) = 0 [pid 645] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] open("./bus", O_RDONLY [pid 645] <... futex resumed>) = 0 [pid 646] <... open resumed>) = 7 [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 646] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 646] <... futex resumed>) = 0 [pid 645] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] sendfile(6, 7, NULL, 140737974943952 [pid 645] <... futex resumed>) = 0 [ 44.813658][ T646] loop0: detected capacity change from 0 to 512 [ 44.821830][ T646] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 44.834958][ T646] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 44.844414][ T646] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 645] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 645] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 645] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 648 attached [pid 648] set_robust_list(0x7f9627dc89a0, 24 [pid 645] <... clone3 resumed> => {parent_tid=[648]}, 88) = 648 [pid 648] <... set_robust_list resumed>) = 0 [pid 645] rt_sigprocmask(SIG_SETMASK, [], [pid 648] rt_sigprocmask(SIG_SETMASK, [], [pid 645] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 648] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 645] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 645] <... futex resumed>) = 0 [pid 645] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 648] <... mmap resumed>) = 0x20000000 [pid 648] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 645] <... futex resumed>) = 0 [pid 645] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] sendmsg(-1, 0x20000000, 0 [pid 645] <... futex resumed>) = 0 [pid 648] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 645] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 648] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 648] <... futex resumed>) = 0 [pid 648] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 645] exit_group(0 [pid 648] <... futex resumed>) = ? [pid 645] <... exit_group resumed>) = ? [pid 648] +++ exited with 0 +++ [pid 646] <... sendfile resumed>) = ? [pid 646] +++ exited with 0 +++ [pid 645] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=645, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./80/binderfs") = 0 umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./80/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./80") = 0 mkdir("./81", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 649 ./strace-static-x86_64: Process 649 attached [pid 649] set_robust_list(0x555556b826a0, 24) = 0 [pid 649] chdir("./81") = 0 [pid 649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 649] setpgid(0, 0) = 0 [pid 649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 649] write(3, "1000", 4) = 4 [pid 649] close(3) = 0 [pid 649] symlink("/dev/binderfs", "./binderfs") = 0 [pid 649] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 649] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 649] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 649] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[650]}, 88) = 650 [pid 649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 649] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 650 attached [pid 650] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 650] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 650] memfd_create("syzkaller", 0) = 3 [pid 650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 650] munmap(0x7f9627d89000, 262144) = 0 [pid 650] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 650] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 650] close(3) = 0 [pid 650] mkdir("./file0", 0777) = 0 [pid 650] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 650] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 650] chdir("./file0") = 0 [pid 650] ioctl(4, LOOP_CLR_FD) = 0 [pid 650] close(4) = 0 [pid 650] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 650] <... futex resumed>) = 1 [pid 650] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 650] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 650] <... futex resumed>) = 1 [pid 650] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 650] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 650] <... futex resumed>) = 1 [pid 650] creat("./bus", 000) = 6 [pid 650] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 650] <... futex resumed>) = 1 [pid 650] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 650] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 649] <... futex resumed>) = 0 [pid 650] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 649] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 649] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 650] <... futex resumed>) = 0 [pid 650] open("./bus", O_RDONLY) = 7 [pid 650] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 45.109147][ T650] loop0: detected capacity change from 0 to 512 [ 45.117220][ T650] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 45.130153][ T650] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 45.139881][ T650] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 650] sendfile(6, 7, NULL, 140737974943952 [pid 649] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 649] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 649] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 649] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[652]}, 88) = 652 [pid 649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 649] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 652 attached [pid 652] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 652] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 652] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 649] <... futex resumed>) = 0 [pid 649] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 652] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 652] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 649] <... futex resumed>) = 0 [pid 652] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 649] exit_group(0 [pid 652] <... futex resumed>) = ? [pid 649] <... exit_group resumed>) = ? [pid 652] +++ exited with 0 +++ [pid 650] <... sendfile resumed>) = ? [pid 650] +++ exited with 0 +++ [pid 649] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=649, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./81/binderfs") = 0 umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./81/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./81") = 0 mkdir("./82", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 653 ./strace-static-x86_64: Process 653 attached [pid 653] set_robust_list(0x555556b826a0, 24) = 0 [pid 653] chdir("./82") = 0 [pid 653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 653] setpgid(0, 0) = 0 [pid 653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 653] write(3, "1000", 4) = 4 [pid 653] close(3) = 0 [pid 653] symlink("/dev/binderfs", "./binderfs") = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 653] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 653] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 653] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[654]}, 88) = 654 [pid 653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 654 attached [pid 654] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 654] memfd_create("syzkaller", 0) = 3 [pid 654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 654] munmap(0x7f9627d89000, 262144) = 0 [pid 654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 654] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 654] close(3) = 0 [pid 654] mkdir("./file0", 0777) = 0 [pid 654] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 654] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 654] chdir("./file0") = 0 [pid 654] ioctl(4, LOOP_CLR_FD) = 0 [pid 654] close(4) = 0 [pid 654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... futex resumed>) = 1 [pid 654] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... futex resumed>) = 1 [pid 654] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... futex resumed>) = 1 [pid 654] creat("./bus", 000) = 6 [pid 654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... futex resumed>) = 1 [pid 654] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... futex resumed>) = 1 [pid 654] open("./bus", O_RDONLY) = 7 [pid 654] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 653] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 654] <... futex resumed>) = 1 [ 45.452884][ T654] loop0: detected capacity change from 0 to 512 [ 45.461207][ T654] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 45.474581][ T654] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 45.485046][ T654] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 654] sendfile(6, 7, NULL, 140737974943952 [pid 653] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 653] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 653] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 653] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 653] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[656]}, 88) = 656 [pid 653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 653] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 656 attached [pid 656] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 656] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 656] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 656] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 656] <... futex resumed>) = 1 [pid 653] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 656] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 656] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 656] <... futex resumed>) = 1 [pid 656] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] exit_group(0 [pid 656] <... futex resumed>) = ? [pid 653] <... exit_group resumed>) = ? [pid 656] +++ exited with 0 +++ [pid 654] <... sendfile resumed>) = ? [pid 654] +++ exited with 0 +++ [pid 653] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=653, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./82/binderfs") = 0 umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./82/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./82") = 0 mkdir("./83", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 658 ./strace-static-x86_64: Process 658 attached [pid 658] set_robust_list(0x555556b826a0, 24) = 0 [pid 658] chdir("./83") = 0 [pid 658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 658] setpgid(0, 0) = 0 [pid 658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 658] write(3, "1000", 4) = 4 [pid 658] close(3) = 0 [pid 658] symlink("/dev/binderfs", "./binderfs") = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 658] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 658] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 658] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 658] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[659]}, 88) = 659 [pid 658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 658] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 659 attached [pid 659] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 659] memfd_create("syzkaller", 0) = 3 [pid 659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 659] munmap(0x7f9627d89000, 262144) = 0 [pid 659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 659] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 659] close(3) = 0 [pid 659] mkdir("./file0", 0777) = 0 [pid 659] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 659] chdir("./file0") = 0 [pid 659] ioctl(4, LOOP_CLR_FD) = 0 [pid 659] close(4) = 0 [pid 659] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 659] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 659] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] creat("./bus", 000) = 6 [pid 659] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 659] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] open("./bus", O_RDONLY) = 7 [pid 659] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [ 45.740410][ T659] loop0: detected capacity change from 0 to 512 [ 45.748588][ T659] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 45.762258][ T659] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 45.772593][ T659] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 659] sendfile(6, 7, NULL, 140737974943952 [pid 658] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 658] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 658] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 658] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 658] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 658] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 662 attached => {parent_tid=[662]}, 88) = 662 [pid 658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 658] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 662] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 662] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 662] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 662] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 662] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 662] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] <... futex