./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor848507722 <...> Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. execve("./syz-executor848507722", ["./syz-executor848507722"], 0x7ffcd2938690 /* 10 vars */) = 0 brk(NULL) = 0x5555574f3000 brk(0x5555574f3d40) = 0x5555574f3d40 arch_prctl(ARCH_SET_FS, 0x5555574f33c0) = 0 set_tid_address(0x5555574f3690) = 298 set_robust_list(0x5555574f36a0, 24) = 0 rseq(0x5555574f3ce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor848507722", 4096) = 27 getrandom("\x2c\x7f\xea\xad\x0c\x3c\x9a\xc1", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555574f3d40 brk(0x555557514d40) = 0x555557514d40 brk(0x555557515000) = 0x555557515000 mprotect(0x7f2089f94000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.RIfy2h", 0700) = 0 chmod("./syzkaller.RIfy2h", 0777) = 0 chdir("./syzkaller.RIfy2h") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 299 ./strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x5555574f36a0, 24) = 0 [pid 299] chdir("./0") = 0 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] setpgid(0, 0) = 0 [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 299] write(3, "1000", 4) = 4 [pid 299] close(3) = 0 [pid 299] symlink("/dev/binderfs", "./binderfs") = 0 [pid 299] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 299] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 299] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[300]}, 88) = 300 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 300 attached [pid 300] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 300] memfd_create("syzkaller", 0) = 3 [pid 300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 300] munmap(0x7f2081aae000, 138412032) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 24.547709][ T28] audit: type=1400 audit(1699959241.426:66): avc: denied { execmem } for pid=298 comm="syz-executor848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.568911][ T28] audit: type=1400 audit(1699959241.446:67): avc: denied { read write } for pid=298 comm="syz-executor848" name="loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 300] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 300] close(3) = 0 [pid 300] mkdir("./file0", 0777) = 0 [ 24.583344][ T300] loop0: detected capacity change from 0 to 512 [ 24.595622][ T28] audit: type=1400 audit(1699959241.446:68): avc: denied { open } for pid=298 comm="syz-executor848" path="/dev/loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 24.606135][ T300] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 24.623367][ T28] audit: type=1400 audit(1699959241.446:69): avc: denied { ioctl } for pid=298 comm="syz-executor848" path="/dev/loop0" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 24.636375][ T300] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 24.661296][ T28] audit: type=1400 audit(1699959241.476:70): avc: denied { mounton } for pid=299 comm="syz-executor848" path="/root/syzkaller.RIfy2h/0/file0" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [pid 300] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 300] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 300] chdir("./file0") = 0 [pid 300] ioctl(4, LOOP_CLR_FD) = 0 [pid 300] close(4) = 0 [pid 300] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 1 [pid 300] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 300] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 1 [pid 300] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 300] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 299] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[304]}, 88) = 304 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 1 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x7f2089ead9a0, 24 [pid 300] <... write resumed>) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 300] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... set_robust_list resumed>) = 0 [pid 304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 304] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 304] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 299] <... futex resumed>) = 1 [pid 300] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 299] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... socket resumed>) = 6 [pid 300] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [ 24.671712][ T300] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 24.702785][ T28] audit: type=1400 audit(1699959241.586:71): avc: denied { mount } for pid=299 comm="syz-executor848" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 24.724713][ T28] audit: type=1400 audit(1699959241.596:72): avc: denied { write } for pid=299 comm="syz-executor848" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 300] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 299] exit_group(0) = ? [pid 300] +++ exited with 0 +++ [pid 304] <... futex resumed>) = ? [pid 304] +++ exited with 0 +++ [pid 299] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 [ 24.746533][ T28] audit: type=1400 audit(1699959241.596:73): avc: denied { add_name } for pid=299 comm="syz-executor848" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.767342][ T28] audit: type=1400 audit(1699959241.596:74): avc: denied { create } for pid=299 comm="syz-executor848" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 305 attached , child_tidptr=0x5555574f3690) = 305 [pid 305] set_robust_list(0x5555574f36a0, 24) = 0 [pid 305] chdir("./1") = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 305] setpgid(0, 0) = 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "1000", 4) = 4 [pid 305] close(3) = 0 [pid 305] symlink("/dev/binderfs", "./binderfs") = 0 [pid 305] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 305] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 305] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x7f2089ece9a0, 24 [pid 305] <... clone3 resumed> => {parent_tid=[306]}, 88) = 306 [pid 306] <... set_robust_list resumed>) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [], [pid 306] rt_sigprocmask(SIG_SETMASK, [], [pid 305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 305] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] memfd_create("syzkaller", 0 [pid 305] <... futex resumed>) = 0 [pid 306] <... memfd_create resumed>) = 3 [pid 305] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 306] munmap(0x7f2081aae000, 138412032) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 24.787576][ T28] audit: type=1400 audit(1699959241.596:75): avc: denied { read write open } for pid=299 comm="syz-executor848" path=2F726F6F742F73797A6B616C6C65722E5249667932682F302F66696C65302F627573202864656C6574656429 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.787856][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 306] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 306] close(3) = 0 [pid 306] mkdir("./file0", 0777) = 0 [pid 306] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 306] chdir("./file0") = 0 [pid 306] ioctl(4, LOOP_CLR_FD) = 0 [pid 306] close(4) = 0 [pid 306] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 306] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 306] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 305] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 308 attached [pid 306] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 305] <... clone3 resumed> => {parent_tid=[308]}, 88) = 308 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 308] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 308] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 305] <... futex resumed>) = ? [pid 306] <... write resumed>) = ? [pid 306] +++ killed by SIGBUS +++ [pid 308] +++ killed by SIGBUS +++ [pid 305] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=305, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 [ 24.842824][ T306] loop0: detected capacity change from 0 to 512 [ 24.851266][ T306] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 24.864622][ T306] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 24.874192][ T306] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 310 ./strace-static-x86_64: Process 310 attached [pid 310] set_robust_list(0x5555574f36a0, 24) = 0 [pid 310] chdir("./2") = 0 [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 310] setpgid(0, 0) = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 310] write(3, "1000", 4) = 4 [pid 310] close(3) = 0 [pid 310] symlink("/dev/binderfs", "./binderfs") = 0 [pid 310] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 310] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 310] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 311 attached [pid 311] set_robust_list(0x7f2089ece9a0, 24 [pid 310] <... clone3 resumed> => {parent_tid=[311]}, 88) = 311 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 311] <... set_robust_list resumed>) = 0 [pid 310] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] rt_sigprocmask(SIG_SETMASK, [], [pid 310] <... futex resumed>) = 0 [pid 311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 310] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 311] memfd_create("syzkaller", 0) = 3 [pid 311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 311] munmap(0x7f2081aae000, 138412032) = 0 [pid 311] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 311] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 311] close(3) = 0 [pid 311] mkdir("./file0", 0777) = 0 [ 24.902198][ T298] EXT4-fs (loop0): unmounting filesystem. [ 24.933389][ T311] loop0: detected capacity change from 0 to 512 [pid 311] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 311] chdir("./file0") = 0 [pid 311] ioctl(4, LOOP_CLR_FD) = 0 [pid 311] close(4) = 0 [pid 311] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 310] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 0 [pid 311] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 311] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 310] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 0 [pid 311] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 311] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 310] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[313]}, 88) = 313 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 313 attached [pid 311] <... futex resumed>) = 1 [pid 310] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] set_robust_list(0x7f2089ead9a0, 24 [pid 311] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 313] <... set_robust_list resumed>) = 0 [pid 311] <... write resumed>) = 7 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 311] write(4, 0x20000180, 7 [pid 313] <... mmap resumed>) = 0x20000000 [pid 311] <... write resumed>) = 7 [pid 311] write(4, 0x20000180, 7 [pid 313] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... write resumed>) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7 [pid 313] <... futex resumed>) = 1 [pid 310] <... futex resumed>) = 0 [pid 311] <... write resumed>) = 7 [pid 310] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] write(4, 0x20000180, 7 [pid 310] <... futex resumed>) = 0 [pid 311] <... write resumed>) = 7 [pid 310] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 313] <... socket resumed>) = 6 [pid 311] write(4, 0x20000180, 7) = 7 [pid 313] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7 [pid 313] <... futex resumed>) = 1 [pid 310] <... futex resumed>) = 0 [pid 311] <... write resumed>) = 7 [pid 310] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] write(4, 0x20000180, 7 [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 311] <... write resumed>) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 313] <... setsockopt resumed>) = 0 [pid 311] write(4, 0x20000180, 7) = 7 [pid 313] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] write(4, 0x20000180, 7 [pid 310] <... futex resumed>) = 0 [pid 311] <... write resumed>) = 7 [pid 313] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] write(4, 0x20000180, 7) = 7 [pid 311] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] exit_group(0 [pid 313] <... futex resumed>) = ? [pid 310] <... exit_group resumed>) = ? [pid 311] <... futex resumed>) = ? [pid 311] +++ exited with 0 +++ [pid 313] +++ exited with 0 +++ [pid 310] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=310, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 24.942300][ T311] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 24.955838][ T311] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 24.965409][ T311] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. unlink("./2/binderfs") = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 314 ./strace-static-x86_64: Process 314 attached [pid 314] set_robust_list(0x5555574f36a0, 24) = 0 [pid 314] chdir("./3") = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] setpgid(0, 0) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 314] write(3, "1000", 4) = 4 [pid 314] close(3) = 0 [pid 314] symlink("/dev/binderfs", "./binderfs") = 0 [pid 314] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 314] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 314] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 315 attached [pid 315] set_robust_list(0x7f2089ece9a0, 24 [pid 314] <... clone3 resumed> => {parent_tid=[315]}, 88) = 315 [pid 315] <... set_robust_list resumed>) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [], [pid 315] rt_sigprocmask(SIG_SETMASK, [], [pid 314] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 314] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 315] memfd_create("syzkaller", 0) = 3 [pid 315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 315] munmap(0x7f2081aae000, 138412032) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 315] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 315] close(3) = 0 [pid 315] mkdir("./file0", 0777) = 0 [ 24.993100][ T298] EXT4-fs (loop0): unmounting filesystem. [ 25.028304][ T315] loop0: detected capacity change from 0 to 512 [pid 315] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 315] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 315] chdir("./file0") = 0 [pid 315] ioctl(4, LOOP_CLR_FD) = 0 [pid 315] close(4) = 0 [pid 315] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 314] <... futex resumed>) = 0 [pid 315] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 314] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... open resumed>) = 4 [pid 315] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 1 [pid 315] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 314] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 315] <... open resumed>) = 5 [pid 314] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 314] <... futex resumed>) = 0 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 314] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... write resumed>) = 7 [pid 314] <... futex resumed>) = 0 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 315] <... write resumed>) = 7 [pid 314] <... mmap resumed>) = 0x7f2089e8d000 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 314] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 315] <... write resumed>) = 7 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 314] <... rt_sigprocmask resumed>[], 8) = 0 [pid 314] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 315] <... write resumed>) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 317 attached [pid 314] <... clone3 resumed> => {parent_tid=[317]}, 88) = 317 [pid 315] <... write resumed>) = 7 [pid 317] set_robust_list(0x7f2089ead9a0, 24 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 315] <... write resumed>) = 7 [pid 317] <... set_robust_list resumed>) = 0 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 314] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [], [pid 315] <... write resumed>) = 7 [pid 317] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 314] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... write resumed>) = 7 [pid 317] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 315] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 315] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 317] <... mmap resumed>) = 0x20000000 [pid 317] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 314] <... futex resumed>) = 0 [pid 317] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... futex resumed>) = 0 [pid 314] <... futex resumed>) = 1 [pid 315] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 314] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... socket resumed>) = 6 [pid 315] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 315] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 314] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... setsockopt resumed>) = 0 [pid 315] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 314] <... futex resumed>) = 0 [pid 315] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] exit_group(0 [pid 315] <... futex resumed>) = ? [pid 314] <... exit_group resumed>) = ? [pid 317] <... futex resumed>) = ? [pid 315] +++ exited with 0 +++ [pid 317] +++ exited with 0 +++ [pid 314] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./3/binderfs") = 0 [ 25.036768][ T315] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 25.049924][ T315] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.059613][ T315] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 318 attached [pid 318] set_robust_list(0x5555574f36a0, 24) = 0 [pid 318] chdir("./4") = 0 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "1000", 4) = 4 [pid 318] close(3) = 0 [pid 318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 318] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 318] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 318] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 318] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 318] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[319]}, 88) = 319 [pid 318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 319 attached [pid 319] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 319] memfd_create("syzkaller", 0) = 3 [pid 319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 298] <... clone resumed>, child_tidptr=0x5555574f3690) = 318 [pid 319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 319] munmap(0x7f2081aae000, 138412032) = 0 [pid 319] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 319] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 319] close(3) = 0 [pid 319] mkdir("./file0", 0777) = 0 [ 25.101228][ T298] EXT4-fs (loop0): unmounting filesystem. [ 25.125500][ T319] loop0: detected capacity change from 0 to 512 [ 25.134234][ T319] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 319] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 319] chdir("./file0") = 0 [pid 319] ioctl(4, LOOP_CLR_FD) = 0 [pid 319] close(4) = 0 [pid 319] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 318] <... futex resumed>) = 0 [pid 319] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 318] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 319] <... open resumed>) = 4 [pid 318] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 319] <... futex resumed>) = 0 [pid 319] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 318] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... open resumed>) = 5 [pid 318] <... futex resumed>) = 0 [pid 319] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... futex resumed>) = 0 [pid 318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 319] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 318] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 318] <... futex resumed>) = 0 [pid 318] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 318] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 318] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 318] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 321 attached [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 318] <... clone3 resumed> => {parent_tid=[321]}, 88) = 321 [pid 318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... write resumed>) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 319] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 319] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 321] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 321] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 321] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = 0 [pid 318] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... futex resumed>) = 0 [pid 318] <... futex resumed>) = 1 [pid 319] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 318] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... socket resumed>) = 6 [pid 319] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 318] <... futex resumed>) = 0 [pid 321] <... futex resumed>) = 1 [pid 318] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 319] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 318] <... futex resumed>) = 0 [pid 319] <... setsockopt resumed>) = 0 [pid 318] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 318] <... futex resumed>) = 0 [pid 319] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 318] exit_group(0 [pid 319] <... futex resumed>) = ? [pid 318] <... exit_group resumed>) = ? [pid 319] +++ exited with 0 +++ [pid 321] <... futex resumed>) = ? [pid 321] +++ exited with 0 +++ [pid 318] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=318, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./4/binderfs") = 0 [ 25.147454][ T319] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.157186][ T319] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 322 ./strace-static-x86_64: Process 322 attached [pid 322] set_robust_list(0x5555574f36a0, 24) = 0 [pid 322] chdir("./5") = 0 [pid 322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 322] setpgid(0, 0) = 0 [pid 322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 322] write(3, "1000", 4) = 4 [pid 322] close(3) = 0 [pid 322] symlink("/dev/binderfs", "./binderfs") = 0 [pid 322] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 322] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 322] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 322] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 322] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 323 attached => {parent_tid=[323]}, 88) = 323 [pid 322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 322] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 323] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 323] memfd_create("syzkaller", 0) = 3 [pid 323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 323] munmap(0x7f2081aae000, 138412032) = 0 [pid 323] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 323] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 323] close(3) = 0 [pid 323] mkdir("./file0", 0777) = 0 [ 25.195551][ T298] EXT4-fs (loop0): unmounting filesystem. [ 25.222405][ T323] loop0: detected capacity change from 0 to 512 [ 25.230929][ T323] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 323] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 323] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 323] chdir("./file0") = 0 [pid 323] ioctl(4, LOOP_CLR_FD) = 0 [pid 323] close(4) = 0 [pid 323] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 323] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 322] <... futex resumed>) = 0 [pid 322] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 322] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... futex resumed>) = 0 [pid 323] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 323] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 322] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 323] <... futex resumed>) = 1 [pid 322] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 323] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 322] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 323] <... futex resumed>) = 1 [pid 322] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 322] <... mprotect resumed>) = 0 [pid 323] <... write resumed>) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 322] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 322] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 322] <... clone3 resumed> => {parent_tid=[326]}, 88) = 326 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 322] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] <... write resumed>) = 7 [pid 322] <... futex resumed>) = 0 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 322] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... write resumed>) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 323] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 323] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 326 attached [pid 326] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 326] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 326] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 322] <... futex resumed>) = 0 [pid 326] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 322] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 322] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... futex resumed>) = 0 [pid 323] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 323] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 322] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... futex resumed>) = 1 [pid 323] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 323] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 322] exit_group(0) = ? [pid 323] <... futex resumed>) = ? [pid 323] +++ exited with 0 +++ [pid 326] <... futex resumed>) = ? [pid 326] +++ exited with 0 +++ [pid 322] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=322, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./5/binderfs") = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 327 ./strace-static-x86_64: Process 327 attached [pid 327] set_robust_list(0x5555574f36a0, 24) = 0 [pid 327] chdir("./6") = 0 [pid 327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 327] setpgid(0, 0) = 0 [pid 327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 327] write(3, "1000", 4) = 4 [pid 327] close(3) = 0 [pid 327] symlink("/dev/binderfs", "./binderfs") = 0 [pid 327] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 327] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 327] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 327] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 328 attached => {parent_tid=[328]}, 88) = 328 [pid 328] set_robust_list(0x7f2089ece9a0, 24 [pid 327] rt_sigprocmask(SIG_SETMASK, [], [pid 328] <... set_robust_list resumed>) = 0 [pid 327] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 328] rt_sigprocmask(SIG_SETMASK, [], [pid 327] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 327] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 328] memfd_create("syzkaller", 0) = 3 [pid 328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 328] munmap(0x7f2081aae000, 138412032) = 0 [pid 328] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 25.244237][ T323] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.254003][ T323] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.280867][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 328] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 328] close(3) = 0 [pid 328] mkdir("./file0", 0777) = 0 [pid 328] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 328] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 328] chdir("./file0") = 0 [pid 328] ioctl(4, LOOP_CLR_FD) = 0 [pid 328] close(4) = 0 [pid 328] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = 0 [pid 327] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] <... futex resumed>) = 1 [pid 328] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 328] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = 0 [pid 327] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] <... futex resumed>) = 1 [pid 328] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 328] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = 0 [pid 327] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 327] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 327] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[330]}, 88) = 330 [pid 327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 327] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] <... futex resumed>) = 1 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 328] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 330] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = 0 [pid 327] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 327] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] <... futex resumed>) = 0 [pid 328] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 328] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 327] <... futex resumed>) = 0 [pid 327] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 328] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 327] <... futex resumed>) = 0 [pid 327] exit_group(0) = ? [pid 328] +++ exited with 0 +++ [pid 330] <... futex resumed>) = ? [pid 330] +++ exited with 0 +++ [pid 327] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=327, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./6/binderfs") = 0 [ 25.304003][ T328] loop0: detected capacity change from 0 to 512 [ 25.312925][ T328] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 25.326328][ T328] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.336069][ T328] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./6/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 331 ./strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x5555574f36a0, 24) = 0 [pid 331] chdir("./7") = 0 [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 331] setpgid(0, 0) = 0 [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 331] write(3, "1000", 4) = 4 [pid 331] close(3) = 0 [pid 331] symlink("/dev/binderfs", "./binderfs") = 0 [pid 331] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 331] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 331] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 331] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 331] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[332]}, 88) = 332 [pid 331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 331] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 331] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] memfd_create("syzkaller", 0) = 3 [pid 332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 332] munmap(0x7f2081aae000, 138412032) = 0 [pid 332] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 332] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 332] close(3) = 0 [pid 332] mkdir("./file0", 0777) = 0 [ 25.357352][ T298] EXT4-fs (loop0): unmounting filesystem. [ 25.380218][ T332] loop0: detected capacity change from 0 to 512 [ 25.388819][ T332] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 332] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 332] chdir("./file0") = 0 [pid 332] ioctl(4, LOOP_CLR_FD) = 0 [pid 332] close(4) = 0 [pid 332] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 0 [pid 331] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 331] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] <... futex resumed>) = 1 [pid 332] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 332] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 0 [pid 331] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 331] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] <... futex resumed>) = 1 [pid 332] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 332] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 0 [pid 331] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 331] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 331] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 331] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[334]}, 88) = 334 [pid 331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 331] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 331] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] <... futex resumed>) = 1 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 332] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 334 attached [pid 334] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 334] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 334] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 0 [pid 331] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 331] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] <... futex resumed>) = 0 [pid 332] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 332] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 0 [pid 331] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 331] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] <... futex resumed>) = 1 [pid 334] <... futex resumed>) = 1 [pid 334] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 332] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 0 [pid 331] exit_group(0) = ? [pid 334] <... futex resumed>) = ? [pid 332] <... futex resumed>) = ? [pid 334] +++ exited with 0 +++ [pid 332] +++ exited with 0 +++ [pid 331] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=331, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./7/binderfs") = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./7/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 335 ./strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x5555574f36a0, 24) = 0 [pid 335] chdir("./8") = 0 [pid 335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 335] setpgid(0, 0) = 0 [pid 335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 335] write(3, "1000", 4) = 4 [pid 335] close(3) = 0 [pid 335] symlink("/dev/binderfs", "./binderfs") = 0 [pid 335] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 335] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 335] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 335] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 335] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 335] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 336 attached [pid 336] set_robust_list(0x7f2089ece9a0, 24 [pid 335] <... clone3 resumed> => {parent_tid=[336]}, 88) = 336 [pid 336] <... set_robust_list resumed>) = 0 [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 336] rt_sigprocmask(SIG_SETMASK, [], [pid 335] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 335] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 336] memfd_create("syzkaller", 0) = 3 [pid 336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 336] munmap(0x7f2081aae000, 138412032) = 0 [pid 336] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 25.402235][ T332] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.411850][ T332] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.432507][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 336] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 336] close(3) = 0 [pid 336] mkdir("./file0", 0777) = 0 [pid 336] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 336] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 336] chdir("./file0") = 0 [pid 336] ioctl(4, LOOP_CLR_FD) = 0 [pid 336] close(4) = 0 [pid 336] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] <... futex resumed>) = 0 [pid 335] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 335] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] <... futex resumed>) = 0 [pid 336] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 336] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 335] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 335] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] <... futex resumed>) = 1 [pid 336] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 336] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 335] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 335] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 335] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 335] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 335] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 338 attached => {parent_tid=[338]}, 88) = 338 [pid 338] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 335] rt_sigprocmask(SIG_SETMASK, [], [pid 338] rt_sigprocmask(SIG_SETMASK, [], [pid 335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 338] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 335] <... futex resumed>) = 0 [pid 335] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] <... mmap resumed>) = 0x20000000 [pid 336] <... futex resumed>) = 1 [pid 338] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 338] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 335] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... socket resumed>) = 6 [pid 335] <... futex resumed>) = 0 [pid 338] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 335] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 338] <... futex resumed>) = 0 [pid 338] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 335] <... futex resumed>) = ? [pid 336] +++ killed by SIGBUS +++ [pid 338] +++ killed by SIGBUS +++ [pid 335] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=335, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./8/binderfs") = 0 [ 25.456802][ T336] loop0: detected capacity change from 0 to 512 [ 25.465386][ T336] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 25.479078][ T336] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.488803][ T336] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./8/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 339 ./strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x5555574f36a0, 24) = 0 [pid 339] chdir("./9") = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 339] write(3, "1000", 4) = 4 [pid 339] close(3) = 0 [pid 339] symlink("/dev/binderfs", "./binderfs") = 0 [pid 339] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 339] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 339] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 339] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 339] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 340 attached => {parent_tid=[340]}, 88) = 340 [pid 340] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 340] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 339] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 340] <... futex resumed>) = 0 [pid 340] memfd_create("syzkaller", 0) = 3 [pid 340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 340] munmap(0x7f2081aae000, 138412032) = 0 [pid 340] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 340] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 340] close(3) = 0 [pid 340] mkdir("./file0", 0777) = 0 [ 25.513870][ T298] EXT4-fs (loop0): unmounting filesystem. [ 25.543042][ T340] loop0: detected capacity change from 0 to 512 [ 25.551285][ T340] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 340] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 340] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 340] chdir("./file0") = 0 [pid 340] ioctl(4, LOOP_CLR_FD) = 0 [pid 340] close(4) = 0 [pid 340] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 1 [pid 340] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 340] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 1 [pid 340] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 340] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 339] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 339] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 339] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[342]}, 88) = 342 [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 1 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 340] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 342] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 339] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 0 [pid 340] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 340] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 339] <... futex resumed>) = 0 [pid 339] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 340] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... futex resumed>) = 0 [pid 339] exit_group(0) = ? [pid 340] <... futex resumed>) = ? [pid 340] +++ exited with 0 +++ [pid 342] <... futex resumed>) = ? [pid 342] +++ exited with 0 +++ [pid 339] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=339, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./9/binderfs") = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./9/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 343 ./strace-static-x86_64: Process 343 attached [pid 343] set_robust_list(0x5555574f36a0, 24) = 0 [pid 343] chdir("./10") = 0 [pid 343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 343] setpgid(0, 0) = 0 [pid 343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 343] write(3, "1000", 4) = 4 [pid 343] close(3) = 0 [pid 343] symlink("/dev/binderfs", "./binderfs") = 0 [pid 343] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 343] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 343] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[344]}, 88) = 344 [pid 343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 343] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 344 attached [pid 344] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 344] memfd_create("syzkaller", 0) = 3 [pid 344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 344] munmap(0x7f2081aae000, 138412032) = 0 [pid 344] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 25.564477][ T340] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.574007][ T340] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.594055][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 344] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 344] close(3) = 0 [pid 344] mkdir("./file0", 0777) = 0 [pid 344] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 344] chdir("./file0") = 0 [pid 344] ioctl(4, LOOP_CLR_FD) = 0 [pid 344] close(4) = 0 [pid 344] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... futex resumed>) = 0 [pid 343] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... futex resumed>) = 1 [pid 344] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 344] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... futex resumed>) = 0 [pid 343] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... futex resumed>) = 1 [pid 344] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 344] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... futex resumed>) = 0 [pid 343] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 343] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[346]}, 88) = 346 [pid 343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 343] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... futex resumed>) = 1 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 344] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 346 attached [pid 346] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 346] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 346] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 346] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 344] <... futex resumed>) = 0 [pid 343] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 344] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 344] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 343] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 344] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... futex resumed>) = 0 [pid 344] <... futex resumed>) = 1 [pid 343] exit_group(0 [pid 344] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] <... exit_group resumed>) = ? [pid 346] <... futex resumed>) = ? [pid 344] <... futex resumed>) = ? [pid 344] +++ exited with 0 +++ [pid 346] +++ exited with 0 +++ [pid 343] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=343, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./10/binderfs") = 0 [ 25.609407][ T344] loop0: detected capacity change from 0 to 512 [ 25.617095][ T344] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 25.630316][ T344] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.640067][ T344] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./10/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 347 ./strace-static-x86_64: Process 347 attached [pid 347] set_robust_list(0x5555574f36a0, 24) = 0 [pid 347] chdir("./11") = 0 [pid 347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 347] setpgid(0, 0) = 0 [pid 347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 347] write(3, "1000", 4) = 4 [pid 347] close(3) = 0 [pid 347] symlink("/dev/binderfs", "./binderfs") = 0 [pid 347] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 347] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 347] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 347] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 348 attached => {parent_tid=[348]}, 88) = 348 [pid 347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 347] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 348] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 348] memfd_create("syzkaller", 0) = 3 [pid 348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 348] munmap(0x7f2081aae000, 138412032) = 0 [pid 348] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 25.664298][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 348] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 348] close(3) = 0 [pid 348] mkdir("./file0", 0777) = 0 [pid 348] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 348] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 348] chdir("./file0") = 0 [pid 348] ioctl(4, LOOP_CLR_FD) = 0 [pid 348] close(4) = 0 [pid 348] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 347] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 0 [pid 348] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 348] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [pid 348] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 348] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 347] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 347] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[350]}, 88) = 350 [pid 347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 347] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [pid 348] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 348] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 348] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 348] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 348] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 348] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 348] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 348] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 348] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 348] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 350 attached ) = 7 [pid 350] set_robust_list(0x7f2089ead9a0, 24 [pid 348] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 350] <... set_robust_list resumed>) = 0 [pid 350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 350] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 350] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 350] <... futex resumed>) = 1 [pid 350] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 350] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 350] <... futex resumed>) = 1 [pid 348] <... write resumed>) = 7 [pid 348] write(4, 0x20000180, 7 [pid 350] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 348] <... write resumed>) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 350] <... setsockopt resumed>) = 0 [pid 348] write(4, 0x20000180, 7) = 7 [pid 350] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 350] <... futex resumed>) = 1 [pid 348] write(4, 0x20000180, 7 [pid 350] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] <... write resumed>) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] write(4, 0x20000180, 7) = 7 [pid 348] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 347] exit_group(0) = ? [pid 350] <... futex resumed>) = ? [pid 348] <... futex resumed>) = ? [pid 350] +++ exited with 0 +++ [pid 348] +++ exited with 0 +++ [pid 347] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=347, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./11/binderfs") = 0 [ 25.689047][ T348] loop0: detected capacity change from 0 to 512 [ 25.697928][ T348] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 25.711114][ T348] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.721140][ T348] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./11/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 351 ./strace-static-x86_64: Process 351 attached [pid 351] set_robust_list(0x5555574f36a0, 24) = 0 [pid 351] chdir("./12") = 0 [pid 351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 351] setpgid(0, 0) = 0 [pid 351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 351] write(3, "1000", 4) = 4 [pid 351] close(3) = 0 [pid 351] symlink("/dev/binderfs", "./binderfs") = 0 [pid 351] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 351] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 351] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 351] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[352]}, 88) = 352 [pid 351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 351] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 352 attached [pid 352] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 352] memfd_create("syzkaller", 0) = 3 [pid 352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 352] munmap(0x7f2081aae000, 138412032) = 0 [pid 352] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 352] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 352] close(3) = 0 [pid 352] mkdir("./file0", 0777) = 0 [ 25.745805][ T298] EXT4-fs (loop0): unmounting filesystem. [ 25.762982][ T352] loop0: detected capacity change from 0 to 512 [ 25.770886][ T352] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 25.784326][ T352] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 352] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 352] chdir("./file0") = 0 [pid 352] ioctl(4, LOOP_CLR_FD) = 0 [pid 352] close(4) = 0 [pid 352] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 1 [pid 352] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 352] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 1 [pid 352] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 352] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 352] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 351] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 351] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 351] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[354]}, 88) = 354 [pid 351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 351] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 0 [pid 352] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 354 attached [pid 354] set_robust_list(0x7f2089ead9a0, 24 [pid 352] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 352] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 352] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 354] <... set_robust_list resumed>) = 0 [pid 352] <... write resumed>) = 7 [pid 354] rt_sigprocmask(SIG_SETMASK, [], [pid 352] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 354] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 352] <... write resumed>) = 7 [pid 354] <... mmap resumed>) = 0x20000000 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] write(4, 0x20000180, 7) = 7 [pid 352] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 1 [pid 352] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 351] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... socket resumed>) = 6 [pid 352] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 351] <... futex resumed>) = 0 [pid 354] <... futex resumed>) = 1 [pid 352] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 351] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] <... setsockopt resumed>) = 0 [pid 351] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 354] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 351] <... futex resumed>) = 0 [pid 352] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 351] exit_group(0 [pid 352] <... futex resumed>) = ? [pid 351] <... exit_group resumed>) = ? [pid 354] <... futex resumed>) = ? [pid 352] +++ exited with 0 +++ [pid 354] +++ exited with 0 +++ [pid 351] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=351, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./12/binderfs") = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./12/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 356 ./strace-static-x86_64: Process 356 attached [pid 356] set_robust_list(0x5555574f36a0, 24) = 0 [pid 356] chdir("./13") = 0 [pid 356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 356] setpgid(0, 0) = 0 [pid 356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 356] write(3, "1000", 4) = 4 [pid 356] close(3) = 0 [pid 356] symlink("/dev/binderfs", "./binderfs") = 0 [pid 356] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 356] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 356] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 356] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 356] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 357 attached => {parent_tid=[357]}, 88) = 357 [pid 356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 356] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 357] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 357] memfd_create("syzkaller", 0) = 3 [pid 357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 357] munmap(0x7f2081aae000, 138412032) = 0 [pid 357] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 25.794155][ T352] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.826742][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 357] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 357] close(3) = 0 [pid 357] mkdir("./file0", 0777) = 0 [pid 357] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 357] chdir("./file0") = 0 [pid 357] ioctl(4, LOOP_CLR_FD) = 0 [pid 357] close(4) = 