resumed>) = 0 [pid 662] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 658] exit_group(0 [pid 662] <... futex resumed>) = ? [pid 658] <... exit_group resumed>) = ? [pid 662] +++ exited with 0 +++ [pid 659] <... sendfile resumed>) = 230 [pid 659] +++ exited with 0 +++ [pid 658] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=658, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./83/binderfs") = 0 umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./83/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./83") = 0 mkdir("./84", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 663 ./strace-static-x86_64: Process 663 attached [pid 663] set_robust_list(0x555556b826a0, 24) = 0 [pid 663] chdir("./84") = 0 [pid 663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 663] setpgid(0, 0) = 0 [pid 663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 663] write(3, "1000", 4) = 4 [pid 663] close(3) = 0 [pid 663] symlink("/dev/binderfs", "./binderfs") = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 663] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 663] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 663] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 663] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[664]}, 88) = 664 [pid 663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 663] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 664 attached [pid 664] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 664] memfd_create("syzkaller", 0) = 3 [pid 664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 664] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 664] munmap(0x7f9627d89000, 262144) = 0 [pid 664] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 664] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 664] close(3) = 0 [pid 664] mkdir("./file0", 0777) = 0 [pid 664] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 664] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 664] chdir("./file0") = 0 [pid 664] ioctl(4, LOOP_CLR_FD) = 0 [pid 664] close(4) = 0 [pid 664] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 1 [pid 664] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 664] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 1 [pid 664] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 664] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 1 [pid 664] creat("./bus", 000) = 6 [pid 664] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 1 [pid 664] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 664] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 1 [pid 664] open("./bus", O_RDONLY) = 7 [pid 664] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 1 [ 46.012284][ T664] loop0: detected capacity change from 0 to 512 [ 46.020064][ T664] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 46.040329][ T664] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 46.050060][ T664] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 664] sendfile(6, 7, NULL, 140737974943952 [pid 663] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 663] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 663] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 663] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 663] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 663] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 666 attached => {parent_tid=[666]}, 88) = 666 [pid 663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 663] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 666] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 666] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 666] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 663] <... futex resumed>) = 0 [pid 666] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] exit_group(0 [pid 666] <... futex resumed>) = ? [pid 663] <... exit_group resumed>) = ? [pid 666] +++ exited with 0 +++ [pid 664] <... sendfile resumed>) = ? [pid 664] +++ exited with 0 +++ [pid 663] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=663, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./84/binderfs") = 0 umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./84/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./84") = 0 mkdir("./85", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 667 ./strace-static-x86_64: Process 667 attached [pid 667] set_robust_list(0x555556b826a0, 24) = 0 [pid 667] chdir("./85") = 0 [pid 667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 667] setpgid(0, 0) = 0 [pid 667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 667] write(3, "1000", 4) = 4 [pid 667] close(3) = 0 [pid 667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 667] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 667] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 667] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 667] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[668]}, 88) = 668 [pid 667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 667] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 668 attached [pid 668] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 668] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 668] memfd_create("syzkaller", 0) = 3 [pid 668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 668] munmap(0x7f9627d89000, 262144) = 0 [pid 668] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 668] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 668] close(3) = 0 [pid 668] mkdir("./file0", 0777) = 0 [pid 668] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 668] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 668] chdir("./file0") = 0 [pid 668] ioctl(4, LOOP_CLR_FD) = 0 [pid 668] close(4) = 0 [pid 668] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 668] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 668] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] creat("./bus", 000) = 6 [pid 668] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 668] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] open("./bus", O_RDONLY) = 7 [pid 668] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [ 46.289945][ T668] loop0: detected capacity change from 0 to 512 [ 46.297907][ T668] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 46.311007][ T668] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 46.320502][ T668] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 668] sendfile(6, 7, NULL, 140737974943952 [pid 667] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 667] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 667] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 667] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 667] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 667] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[670]}, 88) = 670 [pid 667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 667] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 670 attached [pid 670] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 670] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 670] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... futex resumed>) = 1 [pid 670] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 670] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 670] <... futex resumed>) = 1 [pid 670] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 667] exit_group(0 [pid 670] <... futex resumed>) = ? [pid 667] <... exit_group resumed>) = ? [pid 670] +++ exited with 0 +++ [pid 668] <... sendfile resumed>) = ? [pid 668] +++ exited with 0 +++ [pid 667] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=667, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./85/binderfs") = 0 umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./85/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./85") = 0 mkdir("./86", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 671 ./strace-static-x86_64: Process 671 attached [pid 671] set_robust_list(0x555556b826a0, 24) = 0 [pid 671] chdir("./86") = 0 [pid 671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 671] setpgid(0, 0) = 0 [pid 671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 671] write(3, "1000", 4) = 4 [pid 671] close(3) = 0 [pid 671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 671] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 671] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 671] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 672 attached => {parent_tid=[672]}, 88) = 672 [pid 672] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 672] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 672] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 671] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 672] <... futex resumed>) = 0 [pid 672] memfd_create("syzkaller", 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 672] <... memfd_create resumed>) = 3 [pid 672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 672] munmap(0x7f9627d89000, 262144) = 0 [pid 672] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 672] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 672] close(3) = 0 [pid 672] mkdir("./file0", 0777) = 0 [pid 672] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 672] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 672] chdir("./file0") = 0 [pid 672] ioctl(4, LOOP_CLR_FD) = 0 [pid 672] close(4) = 0 [pid 672] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... futex resumed>) = 1 [pid 672] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 672] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... futex resumed>) = 1 [pid 672] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 672] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... futex resumed>) = 1 [pid 672] creat("./bus", 000) = 6 [pid 672] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... futex resumed>) = 1 [pid 672] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 672] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... futex resumed>) = 1 [pid 672] open("./bus", O_RDONLY) = 7 [pid 672] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 46.571134][ T672] loop0: detected capacity change from 0 to 512 [ 46.580688][ T672] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 46.594276][ T672] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 46.603828][ T672] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 672] sendfile(6, 7, NULL, 140737974943952 [pid 671] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 671] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 671] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 671] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[675]}, 88) = 675 ./strace-static-x86_64: Process 675 attached [pid 671] rt_sigprocmask(SIG_SETMASK, [], [pid 675] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 671] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 675] rt_sigprocmask(SIG_SETMASK, [], [pid 671] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 675] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 675] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 675] sendmsg(-1, 0x20000000, 0 [pid 671] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 675] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 675] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] exit_group(0 [pid 675] <... futex resumed>) = ? [pid 671] <... exit_group resumed>) = ? [pid 675] +++ exited with 0 +++ [pid 672] <... sendfile resumed>) = ? [pid 672] +++ exited with 0 +++ [pid 671] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=671, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./86/binderfs") = 0 umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./86/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./86") = 0 mkdir("./87", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 676 ./strace-static-x86_64: Process 676 attached [pid 676] set_robust_list(0x555556b826a0, 24) = 0 [pid 676] chdir("./87") = 0 [pid 676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 676] setpgid(0, 0) = 0 [pid 676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 676] write(3, "1000", 4) = 4 [pid 676] close(3) = 0 [pid 676] symlink("/dev/binderfs", "./binderfs") = 0 [pid 676] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 676] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 676] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 676] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 676] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[677]}, 88) = 677 [pid 676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 676] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 677 attached [pid 677] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 677] memfd_create("syzkaller", 0) = 3 [pid 677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 677] munmap(0x7f9627d89000, 262144) = 0 [pid 677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 677] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 677] close(3) = 0 [pid 677] mkdir("./file0", 0777) = 0 [pid 677] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 677] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 677] chdir("./file0") = 0 [pid 677] ioctl(4, LOOP_CLR_FD) = 0 [pid 677] close(4) = 0 [pid 677] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 677] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 0 [pid 677] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 677] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [pid 677] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 677] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [pid 677] creat("./bus", 000) = 6 [pid 677] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [pid 677] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 677] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [pid 677] open("./bus", O_RDONLY) = 7 [pid 677] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [ 46.853874][ T677] loop0: detected capacity change from 0 to 512 [ 46.862832][ T677] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 46.880681][ T677] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 46.892652][ T677] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 677] sendfile(6, 7, NULL, 140737974943952 [pid 676] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 676] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 676] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 676] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 676] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 676] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 679 attached => {parent_tid=[679]}, 88) = 679 [pid 676] rt_sigprocmask(SIG_SETMASK, [], [pid 679] set_robust_list(0x7f9627dc89a0, 24 [pid 676] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 676] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 679] <... set_robust_list resumed>) = 0 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 679] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 679] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 679] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 679] <... futex resumed>) = 1 [pid 679] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 679] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 679] <... futex resumed>) = 1 [pid 679] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 676] exit_group(0) = ? [pid 679] <... futex resumed>) = ? [pid 679] +++ exited with 0 +++ [pid 677] <... sendfile resumed>) = ? [pid 677] +++ exited with 0 +++ [pid 676] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=676, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./87/binderfs") = 0 umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./87/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./87") = 0 mkdir("./88", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 680 ./strace-static-x86_64: Process 680 attached [pid 680] set_robust_list(0x555556b826a0, 24) = 0 [pid 680] chdir("./88") = 0 [pid 680] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 680] setpgid(0, 0) = 0 [pid 680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 680] write(3, "1000", 4) = 4 [pid 680] close(3) = 0 [pid 680] symlink("/dev/binderfs", "./binderfs") = 0 [pid 680] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 680] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 680] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 680] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 680] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 680] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 681 attached => {parent_tid=[681]}, 88) = 681 [pid 681] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 680] rt_sigprocmask(SIG_SETMASK, [], [pid 681] rt_sigprocmask(SIG_SETMASK, [], [pid 680] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 681] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 680] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 681] memfd_create("syzkaller", 0 [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 681] <... memfd_create resumed>) = 3 [pid 681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 681] munmap(0x7f9627d89000, 262144) = 0 [pid 681] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 681] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 681] close(3) = 0 [pid 681] mkdir("./file0", 0777) = 0 [ 47.148279][ T681] loop0: detected capacity change from 0 to 512 [ 47.162334][ T681] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 47.179390][ T681] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 681] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 681] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 681] chdir("./file0") = 0 [pid 681] ioctl(4, LOOP_CLR_FD) = 0 [pid 681] close(4) = 0 [pid 681] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... futex resumed>) = 0 [pid 680] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] <... futex resumed>) = 1 [pid 681] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 681] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] <... futex resumed>) = 0 [pid 681] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 680] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] <... futex resumed>) = 0 [pid 681] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 681] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... futex resumed>) = 0 [pid 680] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] <... futex resumed>) = 1 [pid 681] creat("./bus", 000) = 6 [pid 681] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... futex resumed>) = 0 [pid 681] <... futex resumed>) = 1 [pid 680] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 681] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] <... futex resumed>) = 0 [pid 681] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 680] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 680] <... futex resumed>) = 0 [pid 681] open("./bus", O_RDONLY [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] <... open resumed>) = 7 [pid 681] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] <... futex resumed>) = 0 [pid 681] sendfile(6, 7, NULL, 140737974943952 [pid 680] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 47.190445][ T681] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 680] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 680] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 680] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 680] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 680] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[683]}, 88) = 683 ./strace-static-x86_64: Process 683 attached [pid 683] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 683] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 683] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 680] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 680] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = 0 [pid 680] <... futex resumed>) = 1 [pid 683] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 680] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 683] <... mmap resumed>) = 0x20000000 [pid 683] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] <... futex resumed>) = 0 [pid 680] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 683] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 683] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... futex resumed>) = 0 [pid 683] <... futex resumed>) = 1 [pid 683] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 680] exit_group(0 [pid 683] <... futex resumed>) = ? [pid 680] <... exit_group resumed>) = ? [pid 683] +++ exited with 0 +++ [pid 681] <... sendfile resumed>) = ? [pid 681] +++ exited with 0 +++ [pid 680] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=680, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./88/binderfs") = 0 umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./88/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./88") = 0 mkdir("./89", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 684 ./strace-static-x86_64: Process 684 attached [pid 684] set_robust_list(0x555556b826a0, 24) = 0 [pid 684] chdir("./89") = 0 [pid 684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 684] setpgid(0, 0) = 0 [pid 684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 684] write(3, "1000", 4) = 4 [pid 684] close(3) = 0 [pid 684] symlink("/dev/binderfs", "./binderfs") = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 684] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 684] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 684] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 684] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[685]}, 88) = 685 [pid 684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 684] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 685 attached [pid 685] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 685] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 685] memfd_create("syzkaller", 0) = 3 [pid 685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 685] munmap(0x7f9627d89000, 262144) = 0 [pid 685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 685] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 685] close(3) = 0 [pid 685] mkdir("./file0", 0777) = 0 [pid 685] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 685] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 685] chdir("./file0") = 0 [pid 685] ioctl(4, LOOP_CLR_FD) = 0 [pid 685] close(4) = 0 [pid 685] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 1 [pid 685] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 685] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 1 [pid 685] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 685] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 1 [pid 685] creat("./bus", 000) = 6 [pid 685] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 1 [pid 685] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 685] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 1 [pid 685] open("./bus", O_RDONLY) = 7 [pid 685] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 1 [ 47.488330][ T685] loop0: detected capacity change from 0 to 512 [ 47.497561][ T685] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 47.510725][ T685] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 47.520466][ T685] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 685] sendfile(6, 7, NULL, 140737974943952 [pid 684] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 684] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 684] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 684] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 684] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[687]}, 88) = 687 [pid 684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 684] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 687 attached [pid 687] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 687] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 687] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 687] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] <... futex resumed>) = 1 [pid 687] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 687] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 684] <... futex resumed>) = 0 [pid 687] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 684] exit_group(0 [pid 687] <... futex resumed>) = ? [pid 684] <... exit_group resumed>) = ? [pid 687] +++ exited with 0 +++ [pid 685] <... sendfile resumed>) = ? [pid 685] +++ exited with 0 +++ [pid 684] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=684, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./89/binderfs") = 0 umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./89/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./89") = 0 mkdir("./90", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 689 ./strace-static-x86_64: Process 689 attached [pid 689] set_robust_list(0x555556b826a0, 24) = 0 [pid 689] chdir("./90") = 0 [pid 689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 689] setpgid(0, 0) = 0 [pid 689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 689] write(3, "1000", 4) = 4 [pid 689] close(3) = 0 [pid 689] symlink("/dev/binderfs", "./binderfs") = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 689] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 689] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 689] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[690]}, 88) = 690 [pid 689] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 689] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 690 attached [pid 690] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 690] memfd_create("syzkaller", 0) = 3 [pid 690] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 690] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 690] munmap(0x7f9627d89000, 262144) = 0 [pid 690] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 690] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 690] close(3) = 0 [pid 690] mkdir("./file0", 0777) = 0 [pid 690] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 690] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 690] chdir("./file0") = 0 [pid 690] ioctl(4, LOOP_CLR_FD) = 0 [pid 690] close(4) = 0 [pid 690] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = 1 [pid 690] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 690] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = 1 [pid 690] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 690] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = 1 [pid 690] creat("./bus", 000) = 6 [pid 690] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = 1 [pid 690] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 690] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = 1 [pid 690] open("./bus", O_RDONLY) = 7 [pid 690] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = 1 [ 47.776630][ T690] loop0: detected capacity change from 0 to 512 [ 47.784990][ T690] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 47.798318][ T690] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 47.807880][ T690] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 690] sendfile(6, 7, NULL, 140737974943952 [pid 689] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 689] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 689] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 689] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[692]}, 88) = 692 [pid 689] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 689] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 692 attached [pid 692] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 692] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 692] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 692] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 689] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... futex resumed>) = 1 [pid 692] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 692] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = 0 [pid 692] <... futex resumed>) = 1 [pid 692] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 689] exit_group(0 [pid 692] <... futex resumed>) = ? [pid 689] <... exit_group resumed>) = ? [pid 692] +++ exited with 0 +++ [pid 690] <... sendfile resumed>) = ? [pid 690] +++ exited with 0 +++ [pid 689] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=689, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./90/binderfs") = 0 umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./90/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./90") = 0 mkdir("./91", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 693 ./strace-static-x86_64: Process 693 attached [pid 693] set_robust_list(0x555556b826a0, 24) = 0 [pid 693] chdir("./91") = 0 [pid 693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 693] setpgid(0, 0) = 0 [pid 693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 693] write(3, "1000", 4) = 4 [pid 693] close(3) = 0 [pid 693] symlink("/dev/binderfs", "./binderfs") = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 693] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 693] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 693] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[694]}, 88) = 694 [pid 693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 693] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 694 attached [pid 694] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 694] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 694] memfd_create("syzkaller", 0) = 3 [pid 694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 694] munmap(0x7f9627d89000, 262144) = 0 [pid 694] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 694] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 694] close(3) = 0 [pid 694] mkdir("./file0", 0777) = 0 [pid 694] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 694] chdir("./file0") = 0 [pid 694] ioctl(4, LOOP_CLR_FD) = 0 [pid 694] close(4) = 0 [pid 694] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 693] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... futex resumed>) = 1 [pid 694] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 694] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 693] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... futex resumed>) = 1 [pid 694] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 694] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 693] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... futex resumed>) = 1 [pid 694] creat("./bus", 000) = 6 [pid 694] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 693] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... futex resumed>) = 1 [pid 694] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 694] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 693] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... futex resumed>) = 1 [pid 694] open("./bus", O_RDONLY) = 7 [pid 694] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 693] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 694] <... futex resumed>) = 1 [ 48.042804][ T694] loop0: detected capacity change from 0 to 512 [ 48.052730][ T694] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 48.067158][ T694] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 48.077106][ T694] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 694] sendfile(6, 7, NULL, 140737974943952 [pid 693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 693] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 693] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 693] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 696 attached => {parent_tid=[696]}, 88) = 696 [pid 696] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 693] rt_sigprocmask(SIG_SETMASK, [], [pid 696] rt_sigprocmask(SIG_SETMASK, [], [pid 693] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 693] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 693] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 696] <... mmap resumed>) = 0x20000000 [pid 696] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 696] <... futex resumed>) = 1 [pid 693] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 696] sendmsg(-1, 0x20000000, 0 [pid 693] <... futex resumed>) = 0 [pid 696] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 693] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 696] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 693] <... futex resumed>) = 0 [pid 696] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 693] exit_group(0 [pid 694] <... sendfile resumed>) = ? [pid 693] <... exit_group resumed>) = ? [pid 696] <... futex resumed>) = ? [pid 694] +++ exited with 0 +++ [pid 696] +++ exited with 0 +++ [pid 693] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=693, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./91/binderfs") = 0 umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./91/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./91") = 0 mkdir("./92", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 697 ./strace-static-x86_64: Process 697 attached [pid 697] set_robust_list(0x555556b826a0, 24) = 0 [pid 697] chdir("./92") = 0 [pid 697] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 697] setpgid(0, 0) = 0 [pid 697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 697] write(3, "1000", 4) = 4 [pid 697] close(3) = 0 [pid 697] symlink("/dev/binderfs", "./binderfs") = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 697] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 697] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 697] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[698]}, 88) = 698 [pid 697] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 697] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 698 attached [pid 698] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 698] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 698] memfd_create("syzkaller", 0) = 3 [pid 698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 698] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 698] munmap(0x7f9627d89000, 262144) = 0 [pid 698] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 698] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 698] close(3) = 0 [pid 698] mkdir("./file0", 0777) = 0 [pid 698] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 698] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 698] chdir("./file0") = 0 [pid 698] ioctl(4, LOOP_CLR_FD) = 0 [pid 698] close(4) = 0 [pid 698] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... futex resumed>) = 1 [pid 698] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 698] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... futex resumed>) = 1 [pid 698] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 698] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... futex resumed>) = 1 [pid 698] creat("./bus", 000) = 6 [pid 698] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 697] <... futex resumed>) = 0 [pid 698] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 697] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] writev(6, [{iov_base="\x06", iov_len=1}], 1 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... writev resumed>) = 1 [pid 698] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... futex resumed>) = 1 [pid 698] open("./bus", O_RDONLY) = 7 [pid 698] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = 1 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 48.350659][ T698] loop0: detected capacity change from 0 to 512 [ 48.358661][ T698] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 48.371947][ T698] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 48.383147][ T698] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 698] sendfile(6, 7, NULL, 140737974943952 [pid 697] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 697] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 697] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 697] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 697] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[700]}, 88) = 700 [pid 697] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 697] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 700 attached [pid 700] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 700] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 700] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 700] <... futex resumed>) = 1 [pid 700] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 700] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = 1 [pid 700] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 697] exit_group(0 [pid 700] <... futex resumed>) = ? [pid 697] <... exit_group resumed>) = ? [pid 700] +++ exited with 0 +++ [pid 698] <... sendfile resumed>) = ? [pid 698] +++ exited with 0 +++ [pid 697] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=697, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./92/binderfs") = 0 umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./92/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./92/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./92") = 0 mkdir("./93", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 702 ./strace-static-x86_64: Process 702 attached [pid 702] set_robust_list(0x555556b826a0, 24) = 0 [pid 702] chdir("./93") = 0 [pid 702] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 702] setpgid(0, 0) = 0 [pid 702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 702] write(3, "1000", 4) = 4 [pid 702] close(3) = 0 [pid 702] symlink("/dev/binderfs", "./binderfs") = 0 [pid 702] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 702] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 702] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 702] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 702] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 703 attached => {parent_tid=[703]}, 88) = 703 [pid 703] set_robust_list(0x7f96301a99a0, 24 [pid 702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 702] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 703] <... set_robust_list resumed>) = 0 [pid 703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 703] memfd_create("syzkaller", 0) = 3 [pid 703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 703] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 703] munmap(0x7f9627d89000, 262144) = 0 [pid 703] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 703] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 703] close(3) = 0 [pid 703] mkdir("./file0", 0777) = 0 [pid 703] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 703] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 703] chdir("./file0") = 0 [pid 703] ioctl(4, LOOP_CLR_FD) = 0 [pid 703] close(4) = 0 [pid 703] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 703] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 0 [pid 703] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 703] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 1 [pid 703] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 703] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 1 [pid 703] creat("./bus", 000) = 6 [pid 703] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 1 [pid 703] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 703] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 1 [pid 703] open("./bus", O_RDONLY) = 7 [pid 703] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 703] <... futex resumed>) = 1 [ 48.688578][ T703] loop0: detected capacity change from 0 to 512 [ 48.697995][ T703] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 