0 [pid 357] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 357] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 356] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 0 [pid 357] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 357] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 357] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 356] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 356] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 356] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[359]}, 88) = 359 [pid 356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 356] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 359 attached [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 359] set_robust_list(0x7f2089ead9a0, 24 [pid 357] <... write resumed>) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 357] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 357] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 359] <... set_robust_list resumed>) = 0 [pid 359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 359] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 359] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 356] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 0 [pid 357] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 359] <... futex resumed>) = 1 [pid 357] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 359] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 357] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 357] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 356] <... futex resumed>) = 0 [pid 356] exit_group(0) = ? [pid 357] +++ exited with 0 +++ [pid 359] <... futex resumed>) = ? [pid 359] +++ exited with 0 +++ [pid 356] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=356, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./13/binderfs") = 0 [ 25.854172][ T357] loop0: detected capacity change from 0 to 512 [ 25.862292][ T357] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 25.875448][ T357] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.885035][ T357] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./13/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 360 ./strace-static-x86_64: Process 360 attached [pid 360] set_robust_list(0x5555574f36a0, 24) = 0 [pid 360] chdir("./14") = 0 [pid 360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 360] setpgid(0, 0) = 0 [pid 360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 360] write(3, "1000", 4) = 4 [pid 360] close(3) = 0 [pid 360] symlink("/dev/binderfs", "./binderfs") = 0 [pid 360] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 360] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 360] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 360] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 360] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 360] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 361 attached => {parent_tid=[361]}, 88) = 361 [pid 360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 361] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 360] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] rt_sigprocmask(SIG_SETMASK, [], [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 361] memfd_create("syzkaller", 0) = 3 [pid 361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 361] munmap(0x7f2081aae000, 138412032) = 0 [pid 361] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 361] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 361] close(3) = 0 [pid 361] mkdir("./file0", 0777) = 0 [ 25.918175][ T298] EXT4-fs (loop0): unmounting filesystem. [ 25.938856][ T361] loop0: detected capacity change from 0 to 512 [ 25.947623][ T361] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 361] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 361] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 361] chdir("./file0") = 0 [pid 361] ioctl(4, LOOP_CLR_FD) = 0 [pid 361] close(4) = 0 [pid 361] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... futex resumed>) = 1 [pid 361] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 361] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... futex resumed>) = 1 [pid 361] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 361] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 360] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 360] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 360] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[363]}, 88) = 363 [pid 360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 360] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... futex resumed>) = 1 [pid 361] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 361] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 363 attached ) = 7 [pid 363] set_robust_list(0x7f2089ead9a0, 24 [pid 361] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 361] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 361] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 361] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 361] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 363] <... set_robust_list resumed>) = 0 [pid 361] <... write resumed>) = 7 [pid 361] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 361] <... write resumed>) = 7 [pid 363] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 361] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 361] write(4, 0x20000180, 7 [pid 363] <... mmap resumed>) = 0x20000000 [pid 361] <... write resumed>) = 7 [pid 363] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7 [pid 363] <... futex resumed>) = 1 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 363] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... write resumed>) = 7 [pid 363] <... socket resumed>) = 6 [pid 361] write(4, 0x20000180, 7 [pid 363] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 361] <... write resumed>) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 363] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 363] <... setsockopt resumed>) = 0 [pid 361] write(4, 0x20000180, 7) = 7 [pid 363] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = 0 [pid 363] <... futex resumed>) = 1 [pid 361] write(4, 0x20000180, 7 [pid 363] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] <... write resumed>) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] write(4, 0x20000180, 7) = 7 [pid 361] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] exit_group(0) = ? [pid 363] <... futex resumed>) = ? [pid 361] <... futex resumed>) = ? [pid 363] +++ exited with 0 +++ [pid 361] +++ exited with 0 +++ [pid 360] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=360, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./14/binderfs") = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./14/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 364 ./strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x5555574f36a0, 24) = 0 [pid 364] chdir("./15") = 0 [pid 364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 364] setpgid(0, 0) = 0 [pid 364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 364] write(3, "1000", 4) = 4 [pid 364] close(3) = 0 [pid 364] symlink("/dev/binderfs", "./binderfs") = 0 [pid 364] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 364] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 364] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 364] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[365]}, 88) = 365 ./strace-static-x86_64: Process 365 attached [pid 364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 364] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 365] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] memfd_create("syzkaller", 0) = 3 [pid 365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 365] munmap(0x7f2081aae000, 138412032) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 25.960748][ T361] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 25.970454][ T361] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.001780][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 365] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 365] close(3) = 0 [pid 365] mkdir("./file0", 0777) = 0 [pid 365] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 365] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 365] chdir("./file0") = 0 [pid 365] ioctl(4, LOOP_CLR_FD) = 0 [pid 365] close(4) = 0 [pid 365] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] <... futex resumed>) = 0 [pid 365] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 364] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 364] <... futex resumed>) = 0 [pid 365] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 364] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... open resumed>) = 4 [pid 365] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] <... futex resumed>) = 0 [pid 365] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 364] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 364] <... futex resumed>) = 0 [pid 365] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 364] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... open resumed>) = 5 [pid 365] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] <... futex resumed>) = 0 [pid 365] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 364] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 364] <... futex resumed>) = 0 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 364] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... write resumed>) = 7 [pid 364] <... futex resumed>) = 0 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 365] <... write resumed>) = 7 [pid 364] <... mmap resumed>) = 0x7f2089e8d000 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 364] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 365] <... write resumed>) = 7 [pid 364] <... mprotect resumed>) = 0 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 364] rt_sigprocmask(SIG_BLOCK, ~[], [pid 365] <... write resumed>) = 7 [pid 364] <... rt_sigprocmask resumed>[], 8) = 0 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 365] <... write resumed>) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 364] <... clone3 resumed> => {parent_tid=[367]}, 88) = 367 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 364] rt_sigprocmask(SIG_SETMASK, [], [pid 365] <... write resumed>) = 7 [pid 364] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 364] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... write resumed>) = 7 [pid 364] <... futex resumed>) = 0 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 364] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... write resumed>) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 367 attached [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 367] set_robust_list(0x7f2089ead9a0, 24 [pid 365] <... write resumed>) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 365] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] <... set_robust_list resumed>) = 0 [pid 367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 367] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 364] <... futex resumed>) = 1 [pid 365] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 364] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... socket resumed>) = 6 [pid 365] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... futex resumed>) = 0 [pid 367] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 365] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] <... futex resumed>) = 0 [pid 364] exit_group(0 [pid 367] <... futex resumed>) = ? [pid 364] <... exit_group resumed>) = ? [pid 367] +++ exited with 0 +++ [pid 365] +++ exited with 0 +++ [pid 364] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=364, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./15/binderfs") = 0 [ 26.031744][ T365] loop0: detected capacity change from 0 to 512 [ 26.040433][ T365] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 26.053682][ T365] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.063244][ T365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./15/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 368 ./strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x5555574f36a0, 24) = 0 [pid 368] chdir("./16") = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 368] setpgid(0, 0) = 0 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 368] write(3, "1000", 4) = 4 [pid 368] close(3) = 0 [pid 368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 368] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 368] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 368] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[369]}, 88) = 369 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] memfd_create("syzkaller", 0) = 3 [pid 369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 369] munmap(0x7f2081aae000, 138412032) = 0 [pid 369] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 369] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 369] close(3) = 0 [pid 369] mkdir("./file0", 0777) = 0 [ 26.097475][ T298] EXT4-fs (loop0): unmounting filesystem. [ 26.122550][ T369] loop0: detected capacity change from 0 to 512 [ 26.130441][ T369] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 369] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 369] chdir("./file0") = 0 [pid 369] ioctl(4, LOOP_CLR_FD) = 0 [pid 369] close(4) = 0 [pid 369] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 369] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 369] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 368] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[371]}, 88) = 371 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 369] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 369] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 369] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 369] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 369] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 369] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 369] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 369] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 371 attached [pid 369] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 371] set_robust_list(0x7f2089ead9a0, 24 [pid 369] <... write resumed>) = 7 [pid 371] <... set_robust_list resumed>) = 0 [pid 371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 371] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 369] write(4, 0x20000180, 7 [pid 371] <... mmap resumed>) = 0x20000000 [pid 369] <... write resumed>) = 7 [pid 371] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 371] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 371] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 368] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] <... socket resumed>) = 6 [pid 371] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 371] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] write(4, 0x20000180, 7 [pid 371] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 371] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 371] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 369] <... write resumed>) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] write(4, 0x20000180, 7) = 7 [pid 369] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] exit_group(0) = ? [pid 371] <... futex resumed>) = ? [pid 369] <... futex resumed>) = ? [pid 369] +++ exited with 0 +++ [pid 371] +++ exited with 0 +++ [pid 368] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=368, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./16/binderfs") = 0 umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./16/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 372 ./strace-static-x86_64: Process 372 attached [pid 372] set_robust_list(0x5555574f36a0, 24) = 0 [pid 372] chdir("./17") = 0 [pid 372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 372] setpgid(0, 0) = 0 [pid 372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "1000", 4) = 4 [pid 372] close(3) = 0 [pid 372] symlink("/dev/binderfs", "./binderfs") = 0 [pid 372] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 372] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 372] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 372] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 372] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 373 attached => {parent_tid=[373]}, 88) = 373 [pid 373] set_robust_list(0x7f2089ece9a0, 24 [pid 372] rt_sigprocmask(SIG_SETMASK, [], [pid 373] <... set_robust_list resumed>) = 0 [pid 372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 373] rt_sigprocmask(SIG_SETMASK, [], [pid 372] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 373] memfd_create("syzkaller", 0) = 3 [pid 373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 373] munmap(0x7f2081aae000, 138412032) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 26.143854][ T369] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.153574][ T369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.180686][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 373] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 373] close(3) = 0 [pid 373] mkdir("./file0", 0777) = 0 [pid 373] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 373] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 373] chdir("./file0") = 0 [pid 373] ioctl(4, LOOP_CLR_FD) = 0 [pid 373] close(4) = 0 [pid 373] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 373] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 373] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 372] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 372] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 372] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[375]}, 88) = 375 [pid 372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 372] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 375 attached [pid 373] <... futex resumed>) = 1 [pid 375] set_robust_list(0x7f2089ead9a0, 24 [pid 373] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 375] <... set_robust_list resumed>) = 0 [pid 375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 375] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 375] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = 1 [pid 375] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 375] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... write resumed>) = -1 EFAULT (Bad address) [pid 373] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] write(4, 0x20000180, 7 [pid 372] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... write resumed>) = -1 EFAULT (Bad address) [pid 373] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 373] write(4, 0x20000180, 7 [pid 375] <... futex resumed>) = 1 [pid 375] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 373] <... write resumed>) = -1 EFAULT (Bad address) [pid 373] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 373] write(4, 0x20000180, 7) = ? [pid 372] <... futex resumed>) = ? [pid 373] +++ killed by SIGBUS +++ [pid 375] +++ killed by SIGBUS +++ [pid 372] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=372, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./17/binderfs") = 0 [ 26.202304][ T373] loop0: detected capacity change from 0 to 512 [ 26.210234][ T373] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 26.223654][ T373] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.233193][ T373] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./17/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 377 ./strace-static-x86_64: Process 377 attached [pid 377] set_robust_list(0x5555574f36a0, 24) = 0 [pid 377] chdir("./18") = 0 [pid 377] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 377] setpgid(0, 0) = 0 [pid 377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 377] write(3, "1000", 4) = 4 [pid 377] close(3) = 0 [pid 377] symlink("/dev/binderfs", "./binderfs") = 0 [pid 377] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 377] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 377] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 377] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 377] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 377] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 378 attached => {parent_tid=[378]}, 88) = 378 [pid 378] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 377] rt_sigprocmask(SIG_SETMASK, [], [pid 378] rt_sigprocmask(SIG_SETMASK, [], [pid 377] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 377] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 378] memfd_create("syzkaller", 0) = 3 [pid 378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 378] munmap(0x7f2081aae000, 138412032) = 0 [pid 378] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 378] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 378] close(3) = 0 [pid 378] mkdir("./file0", 0777) = 0 [ 26.256954][ T298] EXT4-fs (loop0): unmounting filesystem. [ 26.284082][ T378] loop0: detected capacity change from 0 to 512 [ 26.293256][ T378] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 378] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 378] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 378] chdir("./file0") = 0 [pid 378] ioctl(4, LOOP_CLR_FD) = 0 [pid 378] close(4) = 0 [pid 378] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 377] <... futex resumed>) = 0 [pid 378] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 378] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] <... open resumed>) = 4 [pid 378] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] <... futex resumed>) = 1 [pid 378] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 378] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 377] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 377] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 377] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 380 attached => {parent_tid=[380]}, 88) = 380 [pid 380] set_robust_list(0x7f2089ead9a0, 24 [pid 377] rt_sigprocmask(SIG_SETMASK, [], [pid 380] <... set_robust_list resumed>) = 0 [pid 377] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 380] rt_sigprocmask(SIG_SETMASK, [], [pid 377] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 380] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... mmap resumed>) = 0x20000000 [pid 380] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 380] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 377] <... futex resumed>) = ? [pid 378] +++ killed by SIGBUS +++ [pid 380] +++ killed by SIGBUS +++ [pid 377] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=377, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./18/binderfs") = 0 umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./18/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 381 ./strace-static-x86_64: Process 381 attached [pid 381] set_robust_list(0x5555574f36a0, 24) = 0 [pid 381] chdir("./19") = 0 [pid 381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 381] setpgid(0, 0) = 0 [pid 381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 381] write(3, "1000", 4) = 4 [pid 381] close(3) = 0 [pid 381] symlink("/dev/binderfs", "./binderfs") = 0 [pid 381] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 381] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 381] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 381] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 382 attached [pid 382] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 381] <... clone3 resumed> => {parent_tid=[382]}, 88) = 382 [pid 381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 381] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] <... futex resumed>) = 0 [pid 382] memfd_create("syzkaller", 0) = 3 [pid 382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 381] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 382] <... mmap resumed>) = 0x7f2081aae000 [pid 382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 382] munmap(0x7f2081aae000, 138412032) = 0 [pid 382] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 26.306462][ T378] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.315968][ T378] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.338809][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 382] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 382] close(3) = 0 [pid 382] mkdir("./file0", 0777) = 0 [pid 382] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 382] chdir("./file0") = 0 [pid 382] ioctl(4, LOOP_CLR_FD) = 0 [pid 382] close(4) = 0 [pid 382] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 381] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... futex resumed>) = 1 [pid 382] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 382] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 381] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... futex resumed>) = 1 [pid 382] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 382] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 381] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 381] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 381] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[384]}, 88) = 384 [pid 381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 381] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... futex resumed>) = 1 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 382] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 384 attached [pid 384] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 384] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 384] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 381] <... futex resumed>) = 0 [pid 384] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 381] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 1 [pid 382] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 381] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... socket resumed>) = 6 [pid 382] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 381] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... futex resumed>) = 1 [pid 382] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 382] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 381] exit_group(0) = ? [pid 382] <... futex resumed>) = ? [pid 382] +++ exited with 0 +++ [pid 384] <... futex resumed>) = ? [pid 384] +++ exited with 0 +++ [pid 381] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=381, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 26.364093][ T382] loop0: detected capacity change from 0 to 512 [ 26.373009][ T382] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 26.386328][ T382] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.395911][ T382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. unlink("./19/binderfs") = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./19/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 385 ./strace-static-x86_64: Process 385 attached [pid 385] set_robust_list(0x5555574f36a0, 24) = 0 [pid 385] chdir("./20") = 0 [pid 385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 385] setpgid(0, 0) = 0 [pid 