48.711369][ T703] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 48.721187][ T703] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 703] sendfile(6, 7, NULL, 140737974943952 [pid 702] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 702] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 702] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 702] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 702] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 702] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 705 attached => {parent_tid=[705]}, 88) = 705 [pid 702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 702] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 705] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 705] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 705] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 705] <... futex resumed>) = 1 [pid 705] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] exit_group(0 [pid 705] <... futex resumed>) = ? [pid 702] <... exit_group resumed>) = ? [pid 705] +++ exited with 0 +++ [pid 703] <... sendfile resumed>) = ? [pid 703] +++ exited with 0 +++ [pid 702] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=702, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./93/binderfs") = 0 umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./93/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./93") = 0 mkdir("./94", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 706 ./strace-static-x86_64: Process 706 attached [pid 706] set_robust_list(0x555556b826a0, 24) = 0 [pid 706] chdir("./94") = 0 [pid 706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 706] setpgid(0, 0) = 0 [pid 706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 706] write(3, "1000", 4) = 4 [pid 706] close(3) = 0 [pid 706] symlink("/dev/binderfs", "./binderfs") = 0 [pid 706] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 706] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 706] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 706] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[707]}, 88) = 707 [pid 706] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 706] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 707 attached [pid 707] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 707] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 707] memfd_create("syzkaller", 0) = 3 [pid 707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 707] munmap(0x7f9627d89000, 262144) = 0 [pid 707] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 707] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 707] close(3) = 0 [pid 707] mkdir("./file0", 0777) = 0 [pid 707] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 707] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 707] chdir("./file0") = 0 [pid 707] ioctl(4, LOOP_CLR_FD) = 0 [pid 707] close(4) = 0 [pid 707] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] <... futex resumed>) = 1 [pid 707] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 707] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] <... futex resumed>) = 1 [pid 707] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 707] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 707] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] <... futex resumed>) = 0 [pid 707] creat("./bus", 000) = 6 [pid 707] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 707] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] <... futex resumed>) = 0 [pid 707] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 707] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] <... futex resumed>) = 1 [pid 707] open("./bus", O_RDONLY) = 7 [pid 707] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 707] <... futex resumed>) = 1 [ 49.008646][ T707] loop0: detected capacity change from 0 to 512 [ 49.016701][ T707] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 49.029876][ T707] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 49.039564][ T707] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 707] sendfile(6, 7, NULL, 140737974943952 [pid 706] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 706] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 706] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 706] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 706] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[709]}, 88) = 709 [pid 706] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 706] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 709 attached [pid 709] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 709] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 709] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = 0 [pid 706] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 706] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 709] <... futex resumed>) = 1 [pid 709] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 709] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... futex resumed>) = 0 [pid 709] <... futex resumed>) = 1 [pid 709] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 706] exit_group(0 [pid 709] <... futex resumed>) = ? [pid 706] <... exit_group resumed>) = ? [pid 709] +++ exited with 0 +++ [pid 707] <... sendfile resumed>) = ? [pid 707] +++ exited with 0 +++ [pid 706] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=706, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./94/binderfs") = 0 umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./94/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./94/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./94") = 0 mkdir("./95", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 710 ./strace-static-x86_64: Process 710 attached [pid 710] set_robust_list(0x555556b826a0, 24) = 0 [pid 710] chdir("./95") = 0 [pid 710] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 710] setpgid(0, 0) = 0 [pid 710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 710] write(3, "1000", 4) = 4 [pid 710] close(3) = 0 [pid 710] symlink("/dev/binderfs", "./binderfs") = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 710] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 710] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 710] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 710] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 710] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[711]}, 88) = 711 [pid 710] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 710] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 711 attached [pid 711] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 711] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 711] memfd_create("syzkaller", 0) = 3 [pid 711] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 711] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 711] munmap(0x7f9627d89000, 262144) = 0 [pid 711] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 711] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 711] close(3) = 0 [pid 711] mkdir("./file0", 0777) = 0 [pid 711] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 711] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 711] chdir("./file0") = 0 [pid 711] ioctl(4, LOOP_CLR_FD) = 0 [pid 711] close(4) = 0 [pid 711] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 710] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 711] <... futex resumed>) = 1 [pid 711] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 711] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 710] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 711] <... futex resumed>) = 1 [pid 711] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 711] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 710] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 711] <... futex resumed>) = 1 [pid 711] creat("./bus", 000) = 6 [pid 711] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 710] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 711] <... futex resumed>) = 1 [pid 711] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 711] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 710] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 711] <... futex resumed>) = 1 [pid 711] open("./bus", O_RDONLY) = 7 [pid 711] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 710] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 711] <... futex resumed>) = 1 [ 49.303131][ T711] loop0: detected capacity change from 0 to 512 [ 49.311395][ T711] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 49.324393][ T711] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 49.334170][ T711] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 711] sendfile(6, 7, NULL, 140737974943952 [pid 710] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 710] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 710] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 710] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 710] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 710] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 713 attached => {parent_tid=[713]}, 88) = 713 [pid 710] rt_sigprocmask(SIG_SETMASK, [], [pid 713] set_robust_list(0x7f9627dc89a0, 24 [pid 710] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 713] <... set_robust_list resumed>) = 0 [pid 710] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 713] rt_sigprocmask(SIG_SETMASK, [], [pid 710] <... futex resumed>) = 0 [pid 713] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 710] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 713] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 713] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 713] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 710] <... futex resumed>) = 0 [pid 713] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 710] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 710] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 713] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 713] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = 0 [pid 713] <... futex resumed>) = 1 [pid 713] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 710] exit_group(0) = ? [pid 713] <... futex resumed>) = ? [pid 713] +++ exited with 0 +++ [pid 711] <... sendfile resumed>) = ? [pid 711] +++ exited with 0 +++ [pid 710] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=710, si_uid=0, si_status=0, si_utime=0, si_stime=19} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./95/binderfs") = 0 umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./95/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./95/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./95") = 0 mkdir("./96", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 714 ./strace-static-x86_64: Process 714 attached [pid 714] set_robust_list(0x555556b826a0, 24) = 0 [pid 714] chdir("./96") = 0 [pid 714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 714] setpgid(0, 0) = 0 [pid 714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 714] write(3, "1000", 4) = 4 [pid 714] close(3) = 0 [pid 714] symlink("/dev/binderfs", "./binderfs") = 0 [pid 714] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 714] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 714] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 714] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 714] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[715]}, 88) = 715 [pid 714] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 714] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 715 attached [pid 715] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 715] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 715] memfd_create("syzkaller", 0) = 3 [pid 715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 715] munmap(0x7f9627d89000, 262144) = 0 [pid 715] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 715] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 715] close(3) = 0 [pid 715] mkdir("./file0", 0777) = 0 [pid 715] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 715] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 715] chdir("./file0") = 0 [pid 715] ioctl(4, LOOP_CLR_FD) = 0 [pid 715] close(4) = 0 [pid 715] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 715] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... futex resumed>) = 0 [pid 715] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 715] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... futex resumed>) = 1 [pid 715] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 715] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... futex resumed>) = 1 [pid 715] creat("./bus", 000) = 6 [pid 715] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... futex resumed>) = 1 [pid 715] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 715] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... futex resumed>) = 1 [pid 715] open("./bus", O_RDONLY) = 7 [pid 715] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 715] <... futex resumed>) = 1 [ 49.594856][ T715] loop0: detected capacity change from 0 to 512 [ 49.602826][ T715] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 49.615897][ T715] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 49.625765][ T715] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 715] sendfile(6, 7, NULL, 140737974943952 [pid 714] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 714] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 714] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 714] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 714] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 714] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 718 attached => {parent_tid=[718]}, 88) = 718 [pid 718] set_robust_list(0x7f9627dc89a0, 24 [pid 714] rt_sigprocmask(SIG_SETMASK, [], [pid 718] <... set_robust_list resumed>) = 0 [pid 714] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 718] rt_sigprocmask(SIG_SETMASK, [], [pid 714] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 718] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 714] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 718] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 718] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 714] <... futex resumed>) = 0 [pid 714] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 714] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 718] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 718] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 714] <... futex resumed>) = 0 [pid 718] <... futex resumed>) = 1 [pid 718] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 714] exit_group(0) = ? [pid 718] <... futex resumed>) = ? [pid 718] +++ exited with 0 +++ [pid 715] <... sendfile resumed>) = ? [pid 715] +++ exited with 0 +++ [pid 714] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=714, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./96/binderfs") = 0 umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./96/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./96/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./96") = 0 mkdir("./97", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 719 ./strace-static-x86_64: Process 719 attached [pid 719] set_robust_list(0x555556b826a0, 24) = 0 [pid 719] chdir("./97") = 0 [pid 719] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 719] setpgid(0, 0) = 0 [pid 719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 719] write(3, "1000", 4) = 4 [pid 719] close(3) = 0 [pid 719] symlink("/dev/binderfs", "./binderfs") = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 719] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 719] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 719] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 719] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[720]}, 88) = 720 ./strace-static-x86_64: Process 720 attached [pid 719] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 719] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 720] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 720] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 720] memfd_create("syzkaller", 0) = 3 [pid 720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 720] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 720] munmap(0x7f9627d89000, 262144) = 0 [pid 720] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 720] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 720] close(3) = 0 [pid 720] mkdir("./file0", 0777) = 0 [pid 720] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 720] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 720] chdir("./file0") = 0 [pid 720] ioctl(4, LOOP_CLR_FD) = 0 [pid 720] close(4) = 0 [pid 720] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [pid 720] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 720] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [pid 720] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 720] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [pid 720] creat("./bus", 000) = 6 [pid 720] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [pid 720] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 720] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [pid 720] open("./bus", O_RDONLY) = 7 [pid 720] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [ 49.925300][ T720] loop0: detected capacity change from 0 to 512 [ 49.933267][ T720] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 49.946540][ T720] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 49.958634][ T720] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 720] sendfile(6, 7, NULL, 140737974943952 [pid 719] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 719] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 719] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 719] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 719] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 719] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 722 attached => {parent_tid=[722]}, 88) = 722 [pid 719] rt_sigprocmask(SIG_SETMASK, [], [pid 722] set_robust_list(0x7f9627dc89a0, 24 [pid 719] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 719] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 722] <... set_robust_list resumed>) = 0 [pid 722] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 722] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 722] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 722] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 722] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 719] <... futex resumed>) = 0 [pid 722] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 719] exit_group(0) = ? [pid 722] <... futex resumed>) = ? [pid 720] <... sendfile resumed>) = ? [pid 720] +++ exited with 0 +++ [pid 722] +++ exited with 0 +++ [pid 719] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=719, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./97/binderfs") = 0 umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./97/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./97/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./97") = 0 mkdir("./98", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 723 ./strace-static-x86_64: Process 723 attached [pid 723] set_robust_list(0x555556b826a0, 24) = 0 [pid 723] chdir("./98") = 0 [pid 723] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 723] setpgid(0, 0) = 0 [pid 723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 723] write(3, "1000", 4) = 4 [pid 723] close(3) = 0 [pid 723] symlink("/dev/binderfs", "./binderfs") = 0 [pid 723] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 723] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 723] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 723] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 723] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[724]}, 88) = 724 [pid 723] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 723] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 724 attached [pid 724] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 724] memfd_create("syzkaller", 0) = 3 [pid 724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 724] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 724] munmap(0x7f9627d89000, 262144) = 0 [pid 724] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 724] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 724] close(3) = 0 [pid 724] mkdir("./file0", 0777) = 0 [ 50.248549][ T724] loop0: detected capacity change from 0 to 512 [ 50.259141][ T724] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 50.277012][ T724] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 724] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 724] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 724] chdir("./file0") = 0 [pid 724] ioctl(4, LOOP_CLR_FD) = 0 [pid 724] close(4) = 0 [pid 724] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = 1 [pid 724] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 724] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = 1 [pid 724] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 724] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 723] <... futex resumed>) = 0 [pid 724] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 723] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = 0 [pid 724] creat("./bus", 000) = 6 [pid 724] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = 1 [pid 724] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 724] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = 1 [pid 724] open("./bus", O_RDONLY) = 7 [pid 724] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = 1 [ 50.291837][ T724] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 724] sendfile(6, 7, NULL, 140737974943952 [pid 723] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 723] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 723] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 723] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 723] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 723] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[726]}, 88) = 726 [pid 723] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 726 attached [pid 723] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 726] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 726] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 726] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 726] <... futex resumed>) = 1 [pid 723] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 726] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 723] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 726] <... futex resumed>) = 1 [pid 726] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 723] exit_group(0) = ? [pid 726] <... futex resumed>) = ? [pid 726] +++ exited with 0 +++ [pid 724] <... sendfile resumed>) = ? [pid 724] +++ exited with 0 +++ [pid 723] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=723, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./98/binderfs") = 0 umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./98/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./98") = 0 mkdir("./99", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 727 ./strace-static-x86_64: Process 727 attached [pid 727] set_robust_list(0x555556b826a0, 24) = 0 [pid 727] chdir("./99") = 0 [pid 727] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 727] setpgid(0, 0) = 0 [pid 727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 727] write(3, "1000", 4) = 4 [pid 727] close(3) = 0 [pid 727] symlink("/dev/binderfs", "./binderfs") = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 727] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 727] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 727] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[728]}, 88) = 728 [pid 727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 728 attached [pid 728] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 728] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 728] memfd_create("syzkaller", 0) = 3 [pid 728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 728] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 728] munmap(0x7f9627d89000, 262144) = 0 [pid 728] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 728] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 728] close(3) = 0 [pid 728] mkdir("./file0", 0777) = 0 [pid 728] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 728] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 728] chdir("./file0") = 0 [pid 728] ioctl(4, LOOP_CLR_FD) = 0 [pid 728] close(4) = 0 [pid 728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] creat("./bus", 000) = 6 [pid 728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] open("./bus", O_RDONLY) = 7 [pid 728] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [ 50.562031][ T728] loop0: detected capacity change from 0 to 512 [ 50.571683][ T728] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 50.585626][ T728] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 50.595416][ T728] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 728] sendfile(6, 7, NULL, 140737974943952 [pid 727] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 727] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 727] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 727] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 727] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[730]}, 88) = 730 [pid 727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 727] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 730 attached [pid 730] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 730] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 730] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 730] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 727] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] <... futex resumed>) = 1 [pid 730] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 730] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 0 [pid 730] <... futex resumed>) = 1 [pid 730] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 727] exit_group(0 [pid 730] <... futex resumed>) = ? [pid 727] <... exit_group resumed>) = ? [pid 730] +++ exited with 0 +++ [pid 728] <... sendfile resumed>) = ? [pid 728] +++ exited with 0 +++ [pid 727] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=727, si_uid=0, si_status=0, si_utime=0, si_stime=19} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./99/binderfs") = 0 umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./99/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./99/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./99") = 0 mkdir("./100", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 732 ./strace-static-x86_64: Process 732 attached [pid 732] set_robust_list(0x555556b826a0, 24) = 0 [pid 732] chdir("./100") = 0 [pid 732] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 732] setpgid(0, 0) = 0 [pid 732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 732] write(3, "1000", 4) = 4 [pid 732] close(3) = 0 [pid 732] symlink("/dev/binderfs", "./binderfs") = 0 [pid 732] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 732] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 732] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 732] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 733 attached [pid 733] set_robust_list(0x7f96301a99a0, 24 [pid 732] <... clone3 resumed> => {parent_tid=[733]}, 88) = 733 [pid 733] <... set_robust_list resumed>) = 0 [pid 733] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 733] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 732] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 733] <... futex resumed>) = 0 [pid 733] memfd_create("syzkaller", 0) = 3 [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 733] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 733] munmap(0x7f9627d89000, 262144) = 0 [pid 733] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 733] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 733] close(3) = 0 [pid 733] mkdir("./file0", 0777) = 0 [pid 733] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 733] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 733] chdir("./file0") = 0 [pid 733] ioctl(4, LOOP_CLR_FD) = 0 [pid 733] close(4) = 0 [pid 733] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 733] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 733] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] creat("./bus", 000) = 6 [pid 733] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 733] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] open("./bus", O_RDONLY) = 7 [pid 733] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [ 50.856348][ T733] loop0: detected capacity change from 0 to 512 [ 50.867122][ T733] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 50.880845][ T733] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 50.892518][ T733] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 733] sendfile(6, 7, NULL, 140737974943952 [pid 732] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 732] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 732] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 732] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 732] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[736]}, 88) = 736 [pid 732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 732] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 736 attached [pid 736] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 736] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 736] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 736] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 736] <... futex resumed>) = 1 [pid 736] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 736] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 736] <... futex resumed>) = 1 [pid 736] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 732] exit_group(0 [pid 736] <... futex resumed>) = ? [pid 732] <... exit_group resumed>) = ? [pid 736] +++ exited with 0 +++ [pid 733] <... sendfile resumed>) = ? [pid 733] +++ exited with 0 +++ [pid 732] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=732, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./100/binderfs") = 0 umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./100/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./100/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./100") = 0 mkdir("./101", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 737 ./strace-static-x86_64: Process 737 attached [pid 737] set_robust_list(0x555556b826a0, 24) = 0 [pid 737] chdir("./101") = 0 [pid 737] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 737] setpgid(0, 0) = 0 [pid 737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 737] write(3, "1000", 4) = 4 [pid 737] close(3) = 0 [pid 737] symlink("/dev/binderfs", "./binderfs") = 0 [pid 737] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 737] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 737] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 737] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 737] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 738 attached [pid 738] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 738] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 738] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] <... clone3 resumed> => {parent_tid=[738]}, 88) = 738 [pid 737] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 737] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 738] <... futex resumed>) = 0 [pid 738] memfd_create("syzkaller", 0) = 3 [pid 738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 738] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 738] munmap(0x7f9627d89000, 262144) = 0 [pid 738] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 738] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 738] close(3) = 0 [pid 738] mkdir("./file0", 0777) = 0 [pid 738] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 738] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 738] chdir("./file0") = 0 [pid 738] ioctl(4, LOOP_CLR_FD) = 0 [pid 738] close(4) = 0 [pid 738] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 1 [pid 738] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 738] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 1 [pid 738] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 738] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 1 [pid 738] creat("./bus", 000) = 6 [pid 738] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 1 [pid 738] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 738] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 737] <... futex resumed>) = 0 [pid 738] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 738] open("./bus", O_RDONLY) = 7 [pid 738] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 738] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 737] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 0 [ 51.141338][ T738] loop0: detected capacity change from 0 to 512 [ 51.149382][ T738] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 51.163572][ T738] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 51.173511][ T738] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 738] sendfile(6, 7, NULL, 140737974943952 [pid 737] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 737] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 737] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 737] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 737] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 737] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[740]}, 88) = 740 [pid 737] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 737] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 740 attached [pid 740] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 740] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 740] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 740] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 740] <... futex resumed>) = 1 [pid 737] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] sendmsg(-1, 0x20000000, 0 [pid 737] <... futex resumed>) = 0 [pid 740] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 737] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 740] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 740] <... futex resumed>) = 1 [pid 740] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] exit_group(0) = ? [pid 738] <... sendfile resumed>) = ? [pid 738] +++ exited with 0 +++ [pid 740] <... futex resumed>) = ? [pid 740] +++ exited with 0 +++ [pid 737] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=737, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./101/binderfs") = 0 umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./101/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./101/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./101") = 0 mkdir("./102", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 741 ./strace-static-x86_64: Process 741 attached [pid 741] set_robust_list(0x555556b826a0, 24) = 0 [pid 741] chdir("./102") = 0 [pid 741] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 741] setpgid(0, 0) = 0 [pid 741] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 741] write(3, "1000", 4) = 4 [pid 741] close(3) = 0 [pid 741] symlink("/dev/binderfs", "./binderfs") = 0 [pid 741] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 741] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 741] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 741] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 741] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 741] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[742]}, 88) = 742 [pid 741] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 741] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 742 attached [pid 742] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 742] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 742] memfd_create("syzkaller", 0) = 3 [pid 742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 742] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 742] munmap(0x7f9627d89000, 262144) = 0 [pid 742] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 742] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 742] close(3) = 0 [pid 742] mkdir("./file0", 0777) = 0 [pid 742] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 742] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 742] chdir("./file0") = 0 [pid 742] ioctl(4, LOOP_CLR_FD) = 0 [pid 742] close(4) = 0 [pid 742] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 1 [pid 742] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 742] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 1 [pid 742] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 742] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 1 [pid 742] creat("./bus", 000) = 6 [pid 742] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 1 [pid 742] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 742] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 742] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 741] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 0 [pid 742] open("./bus", O_RDONLY) = 7 [pid 742] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 1 [ 51.417425][ T742] loop0: detected capacity change from 0 to 512 [ 51.425489][ T742] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 51.438568][ T742] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 51.448763][ T742] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 742] sendfile(6, 7, NULL, 140737974943952 [pid 741] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 741] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 741] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 741] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 741] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 744 attached => {parent_tid=[744]}, 88) = 744 [pid 741] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 741] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 744] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 744] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 744] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 744] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 744] <... futex resumed>) = 1 [pid 744] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 744] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 741] <... futex resumed>) = 0 [pid 744] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 741] exit_group(0 [pid 744] <... futex resumed>) = 230 [pid 741] <... exit_group resumed>) = ? [pid 744] +++ exited with 0 +++ [pid 742] <... sendfile resumed>) = ? [pid 742] +++ exited with 0 +++ [pid 741] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=741, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./102/binderfs") = 0 umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./102/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./102/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./102") = 0 mkdir("./103", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 746 ./strace-static-x86_64: Process 746 attached [pid 746] set_robust_list(0x555556b826a0, 24) = 0 [pid 746] chdir("./103") = 0 [pid 746] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 746] setpgid(0, 0) = 0 [pid 746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 