385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 385] write(3, "1000", 4) = 4 [pid 385] close(3) = 0 [pid 385] symlink("/dev/binderfs", "./binderfs") = 0 [pid 385] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 385] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 385] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 385] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 385] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 386 attached [pid 386] set_robust_list(0x7f2089ece9a0, 24 [pid 385] <... clone3 resumed> => {parent_tid=[386]}, 88) = 386 [pid 386] <... set_robust_list resumed>) = 0 [pid 385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 386] rt_sigprocmask(SIG_SETMASK, [], [pid 385] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 385] <... futex resumed>) = 0 [pid 385] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 386] memfd_create("syzkaller", 0) = 3 [pid 386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 386] munmap(0x7f2081aae000, 138412032) = 0 [pid 386] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 386] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 386] close(3) = 0 [pid 386] mkdir("./file0", 0777) = 0 [ 26.418388][ T298] EXT4-fs (loop0): unmounting filesystem. [ 26.443269][ T386] loop0: detected capacity change from 0 to 512 [ 26.451841][ T386] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 386] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 386] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 386] chdir("./file0") = 0 [pid 386] ioctl(4, LOOP_CLR_FD) = 0 [pid 386] close(4) = 0 [pid 386] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] <... futex resumed>) = 0 [pid 385] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 385] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 386] <... futex resumed>) = 1 [pid 386] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 386] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] <... futex resumed>) = 0 [pid 385] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 385] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 386] <... futex resumed>) = 1 [pid 386] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 386] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] <... futex resumed>) = 0 [pid 385] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 385] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 385] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 385] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[388]}, 88) = 388 [pid 385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 385] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 385] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 386] <... futex resumed>) = 1 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 388 attached [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 388] set_robust_list(0x7f2089ead9a0, 24 [pid 386] <... write resumed>) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 388] <... set_robust_list resumed>) = 0 [pid 386] <... write resumed>) = 7 [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 388] rt_sigprocmask(SIG_SETMASK, [], [pid 386] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 386] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 388] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 388] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] <... futex resumed>) = 0 [pid 385] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 385] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 386] <... futex resumed>) = 0 [pid 386] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 386] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] <... futex resumed>) = 0 [pid 385] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 385] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 386] <... futex resumed>) = 1 [pid 388] <... futex resumed>) = 1 [pid 386] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 388] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] <... setsockopt resumed>) = 0 [pid 386] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] <... futex resumed>) = 0 [pid 385] exit_group(0) = ? [pid 386] <... futex resumed>) = ? [pid 386] +++ exited with 0 +++ [pid 388] <... futex resumed>) = ? [pid 388] +++ exited with 0 +++ [pid 385] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=385, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./20/binderfs") = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./20/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 389 ./strace-static-x86_64: Process 389 attached [pid 389] set_robust_list(0x5555574f36a0, 24) = 0 [pid 389] chdir("./21") = 0 [pid 389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 389] setpgid(0, 0) = 0 [pid 389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 389] write(3, "1000", 4) = 4 [pid 389] close(3) = 0 [pid 389] symlink("/dev/binderfs", "./binderfs") = 0 [pid 389] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 389] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 389] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 389] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 389] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 390 attached [pid 390] set_robust_list(0x7f2089ece9a0, 24 [pid 389] <... clone3 resumed> => {parent_tid=[390]}, 88) = 390 [pid 390] <... set_robust_list resumed>) = 0 [pid 389] rt_sigprocmask(SIG_SETMASK, [], [pid 390] rt_sigprocmask(SIG_SETMASK, [], [pid 389] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 390] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 389] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 390] memfd_create("syzkaller", 0) = 3 [pid 390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 390] munmap(0x7f2081aae000, 138412032) = 0 [pid 390] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 26.465357][ T386] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.475191][ T386] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.497361][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 390] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 390] close(3) = 0 [pid 390] mkdir("./file0", 0777) = 0 [pid 390] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 390] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 390] chdir("./file0") = 0 [pid 390] ioctl(4, LOOP_CLR_FD) = 0 [pid 390] close(4) = 0 [pid 390] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 390] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 1 [pid 390] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 390] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 389] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 389] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 389] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 392 attached => {parent_tid=[392]}, 88) = 392 [pid 389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 389] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 1 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 392] set_robust_list(0x7f2089ead9a0, 24 [pid 390] <... write resumed>) = 7 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 392] <... set_robust_list resumed>) = 0 [pid 390] <... write resumed>) = 7 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 392] rt_sigprocmask(SIG_SETMASK, [], [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 392] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 392] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 390] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 390] write(4, 0x20000180, 7 [pid 392] <... mmap resumed>) = 0x20000000 [pid 390] <... write resumed>) = 7 [pid 392] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] write(4, 0x20000180, 7 [pid 392] <... futex resumed>) = 1 [pid 390] <... write resumed>) = 7 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 390] write(4, 0x20000180, 7) = 7 [pid 392] <... socket resumed>) = 6 [pid 390] write(4, 0x20000180, 7 [pid 392] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... write resumed>) = 7 [pid 392] <... futex resumed>) = 1 [pid 390] write(4, 0x20000180, 7 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 390] <... write resumed>) = 7 [pid 390] write(4, 0x20000180, 7 [pid 392] <... setsockopt resumed>) = 0 [pid 392] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... write resumed>) = 7 [pid 392] <... futex resumed>) = 1 [pid 390] write(4, 0x20000180, 7 [pid 389] <... futex resumed>) = 0 [pid 392] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] <... write resumed>) = 7 [pid 390] write(4, 0x20000180, 7) = 7 [pid 390] write(4, 0x20000180, 7) = 7 [pid 390] write(4, 0x20000180, 7) = 7 [pid 390] write(4, 0x20000180, 7) = 7 [pid 390] write(4, 0x20000180, 7) = 7 [pid 390] write(4, 0x20000180, 7) = 7 [pid 390] write(4, 0x20000180, 7) = 7 [pid 390] write(4, 0x20000180, 7) = 7 [pid 390] write(4, 0x20000180, 7) = 7 [pid 390] write(4, 0x20000180, 7) = 7 [pid 390] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 389] exit_group(0) = ? [pid 392] <... futex resumed>) = ? [pid 390] <... futex resumed>) = ? [pid 392] +++ exited with 0 +++ [pid 390] +++ exited with 0 +++ [pid 389] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=389, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./21/binderfs") = 0 [ 26.524907][ T390] loop0: detected capacity change from 0 to 512 [ 26.533178][ T390] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 26.546708][ T390] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.556403][ T390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./21/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 393 attached , child_tidptr=0x5555574f3690) = 393 [pid 393] set_robust_list(0x5555574f36a0, 24) = 0 [pid 393] chdir("./22") = 0 [pid 393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 393] setpgid(0, 0) = 0 [pid 393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 393] write(3, "1000", 4) = 4 [pid 393] close(3) = 0 [pid 393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 393] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 393] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 393] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 393] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[394]}, 88) = 394 [pid 393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 393] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 394 attached [pid 394] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] memfd_create("syzkaller", 0) = 3 [pid 394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 394] munmap(0x7f2081aae000, 138412032) = 0 [pid 394] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 394] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 394] close(3) = 0 [pid 394] mkdir("./file0", 0777) = 0 [ 26.587306][ T298] EXT4-fs (loop0): unmounting filesystem. [ 26.617738][ T394] loop0: detected capacity change from 0 to 512 [pid 394] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 394] chdir("./file0") = 0 [pid 394] ioctl(4, LOOP_CLR_FD) = 0 [pid 394] close(4) = 0 [pid 394] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 393] <... futex resumed>) = 0 [pid 394] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 393] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... open resumed>) = 4 [pid 394] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 393] <... futex resumed>) = 0 [pid 394] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 393] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... open resumed>) = 5 [pid 394] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 393] <... futex resumed>) = 0 [pid 394] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 393] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... write resumed>) = 7 [pid 394] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 393] <... futex resumed>) = 0 [pid 393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 394] <... write resumed>) = 7 [pid 393] <... mmap resumed>) = 0x7f2089e8d000 [pid 394] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 393] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 394] <... write resumed>) = 7 [pid 393] rt_sigprocmask(SIG_BLOCK, ~[], [pid 394] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 393] <... rt_sigprocmask resumed>[], 8) = 0 [pid 393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 396 attached [pid 396] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 396] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] <... clone3 resumed> => {parent_tid=[396]}, 88) = 396 [pid 394] <... write resumed>) = 7 [pid 393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 393] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 396] <... futex resumed>) = 0 [pid 393] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 396] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 394] write(4, 0x20000180, 7 [pid 396] <... mmap resumed>) = 0x20000000 [pid 396] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 393] <... futex resumed>) = 0 [pid 396] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 393] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 396] <... socket resumed>) = 6 [pid 396] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 396] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] <... futex resumed>) = 0 [pid 396] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... write resumed>) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 396] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] write(4, 0x20000180, 7) = 7 [pid 394] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 396] <... setsockopt resumed>) = 0 [pid 396] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 393] <... futex resumed>) = 0 [pid 393] exit_group(0) = ? [pid 396] +++ exited with 0 +++ [pid 394] <... futex resumed>) = ? [pid 394] +++ exited with 0 +++ [pid 393] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=393, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./22/binderfs") = 0 [ 26.626512][ T394] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 26.639584][ T394] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.649200][ T394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./22/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 397 ./strace-static-x86_64: Process 397 attached [pid 397] set_robust_list(0x5555574f36a0, 24) = 0 [pid 397] chdir("./23") = 0 [pid 397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 397] setpgid(0, 0) = 0 [pid 397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 397] write(3, "1000", 4) = 4 [pid 397] close(3) = 0 [pid 397] symlink("/dev/binderfs", "./binderfs") = 0 [pid 397] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 397] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 397] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 397] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 397] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 397] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 398 attached [pid 398] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 398] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 397] <... clone3 resumed> => {parent_tid=[398]}, 88) = 398 [pid 397] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 397] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 398] memfd_create("syzkaller", 0) = 3 [pid 398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 397] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 398] munmap(0x7f2081aae000, 138412032) = 0 [pid 398] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 398] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 398] close(3) = 0 [pid 398] mkdir("./file0", 0777) = 0 [ 26.682285][ T298] EXT4-fs (loop0): unmounting filesystem. [ 26.716731][ T398] loop0: detected capacity change from 0 to 512 [pid 398] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 398] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 398] chdir("./file0") = 0 [pid 398] ioctl(4, LOOP_CLR_FD) = 0 [pid 398] close(4) = 0 [pid 398] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... futex resumed>) = 0 [pid 397] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 397] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 398] <... futex resumed>) = 1 [pid 398] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 398] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... futex resumed>) = 0 [pid 397] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 397] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 398] <... futex resumed>) = 1 [pid 398] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 398] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... futex resumed>) = 0 [pid 397] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 397] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 397] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 397] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 397] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 400 attached => {parent_tid=[400]}, 88) = 400 [pid 397] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 397] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 397] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 398] <... futex resumed>) = 1 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 400] set_robust_list(0x7f2089ead9a0, 24 [pid 398] <... write resumed>) = 7 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 400] <... set_robust_list resumed>) = 0 [pid 398] <... write resumed>) = 7 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 400] rt_sigprocmask(SIG_SETMASK, [], [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 398] <... write resumed>) = 7 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 400] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 398] <... write resumed>) = 7 [pid 398] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 398] write(4, 0x20000180, 7 [pid 400] <... mmap resumed>) = 0x20000000 [pid 398] <... write resumed>) = 7 [pid 398] write(4, 0x20000180, 7) = 7 [pid 398] write(4, 0x20000180, 7) = 7 [pid 398] write(4, 0x20000180, 7 [pid 400] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... write resumed>) = 7 [pid 397] <... futex resumed>) = 0 [pid 397] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 397] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 398] write(4, 0x20000180, 7) = 7 [pid 398] write(4, 0x20000180, 7 [pid 400] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... write resumed>) = 7 [pid 397] <... futex resumed>) = 0 [pid 397] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 397] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 398] write(4, 0x20000180, 7) = 7 [pid 398] write(4, 0x20000180, 7) = 7 [pid 398] write(4, 0x20000180, 7) = 7 [pid 398] write(4, 0x20000180, 7) = 7 [pid 398] write(4, 0x20000180, 7) = 7 [pid 398] write(4, 0x20000180, 7 [pid 400] <... setsockopt resumed>) = 0 [pid 398] <... write resumed>) = 7 [pid 400] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] write(4, 0x20000180, 7 [pid 400] <... futex resumed>) = 1 [pid 398] <... write resumed>) = 7 [pid 397] <... futex resumed>) = 0 [pid 400] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] write(4, 0x20000180, 7) = 7 [pid 398] write(4, 0x20000180, 7) = 7 [pid 398] write(4, 0x20000180, 7) = 7 [pid 398] write(4, 0x20000180, 7) = 7 [pid 398] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 397] exit_group(0 [pid 398] <... futex resumed>) = ? [pid 397] <... exit_group resumed>) = ? [pid 400] <... futex resumed>) = ? [pid 398] +++ exited with 0 +++ [pid 400] +++ exited with 0 +++ [pid 397] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=397, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./23/binderfs") = 0 [ 26.725214][ T398] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 26.738345][ T398] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.747922][ T398] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./23/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./23") = 0 mkdir("./24", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 401 attached , child_tidptr=0x5555574f3690) = 401 [pid 401] set_robust_list(0x5555574f36a0, 24) = 0 [pid 401] chdir("./24") = 0 [pid 401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 401] setpgid(0, 0) = 0 [pid 401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 401] write(3, "1000", 4) = 4 [pid 401] close(3) = 0 [pid 401] symlink("/dev/binderfs", "./binderfs") = 0 [pid 401] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 401] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 401] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 401] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 402 attached [pid 402] set_robust_list(0x7f2089ece9a0, 24 [pid 401] <... clone3 resumed> => {parent_tid=[402]}, 88) = 402 [pid 402] <... set_robust_list resumed>) = 0 [pid 401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 402] rt_sigprocmask(SIG_SETMASK, [], [pid 401] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 402] memfd_create("syzkaller", 0) = 3 [pid 402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 402] munmap(0x7f2081aae000, 138412032) = 0 [pid 402] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 402] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 402] close(3) = 0 [pid 402] mkdir("./file0", 0777) = 0 [ 26.775864][ T298] EXT4-fs (loop0): unmounting filesystem. [ 26.807799][ T402] loop0: detected capacity change from 0 to 512 [pid 402] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 402] chdir("./file0") = 0 [pid 402] ioctl(4, LOOP_CLR_FD) = 0 [pid 402] close(4) = 0 [pid 402] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 401] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] <... open resumed>) = 4 [pid 401] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] <... futex resumed>) = 1 [pid 401] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 402] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 401] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] <... write resumed>) = 7 [pid 401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 402] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 401] <... mmap resumed>) = 0x7f2089e8d000 [pid 401] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 402] <... write resumed>) = 7 [pid 402] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 401] <... mprotect resumed>) = 0 [pid 401] rt_sigprocmask(SIG_BLOCK, ~[], [pid 402] <... write resumed>) = 7 [pid 402] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 401] <... rt_sigprocmask resumed>[], 8) = 0 [pid 401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 404 attached => {parent_tid=[404]}, 88) = 404 [pid 404] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 404] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] <... write resumed>) = 7 [pid 401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 401] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 401] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 402] write(4, 0x20000180, 7 [pid 404] <... mmap resumed>) = 0x20000000 [pid 404] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... write resumed>) = 7 [pid 404] <... futex resumed>) = 1 [pid 402] write(4, 0x20000180, 7 [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 402] <... write resumed>) = 7 [pid 402] write(4, 0x20000180, 7 [pid 404] <... socket resumed>) = 6 [pid 402] <... write resumed>) = 7 [pid 404] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] write(4, 0x20000180, 7 [pid 404] <... futex resumed>) = 1 [pid 402] <... write resumed>) = 7 [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] write(4, 0x20000180, 7 [pid 404] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 402] <... write resumed>) = 7 [pid 402] write(4, 0x20000180, 7 [pid 404] <... setsockopt resumed>) = 0 [pid 404] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... write resumed>) = 7 [pid 404] <... futex resumed>) = 1 [pid 402] write(4, 0x20000180, 7 [pid 401] <... futex resumed>) = 0 [pid 404] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] <... write resumed>) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] write(4, 0x20000180, 7) = 7 [pid 402] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] exit_group(0 [pid 404] <... futex resumed>) = ? [pid 402] <... futex resumed>) = ? [pid 401] <... exit_group resumed>) = ? [pid 404] +++ exited with 0 +++ [pid 402] +++ exited with 0 +++ [pid 401] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=401, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./24/binderfs") = 0 [ 26.816334][ T402] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 26.829495][ T402] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.839512][ T402] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./24/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./24") = 0 mkdir("./25", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 405 ./strace-static-x86_64: Process 405 attached [pid 405] set_robust_list(0x5555574f36a0, 24) = 0 [pid 405] chdir("./25") = 0 [pid 405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 405] setpgid(0, 0) = 0 [pid 405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 405] write(3, "1000", 4) = 4 [pid 405] close(3) = 0 [pid 405] symlink("/dev/binderfs", "./binderfs") = 0 [pid 405] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 405] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 405] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 405] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 406 attached => {parent_tid=[406]}, 88) = 406 [pid 406] set_robust_list(0x7f2089ece9a0, 24 [pid 405] rt_sigprocmask(SIG_SETMASK, [], [pid 406] <... set_robust_list resumed>) = 0 [pid 405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 406] rt_sigprocmask(SIG_SETMASK, [], [pid 405] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 405] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 406] memfd_create("syzkaller", 0) = 3 [pid 406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 406] munmap(0x7f2081aae000, 138412032) = 0 [pid 406] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 406] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 406] close(3) = 0 [pid 406] mkdir("./file0", 0777) = 0 [ 26.877238][ T298] EXT4-fs (loop0): unmounting filesystem. [ 26.906388][ T406] loop0: detected capacity change from 0 to 512 [ 26.914319][ T406] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 406] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 406] chdir("./file0") = 0 [pid 406] ioctl(4, LOOP_CLR_FD) = 0 [pid 406] close(4) = 0 [pid 406] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 1 [pid 406] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 406] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 1 [pid 406] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 406] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 405] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 405] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[408]}, 88) = 408 [pid 405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 405] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 1 [pid 406] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 406] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 406] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 406] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 406] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 406] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 406] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 406] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 406] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 406] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 406] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 406] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 406] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 406] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 408 attached ) = 7 [pid 408] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 408] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 408] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 406] write(4, 0x20000180, 7 [pid 408] <... mmap resumed>) = 0x20000000 [pid 408] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... write resumed>) = 7 [pid 408] <... futex resumed>) = 1 [pid 405] <... futex resumed>) = 0 [pid 408] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] write(4, 0x20000180, 7 [pid 408] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 406] <... write resumed>) = 7 [pid 406] write(4, 0x20000180, 7) = 7 [pid 406] write(4, 0x20000180, 7) = 7 [pid 406] write(4, 0x20000180, 7) = 7 [pid 408] <... socket resumed>) = 6 [pid 406] write(4, 0x20000180, 7) = 7 [pid 408] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] write(4, 0x20000180, 7 [pid 408] <... futex resumed>) = 1 [pid 405] <... futex resumed>) = 0 [pid 406] <... write resumed>) = 7 [pid 405] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] write(4, 0x20000180, 7 [pid 408] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 406] <... write resumed>) = 7 [pid 408] <... setsockopt resumed>) = 0 [pid 406] write(4, 0x20000180, 7 [pid 408] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 408] <... futex resumed>) = 1 [pid 408] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 406] <... write resumed>) = 7 [pid 406] write(4, 0x20000180, 7) = 7 [pid 406] write(4, 0x20000180, 7) = 7 [pid 406] write(4, 0x20000180, 7) = 7 [pid 406] write(4, 0x20000180, 7) = 7 [pid 406] write(4, 0x20000180, 7) = 7 [pid 406] write(4, 0x20000180, 7) = 7 [pid 406] write(4, 0x20000180, 7) = 7 [pid 406] write(4, 0x20000180, 7) = 7 [pid 406] write(4, 0x20000180, 7) = 7 [pid 406] write(4, 0x20000180, 7) = 7 [pid 406] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] exit_group(0) = ? [pid 406] <... futex resumed>) = ? [pid 408] <... futex resumed>) = ? [pid 408] +++ exited with 0 +++ [pid 406] +++ exited with 0 +++ [pid 405] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=405, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./25/binderfs") = 0 umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./25/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./25") = 0 mkdir("./26", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 409 ./strace-static-x86_64: Process 409 attached [pid 409] set_robust_list(0x5555574f36a0, 24) = 0 [pid 409] chdir("./26") = 0 [pid 409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 409] setpgid(0, 0) = 0 [pid 409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 409] write(3, "1000", 4) = 4 [pid 409] close(3) = 0 [pid 409] symlink("/dev/binderfs", "./binderfs") = 0 [pid 409] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 409] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 409] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 409] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 409] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 409] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[410]}, 88) = 410 [pid 409] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 409] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 409] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 410 attached [pid 410] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 410] memfd_create("syzkaller", 0) = 3 [pid 410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 410] munmap(0x7f2081aae000, 138412032) = 0 [pid 410] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 26.927587][ T406] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 26.937209][ T406] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.964281][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 410] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 410] close(3) = 0 [pid 410] mkdir("./file0", 0777) = 0 [pid 410] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 410] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 410] chdir("./file0") = 0 [pid 410] ioctl(4, LOOP_CLR_FD) = 0 [pid 410] close(4) = 0 [pid 410] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 409] <... futex resumed>) = 0 [pid 410] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 409] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 409] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] <... open resumed>) = 4 [pid 410] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 409] <... futex resumed>) = 0 [pid 410] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 409] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 409] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] <... open resumed>) = 5 [pid 410] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 409] <... futex resumed>) = 0 [pid 410] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 409] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... write resumed>) = 7 [pid 409] <... futex resumed>) = 0 [pid 410] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 409] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... write resumed>) = 7 [pid 410] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 410] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 410] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 410] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 409] <... futex resumed>) = 0 [pid 409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 410] <... write resumed>) = 7 [pid 409] <... mmap resumed>) = 0x7f2089e8d000 [pid 409] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 410] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 409] <... mprotect resumed>) = 0 [pid 409] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 409] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 410] <... write resumed>) = 7 ./strace-static-x86_64: Process 412 attached [pid 410] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 412] set_robust_list(0x7f2089ead9a0, 24 [pid 410] <... write resumed>) = 7 [pid 412] <... set_robust_list resumed>) = 0 [pid 409] <... clone3 resumed> => {parent_tid=[412]}, 88) = 412 [pid 412] rt_sigprocmask(SIG_SETMASK, [], [pid 410] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 409] rt_sigprocmask(SIG_SETMASK, [], [pid 410] <... write resumed>) = 7 [pid 412] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 410] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 409] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 410] <... write resumed>) = 7 [pid 409] <... futex resumed>) = 1 [pid 412] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 410] write(4, 0x20000180, 7 [pid 409] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... mmap resumed>) = 0x20000000 [pid 410] <... write resumed>) = 7 [pid 412] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] write(4, 0x20000180, 7 [pid 409] <... futex resumed>) = 0 [pid 412] <... futex resumed>) = 1 [pid 409] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... write resumed>) = 7 [pid 409] <... futex resumed>) = 0 [pid 410] write(4, 0x20000180, 7 [pid 409] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] <... write resumed>) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 410] write(4, 0x20000180, 7 [pid 412] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 410] <... write resumed>) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 410] write(4, 0x20000180, 7 [pid 412] <... socket resumed>) = 6 [pid 410] <... write resumed>) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 410] write(4, 0x20000180, 7 [pid 412] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 409] <... futex resumed>) = 0 [pid 409] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... write resumed>) = 7 [pid 409] <... futex resumed>) = 0 [pid 410] write(4, 0x20000180, 7 [pid 409] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] <... write resumed>) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 412] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 410] write(4, 0x20000180, 7 [pid 412] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 409] <... futex resumed>) = 0 [pid 412] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] <... write resumed>) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 410] write(4, 0x20000180, 7) = 7 [pid 410] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 409] exit_group(0 [pid 412] <... futex resumed>) = ? [pid 410] <... futex resumed>) = ? [pid 409] <... exit_group resumed>) = ? [pid 412] +++ exited with 0 +++ [pid 410] +++ exited with 0 +++ [pid 409] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=409, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./26/binderfs") = 0 [ 26.979515][ T410] loop0: detected capacity change from 0 to 512 [ 26.987707][ T410] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 27.000999][ T410] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 27.010672][ T410] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./26/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./26") = 0 mkdir("./27", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 413 ./strace-static-x86_64: Process 413 attached [pid 413] set_robust_list(0x5555574f36a0, 24) = 0 [pid 413] chdir("./27") = 0 [pid 413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 413] setpgid(0, 0) = 0 [pid 413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 413] write(3, "1000", 4) = 4 [pid 413] close(3) = 0 [pid 413] symlink("/dev/binderfs", "./binderfs") = 0 [pid 413] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 413] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 413] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 413] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 414 attached [pid 414] set_robust_list(0x7f2089ece9a0, 24 [pid 413] <... clone3 resumed> => {parent_tid=[414]}, 88) = 414 [pid 414] <... set_robust_list resumed>) = 0 [pid 414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 414] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 413] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 414] <... futex resumed>) = 0 [pid 413] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 414] memfd_create("syzkaller", 0) = 3 [pid 414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 414] munmap(0x7f2081aae000, 138412032) = 0 [pid 414] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 414] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 414] close(3) = 0 [pid 414] mkdir("./file0", 0777) = 0 [ 27.038514][ T298] EXT4-fs (loop0): unmounting filesystem. [ 27.062019][ T414] loop0: detected capacity change from 0 to 512 [ 27.070630][ T414] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 414] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 414] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 414] chdir("./file0") = 0 [pid 414] ioctl(4, LOOP_CLR_FD) = 0 [pid 414] close(4) = 0 [pid 414] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] <... futex resumed>) = 0 [pid 413] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 414] <... futex resumed>) = 1 [pid 414] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 414] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] <... futex resumed>) = 0 [pid 413] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 414] <... futex resumed>) = 1 [pid 414] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 414] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] <... futex resumed>) = 0 [pid 413] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 413] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 413] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[416]}, 88) = 416 [pid 413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 413] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 414] <... futex resumed>) = 1 [pid 414] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 414] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 414] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 414] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 414] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 414] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 416 attached [pid 414] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 416] set_robust_list(0x7f2089ead9a0, 24 [pid 414] <... write resumed>) = 7 [pid 414] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 416] <... set_robust_list resumed>) = 0 [pid 414] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 414] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 416] rt_sigprocmask(SIG_SETMASK, [], [pid 414] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 416] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 414] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 416] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 414] <... write resumed>) = 7 [pid 414] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 414] write(4, 0x20000180, 7) = 7 [pid 416] <... mmap resumed>) = 0x20000000 [pid 414] write(4, 0x20000180, 7) = 7 [pid 416] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 414] write(4, 0x20000180, 7 [pid 413] <... futex resumed>) = 0 [pid 416] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 413] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 416] <... socket resumed>) = 6 [pid 414] <... write resumed>) = 7 [pid 416] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] write(4, 0x20000180, 7 [pid 416] <... futex resumed>) = 1 [pid 413] <... futex resumed>) = 0 [pid 414] <... write resumed>) = 7 [pid 413] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 416] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 414] write(4, 0x20000180, 7) = 7 [pid 416] <... setsockopt resumed>) = 0 [pid 414] write(4, 0x20000180, 7 [pid 416] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... write resumed>) = 7 [pid 416] <... futex resumed>) = 1 [pid 414] write(4, 0x20000180, 7 [pid 413] <... futex resumed>) = 0 [pid 414] <... write resumed>) = 7 [pid 416] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 414] write(4, 0x20000180, 7) = 7 [pid 414] write(4, 0x20000180, 7) = 7 [pid 414] write(4, 0x20000180, 7) = 7 [pid 414] write(4, 0x20000180, 7) = 7 [pid 414] write(4, 0x20000180, 7) = 7 [pid 414] write(4, 0x20000180, 7) = 7 [pid 414] write(4, 0x20000180, 7) = 7 [pid 414] write(4, 0x20000180, 7) = 7 [pid 414] write(4, 0x20000180, 7) = 7 [pid 414] write(4, 0x20000180, 7) = 7 [pid 414] write(4, 0x20000180, 7) = 7 [pid 414] write(4, 0x20000180, 7) = 7 [pid 414] write(4, 0x20000180, 7) = 7 [pid 414] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] exit_group(0 [pid 416] <... futex resumed>) = ? [pid 413] <... exit_group resumed>) = ? [pid 416] +++ exited with 0 +++ [pid 414] +++ exited with 0 +++ [pid 413] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=413, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./27/binderfs") = 0 umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./27/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./27") = 0 mkdir("./28", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 417 ./strace-static-x86_64: Process 417 attached [pid 417] set_robust_list(0x5555574f36a0, 24) = 0 [pid 417] chdir("./28") = 0 [pid 417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 417] setpgid(0, 0) = 0 [pid 417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 417] write(3, "1000", 4) = 4 [pid 417] close(3) = 0 [pid 417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 417] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 417] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 417] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 417] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[418]}, 88) = 418 ./strace-static-x86_64: Process 418 attached [pid 418] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 418] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 417] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 418] <... futex resumed>) = 0 [pid 418] memfd_create("syzkaller", 0) = 3 [pid 418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 418] munmap(0x7f2081aae000, 138412032) = 0 [pid 418] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 27.083788][ T414] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 27.093435][ T414] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 27.123068][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 418] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 418] close(3) = 0 [pid 418] mkdir("./file0", 0777) = 0 [pid 418] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 418] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 418] chdir("./file0") = 0 [pid 418] ioctl(4, LOOP_CLR_FD) = 0 [pid 418] close(4) = 0 [pid 418] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 0 [pid 418] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 418] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 1 [pid 418] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 418] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 418] <... futex resumed>) = 1 [pid 417] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 417] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 418] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 417] <... clone3 resumed> => {parent_tid=[420]}, 88) = 420 [pid 417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 417] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 420 attached [pid 420] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 420] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 420] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 420] <... futex resumed>) = 1 [pid 420] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 420] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 420] <... futex resumed>) = 1 [pid 420] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 417] <... futex resumed>) = ? [pid 418] <... write resumed>) = ? [pid 420] +++ killed by SIGBUS +++ [pid 418] +++ killed by SIGBUS +++ [pid 417] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=417, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./28/binderfs") = 0 [ 27.148061][ T418] loop0: detected capacity change from 0 to 512 [ 27.156883][ T418] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 27.170458][ T418] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 27.180180][ T418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./28/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./28") = 0 mkdir("./29", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 421 ./strace-static-x86_64: Process 421 attached [pid 421] set_robust_list(0x5555574f36a0, 24) = 0 [pid 421] chdir("./29") = 0 [pid 421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 421] setpgid(0, 0) = 0 [pid 421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 421] write(3, "1000", 4) = 4 [pid 421] close(3) = 0 [pid 421] symlink("/dev/binderfs", "./binderfs") = 0 [pid 421] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 421] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 421] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 421] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 421] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 422 attached => {parent_tid=[422]}, 88) = 422 [pid 422] set_robust_list(0x7f2089ece9a0, 24 [pid 421] rt_sigprocmask(SIG_SETMASK, [], [pid 422] <... set_robust_list resumed>) = 0 [pid 421] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 422] rt_sigprocmask(SIG_SETMASK, [], [pid 421] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 422] memfd_create("syzkaller", 0) = 3 [pid 422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 422] munmap(0x7f2081aae000, 138412032) = 0 [pid 422] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 422] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 422] close(3) = 0 [pid 422] mkdir("./file0", 0777) = 0 [ 27.198220][ T298] EXT4-fs (loop0): unmounting filesystem. [ 27.223958][ T422] loop0: detected capacity change from 0 to 512 [ 27.232376][ T422] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 422] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 422] chdir("./file0") = 0 [pid 422] ioctl(4, LOOP_CLR_FD) = 0 [pid 422] close(4) = 0 [pid 422] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 1 [pid 422] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 422] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = 1 [pid 422] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 422] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 421] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 422] <... futex resumed>) = 1 [pid 421] <... mprotect resumed>) = 0 [pid 421] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 421] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 422] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 421] <... clone3 resumed> => {parent_tid=[425]}, 88) = 425 [pid 421] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 421] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 425 attached [pid 425] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 425] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 425] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 425] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 421] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 421] <... futex resumed>) = ? [pid 422] <... write resumed>) = ? [pid 425] +++ killed by SIGBUS +++ [pid 422] +++ killed by SIGBUS +++ [pid 421] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=421, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./29/binderfs") = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./29/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./29") = 0 mkdir("./30", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 426 ./strace-static-x86_64: Process 426 attached [pid 426] set_robust_list(0x5555574f36a0, 24) = 0 [pid 426] chdir("./30") = 0 [pid 426] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 426] setpgid(0, 0) = 0 [pid 426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 426] write(3, "1000", 4) = 4 [pid 426] close(3) = 0 [pid 426] symlink("/dev/binderfs", "./binderfs") = 0 [pid 426] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 426] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 426] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 426] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 426] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 427 attached [pid 427] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 427] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] <... clone3 resumed> => {parent_tid=[427]}, 88) = 427 [pid 426] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 426] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 427] <... futex resumed>) = 0 [pid 427] memfd_create("syzkaller", 0) = 3 [pid 427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 426] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 427] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 427] munmap(0x7f2081aae000, 138412032) = 0 [pid 427] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 27.245537][ T422] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 27.255472][ T422] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 27.275452][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 427] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 427] close(3) = 0 [pid 427] mkdir("./file0", 0777) = 0 [pid 427] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 427] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 427] chdir("./file0") = 0 [pid 427] ioctl(4, LOOP_CLR_FD) = 0 [pid 427] close(4) = 0 [pid 427] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 1 [pid 427] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 427] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 1 [pid 427] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 427] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = 1 [pid 426] <... futex resumed>) = 0 [pid 426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 426] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 426] <... mprotect resumed>) = 0 [pid 426] rt_sigprocmask(SIG_BLOCK, ~[], [pid 427] <... write resumed>) = 7 [pid 426] <... rt_sigprocmask resumed>[], 8) = 0 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 426] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 427] <... write resumed>) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 426] <... clone3 resumed> => {parent_tid=[429]}, 88) = 429 [pid 427] <... write resumed>) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 426] rt_sigprocmask(SIG_SETMASK, [], [pid 427] <... write resumed>) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 427] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 429 attached [pid 429] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 429] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 426] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 429] <... futex resumed>) = 0 [pid 426] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 429] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 0 [pid 427] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 427] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 1 [pid 429] <... futex resumed>) = 1 [pid 429] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 427] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 427] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 427] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] exit_group(0) = ? [pid 427] <... futex resumed>) = ? [pid 427] +++ exited with 0 +++ [pid 429] <... futex resumed>) = ? [pid 429] +++ exited with 0 +++ [pid 426] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=426, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./30/binderfs") = 0 [ 27.299202][ T427] loop0: detected capacity change from 0 to 512 [ 27.307982][ T427] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 27.321279][ T427] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 27.331033][ T427] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./30/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./30") = 0 mkdir("./31", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 430 ./strace-static-x86_64: Process 430 attached [pid 430] set_robust_list(0x5555574f36a0, 24) = 0 [pid 430] chdir("./31") = 0 [pid 430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 430] setpgid(0, 0) = 0 [pid 430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 430] write(3, "1000", 4) = 4 [pid 430] close(3) = 0 [pid 430] symlink("/dev/binderfs", "./binderfs") = 0 [pid 430] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 430] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 430] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 430] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 430] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 431 attached => {parent_tid=[431]}, 88) = 431 [pid 431] set_robust_list(0x7f2089ece9a0, 24 [pid 430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 430] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 431] <... set_robust_list resumed>) = 0 [pid 431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 431] memfd_create("syzkaller", 0) = 3 [pid 431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 431] munmap(0x7f2081aae000, 138412032) = 0 [pid 431] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 431] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 431] close(3) = 0 [pid 431] mkdir("./file0", 0777) = 0 [ 27.353481][ T298] EXT4-fs (loop0): unmounting filesystem. [ 27.380268][ T431] loop0: detected capacity change from 0 to 512 [ 27.387985][ T431] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 431] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 431] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 431] chdir("./file0") = 0 [pid 431] ioctl(4, LOOP_CLR_FD) = 0 [pid 431] close(4) = 0 [pid 431] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 431] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 431] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 430] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 430] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 430] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[433]}, 88) = 433 [pid 430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 430] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 433 attached [pid 433] set_robust_list(0x7f2089ead9a0, 24 [pid 431] <... write resumed>) = 7 [pid 431] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 431] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 433] <... set_robust_list resumed>) = 0 [pid 431] <... write resumed>) = 7 [pid 433] rt_sigprocmask(SIG_SETMASK, [], [pid 431] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 431] <... write resumed>) = 7 [pid 433] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 431] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 431] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 431] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 431] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 431] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 431] write(4, 0x20000180, 7 [pid 433] <... mmap resumed>) = 0x20000000 [pid 431] <... write resumed>) = 7 [pid 433] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] write(4, 0x20000180, 7) = 7 [pid 431] write(4, 0x20000180, 7) = 7 [pid 431] write(4, 0x20000180, 7) = 7 [pid 431] write(4, 0x20000180, 7 [pid 433] <... futex resumed>) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] <... write resumed>) = 7 [pid 430] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] write(4, 0x20000180, 7) = 7 [pid 431] write(4, 0x20000180, 7 [pid 433] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 431] <... write resumed>) = 7 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] write(4, 0x20000180, 7) = 7 [pid 431] write(4, 0x20000180, 7) = 7 [pid 431] write(4, 0x20000180, 7 [pid 433] <... socket resumed>) = 6 [pid 431] <... write resumed>) = 7 [pid 433] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] write(4, 0x20000180, 7) = 7 [pid 431] write(4, 0x20000180, 7 [pid 433] <... futex resumed>) = 1 [pid 431] <... write resumed>) = 7 [pid 430] <... futex resumed>) = 0 [pid 431] write(4, 0x20000180, 7 [pid 430] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... write resumed>) = 7 [pid 431] write(4, 0x20000180, 7) = 7 [pid 431] write(4, 0x20000180, 7) = 7 [pid 431] write(4, 0x20000180, 7) = 7 [pid 431] write(4, 0x20000180, 7 [pid 433] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 431] <... write resumed>) = 7 [pid 431] write(4, 0x20000180, 7) = 7 [pid 431] write(4, 0x20000180, 7) = 7 [pid 431] write(4, 0x20000180, 7 [pid 433] <... setsockopt resumed>) = 0 [pid 431] <... write resumed>) = 7 [pid 431] write(4, 0x20000180, 7) = 7 [pid 431] write(4, 0x20000180, 7 [pid 433] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... write resumed>) = 7 [pid 431] write(4, 0x20000180, 7) = 7 [pid 431] write(4, 0x20000180, 7 [pid 433] <... futex resumed>) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] <... write resumed>) = 7 [pid 431] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 433] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] exit_group(0) = ? [pid 431] <... futex resumed>) = ? [pid 433] <... futex resumed>) = ? [pid 431] +++ exited with 0 +++ [pid 433] +++ exited with 0 +++ [pid 430] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=430, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./31/binderfs") = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./31/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./31") = 0 mkdir("./32", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 434 ./strace-static-x86_64: Process 434 attached [pid 434] set_robust_list(0x5555574f36a0, 24) = 0 [pid 434] chdir("./32") = 0 [pid 434] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 434] setpgid(0, 0) = 0 [pid 434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 434] write(3, "1000", 4) = 4 [pid 434] close(3) = 0 [pid 434] symlink("/dev/binderfs", "./binderfs") = 0 [pid 434] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 434] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 434] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 434] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 435 attached [pid 435] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 435] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] <... clone3 resumed> => {parent_tid=[435]}, 88) = 435 [pid 434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 434] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 434] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 435] memfd_create("syzkaller", 0) = 3 [pid 435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [ 27.401255][ T431] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 27.410833][ T431] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [pid 435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 435] munmap(0x7f2081aae000, 138412032) = 0 [pid 435] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 435] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 435] close(3) = 0 [pid 435] mkdir("./file0", 0777) = 0 [pid 435] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 435] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 435] chdir("./file0") = 0 [pid 435] ioctl(4, LOOP_CLR_FD) = 0 [pid 435] close(4) = 0 [pid 435] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] <... futex resumed>) = 1 [pid 435] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 435] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] <... futex resumed>) = 1 [pid 435] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 435] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 434] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 434] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 437 attached => {parent_tid=[437]}, 88) = 437 [pid 434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 434] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] <... futex resumed>) = 1 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 437] set_robust_list(0x7f2089ead9a0, 24 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 437] <... set_robust_list resumed>) = 0 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 437] rt_sigprocmask(SIG_SETMASK, [], [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 437] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 435] <... write resumed>) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 437] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 435] <... write resumed>) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 435] write(4, 0x20000180, 7) = 7 [pid 435] write(4, 0x20000180, 7) = 7 [pid 437] <... mmap resumed>) = 0x20000000 [pid 435] write(4, 0x20000180, 7 [pid 437] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... write resumed>) = 7 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 435] write(4, 0x20000180, 7 [pid 437] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... write resumed>) = 7 [pid 435] write(4, 0x20000180, 7 [pid 437] <... futex resumed>) = 1 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] <... write resumed>) = 7 [pid 435] write(4, 0x20000180, 7 [pid 437] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 435] <... write resumed>) = 7 [pid 435] write(4, 0x20000180, 7 [pid 437] <... setsockopt resumed>) = 0 [pid 437] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... write resumed>) = 7 [pid 437] <... futex resumed>) = 1 [pid 435] write(4, 0x20000180, 7 [pid 434] <... futex resumed>) = 0 [pid 437] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] <... write resumed>) = 7 [pid 435] write(4, 0x20000180, 7) = 7 [pid 435] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] exit_group(0 [pid 437] <... futex resumed>) = ? [pid 434] <... exit_group resumed>) = ? [pid 437] +++ exited with 0 +++ [pid 435] <... futex resumed>) = ? [pid 435] +++ exited with 0 +++ [pid 434] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=434, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./32/binderfs") = 0 umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./32/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./32") = 0 mkdir("./33", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 438 ./strace-static-x86_64: Process 438 attached [pid 438] set_robust_list(0x5555574f36a0, 24) = 0 [pid 438] chdir("./33") = 0 [pid 438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 438] setpgid(0, 0) = 0 [pid 438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 438] write(3, "1000", 4) = 4 [pid 438] close(3) = 0 [pid 438] symlink("/dev/binderfs", "./binderfs") = 0 [pid 438] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 438] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 438] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[439]}, 88) = 439 ./strace-static-x86_64: Process 439 attached [pid 439] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 439] rt_sigprocmask(SIG_SETMASK, [], [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 439] memfd_create("syzkaller", 0) = 3 [pid 439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 439] munmap(0x7f2081aae000, 138412032) = 0 [pid 439] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 27.451116][ T435] loop0: detected capacity change from 0 to 512 [ 27.459104][ T435] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 27.472379][ T435] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 439] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 439] close(3) = 0 [pid 439] mkdir("./file0", 0777) = 0 [pid 439] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 439] chdir("./file0") = 0 [pid 439] ioctl(4, LOOP_CLR_FD) = 0 [pid 439] close(4) = 0 [pid 439] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 439] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 439] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 438] <... futex resumed>) = 0 [pid 439] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 438] <... futex resumed>) = 0 [pid 439] <... write resumed>) = 7 [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 438] <... mmap resumed>) = 0x7f2089e8d000 [pid 438] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 438] <... mprotect resumed>) = 0 [pid 438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 439] <... write resumed>) = 7 [pid 438] <... clone3 resumed> => {parent_tid=[441]}, 88) = 441 ./strace-static-x86_64: Process 441 attached [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 441] set_robust_list(0x7f2089ead9a0, 24 [pid 439] <... write resumed>) = 7 [pid 441] <... set_robust_list resumed>) = 0 [pid 439] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 441] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] <... write resumed>) = 7 [pid 441] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 439] write(4, 0x20000180, 7 [pid 441] <... mmap resumed>) = 0x20000000 [pid 441] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 441] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... write resumed>) = 7 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 439] write(4, 0x20000180, 7 [pid 441] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 439] <... write resumed>) = 7 [pid 441] <... setsockopt resumed>) = 0 [pid 441] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 441] <... futex resumed>) = 1 [pid 441] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] write(4, 0x20000180, 7) = 7 [pid 439] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] exit_group(0 [pid 439] <... futex resumed>) = ? [pid 438] <... exit_group resumed>) = ? [pid 439] +++ exited with 0 +++ [pid 441] <... futex resumed>) = ? [pid 441] +++ exited with 0 +++ [pid 438] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=438, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./33/binderfs") = 0 umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./33/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./33") = 0 mkdir("./34", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 442 ./strace-static-x86_64: Process 442 attached [pid 442] set_robust_list(0x5555574f36a0, 24) = 0 [pid 442] chdir("./34") = 0 [pid 442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 442] setpgid(0, 0) = 0 [pid 442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 442] write(3, "1000", 4) = 4 [pid 442] close(3) = 0 [pid 442] symlink("/dev/binderfs", "./binderfs") = 0 [pid 442] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 442] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 442] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 443 attached [pid 443] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 443] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] <... clone3 resumed> => {parent_tid=[443]}, 88) = 443 [pid 442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 442] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 443] <... futex resumed>) = 0 [pid 443] memfd_create("syzkaller", 0) = 3 [pid 443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 443] munmap(0x7f2081aae000, 138412032) = 0 [pid 443] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 27.515610][ T439] loop0: detected capacity change from 0 to 512 [ 27.524108][ T439] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 27.537305][ T439] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 443] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 443] close(3) = 0 [pid 443] mkdir("./file0", 0777) = 0 [pid 443] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 443] chdir("./file0") = 0 [pid 443] ioctl(4, LOOP_CLR_FD) = 0 [pid 443] close(4) = 0 [pid 443] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... futex resumed>) = 1 [pid 443] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 443] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... futex resumed>) = 1 [pid 443] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 443] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 442] <... futex resumed>) = 0 [pid 442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 442] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 442] rt_sigprocmask(SIG_BLOCK, ~[], [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 442] <... rt_sigprocmask resumed>[], 8) = 0 [pid 443] <... write resumed>) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 443] <... write resumed>) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 442] <... clone3 resumed> => {parent_tid=[445]}, 88) = 445 [pid 442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 442] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 445 attached [pid 443] <... write resumed>) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 445] set_robust_list(0x7f2089ead9a0, 24 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 445] <... set_robust_list resumed>) = 0 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 445] rt_sigprocmask(SIG_SETMASK, [], [pid 443] <... write resumed>) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 445] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 443] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 443] write(4, 0x20000180, 7 [pid 445] <... mmap resumed>) = 0x20000000 [pid 443] <... write resumed>) = 7 [pid 443] write(4, 0x20000180, 7) = 7 [pid 443] write(4, 0x20000180, 7) = 7 [pid 443] write(4, 0x20000180, 7) = 7 [pid 445] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] write(4, 0x20000180, 7) = 7 [pid 443] write(4, 0x20000180, 7) = 7 [pid 443] write(4, 0x20000180, 7) = 7 [pid 443] write(4, 0x20000180, 7) = 7 [pid 442] <... futex resumed>) = 0 [pid 443] write(4, 0x20000180, 7) = 7 [pid 443] write(4, 0x20000180, 7 [pid 445] <... futex resumed>) = 1 [pid 442] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... write resumed>) = 7 [pid 443] write(4, 0x20000180, 7) = 7 [pid 443] write(4, 0x20000180, 7) = 7 [pid 443] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 445] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 445] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 445] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 442] <... futex resumed>) = 1 [pid 442] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 443] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 443] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] exit_group(0 [pid 445] <... futex resumed>) = ? [pid 443] <... futex resumed>) = ? [pid 442] <... exit_group resumed>) = ? [pid 443] +++ exited with 0 +++ [pid 445] +++ exited with 0 +++ [pid 442] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=442, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./34/binderfs") = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./34/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./34") = 0 mkdir("./35", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 446 attached , child_tidptr=0x5555574f3690) = 446 [pid 446] set_robust_list(0x5555574f36a0, 24) = 0 [pid 446] chdir("./35") = 0 [pid 446] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 446] setpgid(0, 0) = 0 [pid 446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 446] write(3, "1000", 4) = 4 [pid 446] close(3) = 0 [pid 446] symlink("/dev/binderfs", "./binderfs") = 0 [pid 446] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 446] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 446] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 446] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 446] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 447 attached [pid 447] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 447] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 447] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 446] <... clone3 resumed> => {parent_tid=[447]}, 88) = 447 [pid 446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 446] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 447] <... futex resumed>) = 0 [pid 446] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 447] memfd_create("syzkaller", 0) = 3 [pid 447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 447] munmap(0x7f2081aae000, 138412032) = 0 [pid 447] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 27.582121][ T443] loop0: detected capacity change from 0 to 512 [ 27.590652][ T443] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 27.603880][ T443] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 447] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 447] close(3) = 0 [pid 447] mkdir("./file0", 0777) = 0 [pid 447] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 447] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 447] chdir("./file0") = 0 [pid 447] ioctl(4, LOOP_CLR_FD) = 0 [pid 447] close(4) = 0 [pid 447] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 447] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 446] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] <... futex resumed>) = 0 [pid 447] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 447] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] <... futex resumed>) = 1 [pid 447] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 447] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 446] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 446] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 446] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[449]}, 88) = 449 [pid 446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 446] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] <... futex resumed>) = 1 [pid 447] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 447] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 447] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 447] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 449 attached ) = 7 [pid 449] set_robust_list(0x7f2089ead9a0, 24 [pid 447] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 449] <... set_robust_list resumed>) = 0 [pid 447] <... write resumed>) = 7 [pid 449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 449] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 449] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] write(4, 0x20000180, 7 [pid 446] <... futex resumed>) = 0 [pid 449] <... futex resumed>) = 1 [pid 446] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 447] <... write resumed>) = 7 [pid 446] <... futex resumed>) = 0 [pid 449] <... socket resumed>) = 6 [pid 447] write(4, 0x20000180, 7 [pid 446] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... write resumed>) = 7 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 447] write(4, 0x20000180, 7) = 7 [pid 449] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 447] write(4, 0x20000180, 7 [pid 449] <... setsockopt resumed>) = 0 [pid 449] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = 0 [pid 447] <... write resumed>) = 7 [pid 449] <... futex resumed>) = 1 [pid 449] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] write(4, 0x20000180, 7) = 7 [pid 447] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 446] exit_group(0) = ? [pid 449] <... futex resumed>) = ? [pid 449] +++ exited with 0 +++ [pid 447] <... futex resumed>) = ? [pid 447] +++ exited with 0 +++ [pid 446] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=446, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./35/binderfs") = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./35/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./35") = 0 mkdir("./36", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 450 ./strace-static-x86_64: Process 450 attached [pid 450] set_robust_list(0x5555574f36a0, 24) = 0 [pid 450] chdir("./36") = 0 [pid 450] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 450] setpgid(0, 0) = 0 [pid 450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 450] write(3, "1000", 4) = 4 [pid 450] close(3) = 0 [pid 450] symlink("/dev/binderfs", "./binderfs") = 0 [pid 450] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 450] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 450] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 450] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 450] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[451]}, 88) = 451 ./strace-static-x86_64: Process 451 attached [pid 451] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 451] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 450] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 451] <... futex resumed>) = 0 [pid 450] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 451] memfd_create("syzkaller", 0) = 3 [pid 451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 451] munmap(0x7f2081aae000, 138412032) = 0 [pid 451] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 27.644908][ T447] loop0: detected capacity change from 0 to 512 [ 27.652791][ T447] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 27.666148][ T447] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 451] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 451] close(3) = 0 [pid 451] mkdir("./file0", 0777) = 0 [pid 451] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 451] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 451] chdir("./file0") = 0 [pid 451] ioctl(4, LOOP_CLR_FD) = 0 [pid 451] close(4) = 0 [pid 451] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 451] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 451] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 450] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 450] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 450] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[454]}, 88) = 454 [pid 450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 450] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 454 attached ) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 451] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 451] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 454] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 454] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] <... futex resumed>) = 0 [pid 454] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 450] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 0 [pid 451] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 451] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] <... futex resumed>) = 0 [pid 451] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 450] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 0 [pid 451] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 451] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = 0 [pid 450] exit_group(0) = ? [pid 454] <... futex resumed>) = ? [pid 454] +++ exited with 0 +++ [pid 451] <... futex resumed>) = ? [pid 451] +++ exited with 0 +++ [pid 450] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=450, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./36/binderfs") = 0 umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./36/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./36") = 0 mkdir("./37", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 455 ./strace-static-x86_64: Process 455 attached [pid 455] set_robust_list(0x5555574f36a0, 24) = 0 [pid 455] chdir("./37") = 0 [pid 455] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 455] setpgid(0, 0) = 0 [pid 455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 455] write(3, "1000", 4) = 4 [pid 455] close(3) = 0 [pid 455] symlink("/dev/binderfs", "./binderfs") = 0 [pid 455] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 455] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 455] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 455] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 455] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 455] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 456 attached [pid 456] set_robust_list(0x7f2089ece9a0, 24 [pid 455] <... clone3 resumed> => {parent_tid=[456]}, 88) = 456 [pid 456] <... set_robust_list resumed>) = 0 [pid 455] rt_sigprocmask(SIG_SETMASK, [], [pid 456] rt_sigprocmask(SIG_SETMASK, [], [pid 455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 455] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 456] memfd_create("syzkaller", 0) = 3 [pid 456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 456] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 456] munmap(0x7f2081aae000, 138412032) = 0 [pid 456] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 27.709173][ T451] loop0: detected capacity change from 0 to 512 [ 27.717679][ T451] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 27.730822][ T451] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 456] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 456] close(3) = 0 [pid 456] mkdir("./file0", 0777) = 0 [pid 456] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 456] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 456] chdir("./file0") = 0 [pid 456] ioctl(4, LOOP_CLR_FD) = 0 [pid 456] close(4) = 0 [pid 456] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 1 [pid 456] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 456] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = 1 [pid 456] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 456] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 455] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 455] rt_sigprocmask(SIG_BLOCK, ~[], [pid 456] <... futex resumed>) = 1 [pid 455] <... rt_sigprocmask resumed>[], 8) = 0 [pid 455] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 458 attached [pid 455] <... clone3 resumed> => {parent_tid=[458]}, 88) = 458 [pid 458] set_robust_list(0x7f2089ead9a0, 24 [pid 456] <... write resumed>) = 7 [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 458] <... set_robust_list resumed>) = 0 [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 455] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 455] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... write resumed>) = 7 [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 458] rt_sigprocmask(SIG_SETMASK, [], [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 458] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 458] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 456] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 456] write(4, 0x20000180, 7 [pid 458] <... mmap resumed>) = 0x20000000 [pid 458] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... write resumed>) = 7 [pid 456] write(4, 0x20000180, 7) = 7 [pid 455] <... futex resumed>) = 0 [pid 455] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] <... futex resumed>) = 1 [pid 455] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 458] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 456] write(4, 0x20000180, 7 [pid 458] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... write resumed>) = 7 [pid 458] <... futex resumed>) = 1 [pid 456] write(4, 0x20000180, 7 [pid 455] <... futex resumed>) = 0 [pid 455] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... write resumed>) = 7 [pid 458] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 456] write(4, 0x20000180, 7 [pid 458] <... setsockopt resumed>) = 0 [pid 458] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... write resumed>) = 7 [pid 458] <... futex resumed>) = 1 [pid 456] write(4, 0x20000180, 7 [pid 455] <... futex resumed>) = 0 [pid 458] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] <... write resumed>) = 7 [pid 456] write(4, 0x20000180, 7) = 7 [pid 456] write(4, 0x20000180, 7) = 7 [pid 456] write(4, 0x20000180, 7) = 7 [pid 456] write(4, 0x20000180, 7) = 7 [pid 456] write(4, 0x20000180, 7) = 7 [pid 456] write(4, 0x20000180, 7) = 7 [pid 456] write(4, 0x20000180, 7) = 7 [pid 456] write(4, 0x20000180, 7) = 7 [pid 456] write(4, 0x20000180, 7) = 7 [pid 456] write(4, 0x20000180, 7) = 7 [pid 456] write(4, 0x20000180, 7) = 7 [pid 456] write(4, 0x20000180, 7) = 7 [pid 456] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 455] exit_group(0 [pid 456] <... futex resumed>) = ? [pid 455] <... exit_group resumed>) = ? [pid 458] <... futex resumed>) = ? [pid 458] +++ exited with 0 +++ [pid 456] +++ exited with 0 +++ [pid 455] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=455, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./37/binderfs") = 0 umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./37/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./37") = 0 mkdir("./38", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 459 ./strace-static-x86_64: Process 459 attached [pid 459] set_robust_list(0x5555574f36a0, 24) = 0 [pid 459] chdir("./38") = 0 [pid 459] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 459] setpgid(0, 0) = 0 [pid 459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 459] write(3, "1000", 4) = 4 [pid 459] close(3) = 0 [pid 459] symlink("/dev/binderfs", "./binderfs") = 0 [pid 459] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 459] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 459] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 459] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 459] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[460]}, 88) = 460 [pid 459] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 459] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 460 attached [pid 460] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 460] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 460] memfd_create("syzkaller", 0) = 3 [pid 460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 460] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 460] munmap(0x7f2081aae000, 138412032) = 0 [pid 460] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 27.774447][ T456] loop0: detected capacity change from 0 to 512 [ 27.783268][ T456] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 27.796513][ T456] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 460] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 460] close(3) = 0 [pid 460] mkdir("./file0", 0777) = 0 [pid 460] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 460] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 460] chdir("./file0") = 0 [pid 460] ioctl(4, LOOP_CLR_FD) = 0 [pid 460] close(4) = 0 [pid 460] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] <... open resumed>) = 4 [pid 460] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 460] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 459] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 460] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 459] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 460] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 460] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 459] rt_sigprocmask(SIG_BLOCK, ~[], [pid 460] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 459] <... rt_sigprocmask resumed>[], 8) = 0 [pid 460] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 459] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 462 attached [pid 460] <... write resumed>) = 7 [pid 460] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 459] <... clone3 resumed> => {parent_tid=[462]}, 88) = 462 [pid 460] <... write resumed>) = 7 [pid 459] rt_sigprocmask(SIG_SETMASK, [], [pid 460] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 459] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 462] set_robust_list(0x7f2089ead9a0, 24 [pid 460] <... write resumed>) = 7 [pid 459] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... set_robust_list resumed>) = 0 [pid 462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 462] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 460] write(4, 0x20000180, 7 [pid 462] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 459] <... futex resumed>) = 0 [pid 462] <... socket resumed>) = 6 [pid 459] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... write resumed>) = 7 [pid 462] <... futex resumed>) = 1 [pid 459] <... futex resumed>) = 0 [pid 462] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 460] write(4, 0x20000180, 7 [pid 459] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... setsockopt resumed>) = 0 [pid 459] <... futex resumed>) = 0 [pid 462] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... futex resumed>) = 0 [pid 459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] <... write resumed>) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] write(4, 0x20000180, 7) = 7 [pid 460] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 459] exit_group(0 [pid 462] <... futex resumed>) = ? [pid 460] <... futex resumed>) = ? [pid 459] <... exit_group resumed>) = ? [pid 462] +++ exited with 0 +++ [pid 460] +++ exited with 0 +++ [pid 459] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=459, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./38/binderfs") = 0 umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./38/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./38") = 0 mkdir("./39", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 463 ./strace-static-x86_64: Process 463 attached [pid 463] set_robust_list(0x5555574f36a0, 24) = 0 [pid 463] chdir("./39") = 0 [pid 463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 463] setpgid(0, 0) = 0 [pid 463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 463] write(3, "1000", 4) = 4 [pid 463] close(3) = 0 [pid 463] symlink("/dev/binderfs", "./binderfs") = 0 [pid 463] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 463] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 463] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 463] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 463] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[464]}, 88) = 464 [pid 463] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 463] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 464 attached [pid 464] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 464] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 464] memfd_create("syzkaller", 0) = 3 [pid 464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 464] munmap(0x7f2081aae000, 138412032) = 0 [pid 464] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 27.843795][ T460] loop0: detected capacity change from 0 to 512 [ 27.852569][ T460] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 27.865921][ T460] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 464] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 464] close(3) = 0 [pid 464] mkdir("./file0", 0777) = 0 [pid 464] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 464] chdir("./file0") = 0 [pid 464] ioctl(4, LOOP_CLR_FD) = 0 [pid 464] close(4) = 0 [pid 464] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 1 [pid 464] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 464] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 1 [pid 464] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 464] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 463] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 463] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 463] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[466]}, 88) = 466 [pid 464] <... futex resumed>) = 1 [pid 463] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 463] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 466 attached [pid 466] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 466] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 466] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... futex resumed>) = 1 [pid 466] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 466] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... futex resumed>) = 1 [pid 466] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 463] <... futex resumed>) = ? [pid 464] +++ killed by SIGBUS +++ [pid 466] +++ killed by SIGBUS +++ [pid 463] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=463, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./39/binderfs") = 0 umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./39/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./39") = 0 mkdir("./40", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 467 ./strace-static-x86_64: Process 467 attached [pid 467] set_robust_list(0x5555574f36a0, 24) = 0 [pid 467] chdir("./40") = 0 [pid 467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 467] setpgid(0, 0) = 0 [pid 467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 467] write(3, "1000", 4) = 4 [pid 467] close(3) = 0 [pid 467] symlink("/dev/binderfs", "./binderfs") = 0 [pid 467] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 467] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 467] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 467] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[468]}, 88) = 468 [pid 467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 467] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 468 attached [pid 468] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 468] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 468] memfd_create("syzkaller", 0) = 3 [pid 468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 468] munmap(0x7f2081aae000, 138412032) = 0 [ 27.911237][ T464] loop0: detected capacity change from 0 to 512 [ 27.918910][ T464] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 27.932082][ T464] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 468] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 468] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 468] close(3) = 0 [pid 468] mkdir("./file0", 0777) = 0 [pid 468] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 468] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 468] chdir("./file0") = 0 [pid 468] ioctl(4, LOOP_CLR_FD) = 0 [pid 468] close(4) = 0 [pid 468] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 468] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 468] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 467] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 468] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 467] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 468] <... write resumed>) = 7 [pid 467] <... clone3 resumed> => {parent_tid=[470]}, 88) = 470 ./strace-static-x86_64: Process 470 attached [pid 467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 467] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 470] set_robust_list(0x7f2089ead9a0, 24 [pid 468] <... write resumed>) = 7 [pid 470] <... set_robust_list resumed>) = 0 [pid 468] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 470] rt_sigprocmask(SIG_SETMASK, [], [pid 468] <... write resumed>) = 7 [pid 470] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 468] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 470] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 468] <... write resumed>) = 7 [pid 468] write(4, 0x20000180, 7 [pid 470] <... mmap resumed>) = 0x20000000 [pid 470] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... write resumed>) = 7 [pid 470] <... futex resumed>) = 1 [pid 468] write(4, 0x20000180, 7 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 470] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 468] <... write resumed>) = 7 [pid 468] write(4, 0x20000180, 7 [pid 470] <... socket resumed>) = 6 [pid 468] <... write resumed>) = 7 [pid 470] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] write(4, 0x20000180, 7 [pid 470] <... futex resumed>) = 1 [pid 468] <... write resumed>) = 7 [pid 467] <... futex resumed>) = 0 [pid 468] write(4, 0x20000180, 7 [pid 467] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... write resumed>) = 7 [pid 467] <... futex resumed>) = 0 [pid 468] write(4, 0x20000180, 7 [pid 467] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... write resumed>) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] write(4, 0x20000180, 7) = 7 [pid 468] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 468] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 470] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 467] exit_group(0 [pid 468] <... futex resumed>) = ? [pid 467] <... exit_group resumed>) = ? [pid 468] +++ exited with 0 +++ [pid 470] +++ exited with 0 +++ [pid 467] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=467, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./40/binderfs") = 0 umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./40/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./40") = 0 mkdir("./41", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 471 attached , child_tidptr=0x5555574f3690) = 471 [pid 471] set_robust_list(0x5555574f36a0, 24) = 0 [pid 471] chdir("./41") = 0 [pid 471] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 471] setpgid(0, 0) = 0 [pid 471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 471] write(3, "1000", 4) = 4 [pid 471] close(3) = 0 [pid 471] symlink("/dev/binderfs", "./binderfs") = 0 [pid 471] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 471] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 471] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 471] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 471] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[472]}, 88) = 472 [pid 471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 471] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 472 attached [pid 472] set_robust_list(0x7f2089ece9a0, 24) = 0 [ 27.967642][ T468] loop0: detected capacity change from 0 to 512 [ 27.976895][ T468] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 27.990281][ T468] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 472] memfd_create("syzkaller", 0) = 3 [pid 472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 472] munmap(0x7f2081aae000, 138412032) = 0 [pid 472] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 472] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 472] close(3) = 0 [pid 472] mkdir("./file0", 0777) = 0 [pid 472] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 472] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 472] chdir("./file0") = 0 [pid 472] ioctl(4, LOOP_CLR_FD) = 0 [pid 472] close(4) = 0 [pid 472] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] <... futex resumed>) = 0 [pid 472] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 471] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 472] <... open resumed>) = 4 [pid 472] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] <... futex resumed>) = 0 [pid 472] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 471] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... open resumed>) = 5 [pid 471] <... futex resumed>) = 0 [pid 472] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 472] <... futex resumed>) = 0 [pid 471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 471] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... write resumed>) = 7 [pid 471] <... futex resumed>) = 0 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 471] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... write resumed>) = 7 [pid 471] <... futex resumed>) = 0 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 472] <... write resumed>) = 7 [pid 471] <... mmap resumed>) = 0x7f2089e8d000 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 471] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 472] <... write resumed>) = 7 [pid 471] <... mprotect resumed>) = 0 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 471] rt_sigprocmask(SIG_BLOCK, ~[], [pid 472] <... write resumed>) = 7 [pid 471] <... rt_sigprocmask resumed>[], 8) = 0 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 471] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 472] <... write resumed>) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 471] <... clone3 resumed> => {parent_tid=[474]}, 88) = 474 [pid 472] <... write resumed>) = 7 [pid 471] rt_sigprocmask(SIG_SETMASK, [], [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 471] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 472] <... write resumed>) = 7 [pid 471] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 471] <... futex resumed>) = 0 [pid 472] <... write resumed>) = 7 [pid 471] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 472] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 474 attached [pid 474] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 474] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 474] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 474] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] <... futex resumed>) = 0 [pid 471] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... futex resumed>) = 0 [pid 471] <... futex resumed>) = 1 [pid 472] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 471] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 472] <... socket resumed>) = 6 [pid 472] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] <... futex resumed>) = 0 [pid 474] <... futex resumed>) = 1 [pid 471] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 474] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] <... setsockopt resumed>) = 0 [pid 471] <... futex resumed>) = 0 [pid 472] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 472] <... futex resumed>) = 0 [pid 471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 471] exit_group(0) = ? [pid 474] <... futex resumed>) = ? [pid 472] +++ exited with 0 +++ [pid 474] +++ exited with 0 +++ [pid 471] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=471, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./41/binderfs") = 0 umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./41/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./41") = 0 mkdir("./42", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 475 ./strace-static-x86_64: Process 475 attached [pid 475] set_robust_list(0x5555574f36a0, 24) = 0 [pid 475] chdir("./42") = 0 [pid 475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 475] setpgid(0, 0) = 0 [pid 475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 475] write(3, "1000", 4) = 4 [pid 475] close(3) = 0 [pid 475] symlink("/dev/binderfs", "./binderfs") = 0 [pid 475] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 475] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 475] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 475] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 476 attached [pid 476] set_robust_list(0x7f2089ece9a0, 24 [pid 475] <... clone3 resumed> => {parent_tid=[476]}, 88) = 476 [pid 476] <... set_robust_list resumed>) = 0 [pid 475] rt_sigprocmask(SIG_SETMASK, [], [pid 476] rt_sigprocmask(SIG_SETMASK, [], [pid 475] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 476] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 475] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 476] memfd_create("syzkaller", 0) = 3 [pid 476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 476] munmap(0x7f2081aae000, 138412032) = 0 [pid 476] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 28.052423][ T472] loop0: detected capacity change from 0 to 512 [ 28.061033][ T472] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 28.074248][ T472] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 476] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 476] close(3) = 0 [pid 476] mkdir("./file0", 0777) = 0 [pid 476] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 476] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 476] chdir("./file0") = 0 [pid 476] ioctl(4, LOOP_CLR_FD) = 0 [pid 476] close(4) = 0 [pid 476] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] <... futex resumed>) = 1 [pid 476] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 476] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 476] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] <... futex resumed>) = 0 [pid 476] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 476] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 475] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 475] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[478]}, 88) = 478 [pid 475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 475] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 478 attached [pid 476] <... futex resumed>) = 1 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 478] set_robust_list(0x7f2089ead9a0, 24 [pid 476] <... write resumed>) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 478] <... set_robust_list resumed>) = 0 [pid 476] <... write resumed>) = 7 [pid 476] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 476] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 478] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 478] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 478] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] <... futex resumed>) = 0 [pid 476] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 476] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 1 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] <... futex resumed>) = 1 [pid 478] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 476] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 476] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = 0 [pid 475] exit_group(0) = ? [pid 476] <... futex resumed>) = ? [pid 476] +++ exited with 0 +++ [pid 478] <... futex resumed>) = ? [pid 478] +++ exited with 0 +++ [pid 475] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=475, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./42/binderfs") = 0 umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./42/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./42") = 0 mkdir("./43", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 479 ./strace-static-x86_64: Process 479 attached [pid 479] set_robust_list(0x5555574f36a0, 24) = 0 [pid 479] chdir("./43") = 0 [pid 479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 479] setpgid(0, 0) = 0 [pid 479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 479] write(3, "1000", 4) = 4 [pid 479] close(3) = 0 [pid 479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 479] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 479] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 479] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 480 attached [pid 480] set_robust_list(0x7f2089ece9a0, 24 [pid 479] <... clone3 resumed> => {parent_tid=[480]}, 88) = 480 [pid 480] <... set_robust_list resumed>) = 0 [pid 479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 480] rt_sigprocmask(SIG_SETMASK, [], [pid 479] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 480] memfd_create("syzkaller", 0) = 3 [pid 480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 480] munmap(0x7f2081aae000, 138412032) = 0 [pid 480] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 28.116524][ T476] loop0: detected capacity change from 0 to 512 [ 28.124752][ T476] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 28.138166][ T476] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 480] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 480] close(3) = 0 [pid 480] mkdir("./file0", 0777) = 0 [pid 480] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 480] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 