746] write(3, "1000", 4) = 4 [pid 746] close(3) = 0 [pid 746] symlink("/dev/binderfs", "./binderfs") = 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 746] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 746] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 746] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0}./strace-static-x86_64: Process 747 attached => {parent_tid=[747]}, 88) = 747 [pid 747] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 747] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 747] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 746] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 747] <... futex resumed>) = 0 [pid 747] memfd_create("syzkaller", 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 747] <... memfd_create resumed>) = 3 [pid 747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 747] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 747] munmap(0x7f9627d89000, 262144) = 0 [pid 747] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 747] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 747] close(3) = 0 [pid 747] mkdir("./file0", 0777) = 0 [pid 747] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 747] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 747] chdir("./file0") = 0 [pid 747] ioctl(4, LOOP_CLR_FD) = 0 [pid 747] close(4) = 0 [pid 747] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 747] <... futex resumed>) = 1 [pid 747] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 747] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 747] <... futex resumed>) = 1 [pid 747] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 747] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 747] <... futex resumed>) = 1 [pid 747] creat("./bus", 000) = 6 [pid 747] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 747] <... futex resumed>) = 1 [pid 747] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 747] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 747] <... futex resumed>) = 1 [pid 747] open("./bus", O_RDONLY) = 7 [pid 747] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 747] <... futex resumed>) = 1 [ 51.731000][ T747] loop0: detected capacity change from 0 to 512 [ 51.739309][ T747] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 51.753857][ T747] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 51.764321][ T747] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 747] sendfile(6, 7, NULL, 140737974943952 [pid 746] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 746] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 746] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 746] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0}./strace-static-x86_64: Process 749 attached [pid 749] set_robust_list(0x7f9627dc89a0, 24) = 0 [pid 749] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 749] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 746] <... clone3 resumed> => {parent_tid=[749]}, 88) = 749 [pid 746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 746] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 749] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 749] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 749] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 749] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 749] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 746] <... futex resumed>) = 0 [pid 749] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 746] exit_group(0 [pid 749] <... futex resumed>) = ? [pid 746] <... exit_group resumed>) = ? [pid 749] +++ exited with 0 +++ [pid 747] <... sendfile resumed>) = ? [pid 747] +++ exited with 0 +++ [pid 746] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=746, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./103/binderfs") = 0 umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./103/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./103/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./103") = 0 mkdir("./104", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 750 ./strace-static-x86_64: Process 750 attached [pid 750] set_robust_list(0x555556b826a0, 24) = 0 [pid 750] chdir("./104") = 0 [pid 750] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 750] setpgid(0, 0) = 0 [pid 750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 750] write(3, "1000", 4) = 4 [pid 750] close(3) = 0 [pid 750] symlink("/dev/binderfs", "./binderfs") = 0 [pid 750] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 750] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 750] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 750] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[751]}, 88) = 751 [pid 750] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 750] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 751 attached [pid 751] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 751] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 751] memfd_create("syzkaller", 0) = 3 [pid 751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 751] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 751] munmap(0x7f9627d89000, 262144) = 0 [pid 751] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 751] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 751] close(3) = 0 [pid 751] mkdir("./file0", 0777) = 0 [pid 751] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 751] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 52.054914][ T751] loop0: detected capacity change from 0 to 512 [ 52.065522][ T751] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 52.084741][ T751] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 751] chdir("./file0") = 0 [pid 751] ioctl(4, LOOP_CLR_FD) = 0 [pid 751] close(4) = 0 [pid 751] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 751] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] <... futex resumed>) = 0 [pid 751] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 751] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] <... futex resumed>) = 1 [pid 751] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 751] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] <... futex resumed>) = 1 [pid 751] creat("./bus", 000) = 6 [pid 751] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] <... futex resumed>) = 1 [pid 751] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 751] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 751] futex(0x7f96302746c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] <... futex resumed>) = 0 [pid 751] open("./bus", O_RDONLY) = 7 [pid 751] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] <... futex resumed>) = 0 [pid 750] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 751] <... futex resumed>) = 1 [ 52.095230][ T751] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 751] sendfile(6, 7, NULL, 140737974943952 [pid 750] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 750] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 750] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 750] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 750] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[753]}, 88) = 753 ./strace-static-x86_64: Process 753 attached [pid 750] rt_sigprocmask(SIG_SETMASK, [], [pid 753] set_robust_list(0x7f9627dc89a0, 24 [pid 750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 753] <... set_robust_list resumed>) = 0 [pid 750] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 753] rt_sigprocmask(SIG_SETMASK, [], [pid 750] <... futex resumed>) = 0 [pid 753] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 750] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 753] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 753] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] <... futex resumed>) = 0 [pid 753] <... futex resumed>) = 1 [pid 750] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 753] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 753] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 750] <... futex resumed>) = 0 [pid 753] futex(0x7f96302746d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 750] exit_group(0 [pid 753] <... futex resumed>) = ? [pid 750] <... exit_group resumed>) = ? [pid 751] <... sendfile resumed>) = ? [pid 753] +++ exited with 0 +++ [pid 751] +++ exited with 0 +++ [pid 750] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=750, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556b83730 /* 4 entries */, 32768) = 112 umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./104/binderfs") = 0 umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./104/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556b8b770 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b8b770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./104/file0") = 0 getdents64(3, 0x555556b83730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./104") = 0 mkdir("./105", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b82690) = 754 ./strace-static-x86_64: Process 754 attached [pid 754] set_robust_list(0x555556b826a0, 24) = 0 [pid 754] chdir("./105") = 0 [pid 754] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 754] setpgid(0, 0) = 0 [pid 754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 754] write(3, "1000", 4) = 4 [pid 754] close(3) = 0 [pid 754] symlink("/dev/binderfs", "./binderfs") = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] rt_sigaction(SIGRT_1, {sa_handler=0x7f9630213030, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f96302041e0}, NULL, 8) = 0 [pid 754] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9630189000 [pid 754] mprotect(0x7f963018a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 754] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96301a9990, parent_tid=0x7f96301a9990, exit_signal=0, stack=0x7f9630189000, stack_size=0x20300, tls=0x7f96301a96c0} => {parent_tid=[755]}, 88) = 755 [pid 754] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 754] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 755 attached [pid 755] set_robust_list(0x7f96301a99a0, 24) = 0 [pid 755] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 755] memfd_create("syzkaller", 0) = 3 [pid 755] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9627d89000 [pid 755] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 755] munmap(0x7f9627d89000, 262144) = 0 [pid 755] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 755] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 755] close(3) = 0 [pid 755] mkdir("./file0", 0777) = 0 [pid 755] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT, ",errors=continue") = 0 [pid 755] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 755] chdir("./file0") = 0 [pid 755] ioctl(4, LOOP_CLR_FD) = 0 [pid 755] close(4) = 0 [pid 755] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] <... futex resumed>) = 1 [pid 755] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 755] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] <... futex resumed>) = 1 [pid 755] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 755] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] <... futex resumed>) = 1 [pid 755] creat("./bus", 000) = 6 [pid 755] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] <... futex resumed>) = 1 [pid 755] writev(6, [{iov_base="\x06", iov_len=1}], 1) = 1 [pid 755] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] <... futex resumed>) = 1 [pid 755] open("./bus", O_RDONLY) = 7 [pid 755] futex(0x7f96302746cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f96302746c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] <... futex resumed>) = 1 [ 52.340638][ T755] loop0: detected capacity change from 0 to 512 [ 52.350944][ T755] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz-executor126: casefold flag without casefold feature [ 52.366042][ T755] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 755] sendfile(6, 7, NULL, 140737974943952 [pid 754] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 754] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9627da8000 [pid 754] mprotect(0x7f9627da9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 754] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9627dc8990, parent_tid=0x7f9627dc8990, exit_signal=0, stack=0x7f9627da8000, stack_size=0x20300, tls=0x7f9627dc86c0} => {parent_tid=[757]}, 88) = 757 ./strace-static-x86_64: Process 757 attached [pid 754] rt_sigprocmask(SIG_SETMASK, [], [pid 757] set_robust_list(0x7f9627dc89a0, 24 [pid 754] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 757] <... set_robust_list resumed>) = 0 [pid 754] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] rt_sigprocmask(SIG_SETMASK, [], [pid 754] <... futex resumed>) = 0 [pid 757] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 754] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 757] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f96302746d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f96302746dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] <... futex resumed>) = 1 [pid 757] sendmsg(-1, 0x20000000, 0) = -1 EBADF (Bad file descriptor) [pid 757] futex(0x7f96302746dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = 0 [pid 757] <... futex resumed>) = 1 [pid 757] fu