480] chdir("./file0") = 0 [pid 480] ioctl(4, LOOP_CLR_FD) = 0 [pid 480] close(4) = 0 [pid 480] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 480] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 1 [pid 480] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 480] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 480] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 479] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 479] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 479] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 479] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[482]}, 88) = 482 [pid 479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 479] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... futex resumed>) = 0 [pid 480] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 480] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 480] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 480] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 482 attached [pid 480] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 482] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 480] <... write resumed>) = 7 [pid 480] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 482] rt_sigprocmask(SIG_SETMASK, [], [pid 480] <... write resumed>) = 7 [pid 482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 482] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 480] write(4, 0x20000180, 7 [pid 482] <... mmap resumed>) = 0x20000000 [pid 482] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 479] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 482] <... futex resumed>) = 1 [pid 482] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 480] <... write resumed>) = 7 [pid 482] <... socket resumed>) = 6 [pid 482] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 479] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] write(4, 0x20000180, 7 [pid 479] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 482] <... futex resumed>) = 1 [pid 480] <... write resumed>) = 7 [pid 480] write(4, 0x20000180, 7 [pid 482] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 480] <... write resumed>) = 7 [pid 482] <... setsockopt resumed>) = 0 [pid 480] write(4, 0x20000180, 7) = 7 [pid 482] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = 0 [pid 480] write(4, 0x20000180, 7 [pid 482] <... futex resumed>) = 1 [pid 480] <... write resumed>) = 7 [pid 482] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] write(4, 0x20000180, 7) = 7 [pid 480] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 479] exit_group(0 [pid 482] <... futex resumed>) = ? [pid 480] <... futex resumed>) = ? [pid 479] <... exit_group resumed>) = ? [pid 482] +++ exited with 0 +++ [pid 480] +++ exited with 0 +++ [pid 479] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=479, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./43/binderfs") = 0 umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./43/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./43") = 0 mkdir("./44", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 483 ./strace-static-x86_64: Process 483 attached [pid 483] set_robust_list(0x5555574f36a0, 24) = 0 [pid 483] chdir("./44") = 0 [pid 483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 483] setpgid(0, 0) = 0 [pid 483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 483] write(3, "1000", 4) = 4 [pid 483] close(3) = 0 [pid 483] symlink("/dev/binderfs", "./binderfs") = 0 [pid 483] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 483] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 483] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 484 attached [pid 484] set_robust_list(0x7f2089ece9a0, 24 [pid 483] <... clone3 resumed> => {parent_tid=[484]}, 88) = 484 [pid 484] <... set_robust_list resumed>) = 0 [pid 483] rt_sigprocmask(SIG_SETMASK, [], [pid 484] rt_sigprocmask(SIG_SETMASK, [], [pid 483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 484] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 483] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 484] memfd_create("syzkaller", 0) = 3 [pid 484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 484] munmap(0x7f2081aae000, 138412032) = 0 [pid 484] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 28.183428][ T480] loop0: detected capacity change from 0 to 512 [ 28.191843][ T480] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 28.205088][ T480] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 484] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 484] close(3) = 0 [pid 484] mkdir("./file0", 0777) = 0 [pid 484] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 484] chdir("./file0") = 0 [pid 484] ioctl(4, LOOP_CLR_FD) = 0 [pid 484] close(4) = 0 [pid 484] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 1 [pid 484] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 484] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 1 [pid 484] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 484] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 483] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 483] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 487 attached => {parent_tid=[487]}, 88) = 487 [pid 483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 483] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... futex resumed>) = 1 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 487] set_robust_list(0x7f2089ead9a0, 24 [pid 484] <... write resumed>) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 487] <... set_robust_list resumed>) = 0 [pid 484] <... write resumed>) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 487] rt_sigprocmask(SIG_SETMASK, [], [pid 484] <... write resumed>) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 487] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 484] <... write resumed>) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 487] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 484] <... write resumed>) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 484] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 484] write(4, 0x20000180, 7 [pid 487] <... mmap resumed>) = 0x20000000 [pid 484] <... write resumed>) = 7 [pid 484] write(4, 0x20000180, 7) = 7 [pid 487] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] write(4, 0x20000180, 7 [pid 487] <... futex resumed>) = 1 [pid 484] <... write resumed>) = 7 [pid 483] <... futex resumed>) = 0 [pid 487] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 484] write(4, 0x20000180, 7 [pid 483] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] <... socket resumed>) = 6 [pid 484] <... write resumed>) = 7 [pid 483] <... futex resumed>) = 0 [pid 484] write(4, 0x20000180, 7 [pid 483] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... write resumed>) = 7 [pid 484] write(4, 0x20000180, 7 [pid 487] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... write resumed>) = 7 [pid 484] write(4, 0x20000180, 7) = 7 [pid 483] <... futex resumed>) = 0 [pid 484] write(4, 0x20000180, 7 [pid 483] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... write resumed>) = 7 [pid 483] <... futex resumed>) = 0 [pid 484] write(4, 0x20000180, 7 [pid 483] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] <... write resumed>) = 7 [pid 484] write(4, 0x20000180, 7) = 7 [pid 487] <... futex resumed>) = 1 [pid 484] write(4, 0x20000180, 7) = 7 [pid 484] write(4, 0x20000180, 7) = 7 [pid 484] write(4, 0x20000180, 7) = 7 [pid 484] write(4, 0x20000180, 7) = 7 [pid 484] write(4, 0x20000180, 7) = 7 [pid 484] write(4, 0x20000180, 7 [pid 487] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 484] <... write resumed>) = 7 [pid 484] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 487] <... setsockopt resumed>) = 0 [pid 487] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 483] <... futex resumed>) = 0 [pid 483] exit_group(0) = ? [pid 484] <... futex resumed>) = ? [pid 487] +++ exited with 0 +++ [pid 484] +++ exited with 0 +++ [pid 483] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=483, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./44/binderfs") = 0 umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./44/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./44") = 0 mkdir("./45", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 488 ./strace-static-x86_64: Process 488 attached [pid 488] set_robust_list(0x5555574f36a0, 24) = 0 [pid 488] chdir("./45") = 0 [pid 488] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 488] setpgid(0, 0) = 0 [pid 488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 488] write(3, "1000", 4) = 4 [pid 488] close(3) = 0 [pid 488] symlink("/dev/binderfs", "./binderfs") = 0 [pid 488] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 488] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 488] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 488] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 489 attached [pid 489] set_robust_list(0x7f2089ece9a0, 24 [pid 488] <... clone3 resumed> => {parent_tid=[489]}, 88) = 489 [pid 488] rt_sigprocmask(SIG_SETMASK, [], [pid 489] <... set_robust_list resumed>) = 0 [pid 489] rt_sigprocmask(SIG_SETMASK, [], [pid 488] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 489] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 488] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 489] memfd_create("syzkaller", 0) = 3 [pid 489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 489] munmap(0x7f2081aae000, 138412032) = 0 [pid 489] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 28.257327][ T484] loop0: detected capacity change from 0 to 512 [ 28.266357][ T484] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 28.279666][ T484] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 489] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 489] close(3) = 0 [pid 489] mkdir("./file0", 0777) = 0 [pid 489] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 489] chdir("./file0") = 0 [pid 489] ioctl(4, LOOP_CLR_FD) = 0 [pid 489] close(4) = 0 [pid 489] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 489] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 489] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 489] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 489] <... futex resumed>) = 0 [pid 488] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 489] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 489] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 488] <... mprotect resumed>) = 0 [pid 488] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 489] <... write resumed>) = 7 [pid 488] <... clone3 resumed> => {parent_tid=[491]}, 88) = 491 ./strace-static-x86_64: Process 491 attached [pid 489] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 488] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] set_robust_list(0x7f2089ead9a0, 24 [pid 489] <... write resumed>) = 7 [pid 491] <... set_robust_list resumed>) = 0 [pid 489] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 491] rt_sigprocmask(SIG_SETMASK, [], [pid 489] <... write resumed>) = 7 [pid 491] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 489] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 491] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 489] write(4, 0x20000180, 7 [pid 491] <... mmap resumed>) = 0x20000000 [pid 491] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] <... write resumed>) = 7 [pid 491] <... futex resumed>) = 1 [pid 489] write(4, 0x20000180, 7 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 489] <... write resumed>) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7 [pid 491] <... socket resumed>) = 6 [pid 491] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] <... write resumed>) = 7 [pid 491] <... futex resumed>) = 1 [pid 489] write(4, 0x20000180, 7 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... write resumed>) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 491] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 489] write(4, 0x20000180, 7) = 7 [pid 491] <... setsockopt resumed>) = 0 [pid 491] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] write(4, 0x20000180, 7 [pid 491] <... futex resumed>) = 1 [pid 489] <... write resumed>) = 7 [pid 488] <... futex resumed>) = 0 [pid 489] write(4, 0x20000180, 7) = 7 [pid 491] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] write(4, 0x20000180, 7) = 7 [pid 489] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] exit_group(0 [pid 491] <... futex resumed>) = ? [pid 489] <... futex resumed>) = ? [pid 488] <... exit_group resumed>) = ? [pid 489] +++ exited with 0 +++ [pid 491] +++ exited with 0 +++ [pid 488] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=488, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./45/binderfs") = 0 umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./45/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./45") = 0 mkdir("./46", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 492 ./strace-static-x86_64: Process 492 attached [pid 492] set_robust_list(0x5555574f36a0, 24) = 0 [pid 492] chdir("./46") = 0 [pid 492] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 492] setpgid(0, 0) = 0 [pid 492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 492] write(3, "1000", 4) = 4 [pid 492] close(3) = 0 [pid 492] symlink("/dev/binderfs", "./binderfs") = 0 [pid 492] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 492] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 492] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[493]}, 88) = 493 ./strace-static-x86_64: Process 493 attached [pid 493] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 493] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 492] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 492] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 493] memfd_create("syzkaller", 0) = 3 [pid 493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 493] munmap(0x7f2081aae000, 138412032) = 0 [pid 493] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 28.328317][ T489] loop0: detected capacity change from 0 to 512 [ 28.336738][ T489] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 28.349954][ T489] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 493] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 493] close(3) = 0 [pid 493] mkdir("./file0", 0777) = 0 [pid 493] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 493] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 493] chdir("./file0") = 0 [pid 493] ioctl(4, LOOP_CLR_FD) = 0 [pid 493] close(4) = 0 [pid 493] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 493] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 493] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 492] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[495]}, 88) = 495 [pid 492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 492] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 493] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 495 attached [pid 495] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 495] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 495] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 495] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 0 [pid 493] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 493] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 495] <... futex resumed>) = 1 [pid 495] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 493] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] exit_group(0) = ? [pid 493] <... futex resumed>) = ? [pid 493] +++ exited with 0 +++ [pid 495] <... futex resumed>) = ? [pid 495] +++ exited with 0 +++ [pid 492] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=492, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./46/binderfs") = 0 umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./46/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./46") = 0 mkdir("./47", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 496 ./strace-static-x86_64: Process 496 attached [pid 496] set_robust_list(0x5555574f36a0, 24) = 0 [pid 496] chdir("./47") = 0 [pid 496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 496] setpgid(0, 0) = 0 [pid 496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 496] write(3, "1000", 4) = 4 [pid 496] close(3) = 0 [pid 496] symlink("/dev/binderfs", "./binderfs") = 0 [pid 496] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 496] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 496] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 496] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 496] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[497]}, 88) = 497 [pid 496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 496] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 497 attached [pid 497] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 497] memfd_create("syzkaller", 0) = 3 [pid 497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 497] munmap(0x7f2081aae000, 138412032) = 0 [pid 497] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 28.402933][ T493] loop0: detected capacity change from 0 to 512 [ 28.410906][ T493] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 28.424161][ T493] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 497] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 497] close(3) = 0 [pid 497] mkdir("./file0", 0777) = 0 [pid 497] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 497] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 497] chdir("./file0") = 0 [pid 497] ioctl(4, LOOP_CLR_FD) = 0 [pid 497] close(4) = 0 [pid 497] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = 0 [pid 496] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... futex resumed>) = 1 [pid 497] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 497] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = 0 [pid 496] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... futex resumed>) = 1 [pid 497] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 497] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = 0 [pid 496] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 496] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 496] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 496] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[499]}, 88) = 499 [pid 496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 496] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... futex resumed>) = 1 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 499 attached ) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 499] set_robust_list(0x7f2089ead9a0, 24 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 499] <... set_robust_list resumed>) = 0 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 497] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 499] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 499] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 499] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = 1 [pid 497] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 496] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... socket resumed>) = 6 [pid 497] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = 0 [pid 496] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... futex resumed>) = 1 [pid 497] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 497] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 497] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] exit_group(0 [pid 497] <... futex resumed>) = ? [pid 499] <... futex resumed>) = ? [pid 496] <... exit_group resumed>) = ? [pid 499] +++ exited with 0 +++ [pid 497] +++ exited with 0 +++ [pid 496] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=496, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./47/binderfs") = 0 umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./47/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./47") = 0 mkdir("./48", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 500 ./strace-static-x86_64: Process 500 attached [pid 500] set_robust_list(0x5555574f36a0, 24) = 0 [pid 500] chdir("./48") = 0 [pid 500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 500] setpgid(0, 0) = 0 [pid 500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 500] write(3, "1000", 4) = 4 [pid 500] close(3) = 0 [pid 500] symlink("/dev/binderfs", "./binderfs") = 0 [pid 500] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 500] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 500] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 500] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 501 attached [pid 501] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 501] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] <... clone3 resumed> => {parent_tid=[501]}, 88) = 501 [pid 500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 500] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 501] <... futex resumed>) = 0 [pid 501] memfd_create("syzkaller", 0) = 3 [pid 500] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 501] munmap(0x7f2081aae000, 138412032) = 0 [pid 501] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 28.462295][ T497] loop0: detected capacity change from 0 to 512 [ 28.470230][ T497] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 28.484156][ T497] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 501] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 501] close(3) = 0 [pid 501] mkdir("./file0", 0777) = 0 [pid 501] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 501] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 501] chdir("./file0") = 0 [pid 501] ioctl(4, LOOP_CLR_FD) = 0 [pid 501] close(4) = 0 [pid 501] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... futex resumed>) = 1 [pid 501] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 501] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... futex resumed>) = 1 [pid 501] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 501] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 500] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 500] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[503]}, 88) = 503 ./strace-static-x86_64: Process 503 attached [pid 500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 500] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... futex resumed>) = 1 [pid 501] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 503] set_robust_list(0x7f2089ead9a0, 24 [pid 501] <... write resumed>) = 7 [pid 503] <... set_robust_list resumed>) = 0 [pid 501] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 501] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 501] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 503] rt_sigprocmask(SIG_SETMASK, [], [pid 501] <... write resumed>) = 7 [pid 503] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 501] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 501] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 501] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 503] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 501] <... write resumed>) = 7 [pid 501] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 501] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 501] write(4, 0x20000180, 7 [pid 503] <... mmap resumed>) = 0x20000000 [pid 501] <... write resumed>) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 503] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 503] <... futex resumed>) = 1 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 503] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 503] <... socket resumed>) = 6 [pid 501] write(4, 0x20000180, 7 [pid 503] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... write resumed>) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] write(4, 0x20000180, 7) = 7 [pid 501] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] <... futex resumed>) = 1 [pid 501] <... futex resumed>) = 0 [pid 503] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 501] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 501] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 500] exit_group(0) = ? [pid 503] <... futex resumed>) = ? [pid 503] +++ exited with 0 +++ [pid 501] <... futex resumed>) = ? [pid 501] +++ exited with 0 +++ [pid 500] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=500, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./48/binderfs") = 0 umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./48/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./48") = 0 mkdir("./49", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 504 ./strace-static-x86_64: Process 504 attached [pid 504] set_robust_list(0x5555574f36a0, 24) = 0 [pid 504] chdir("./49") = 0 [pid 504] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 504] setpgid(0, 0) = 0 [pid 504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 504] write(3, "1000", 4) = 4 [pid 504] close(3) = 0 [pid 504] symlink("/dev/binderfs", "./binderfs") = 0 [pid 504] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 504] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 504] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 504] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[505]}, 88) = 505 ./strace-static-x86_64: Process 505 attached [pid 505] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 505] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 504] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 505] <... futex resumed>) = 0 [pid 505] memfd_create("syzkaller", 0) = 3 [pid 505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 505] munmap(0x7f2081aae000, 138412032) = 0 [pid 505] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 28.526533][ T501] loop0: detected capacity change from 0 to 512 [ 28.534600][ T501] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 28.547951][ T501] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 505] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 505] close(3) = 0 [pid 505] mkdir("./file0", 0777) = 0 [pid 505] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 505] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 505] chdir("./file0") = 0 [pid 505] ioctl(4, LOOP_CLR_FD) = 0 [pid 505] close(4) = 0 [pid 505] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 1 [pid 505] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 505] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] <... futex resumed>) = 0 [pid 505] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 504] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 0 [pid 505] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 505] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 504] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 504] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[507]}, 88) = 507 [pid 504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 504] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 1 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 507 attached ) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 507] set_robust_list(0x7f2089ead9a0, 24 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 507] <... set_robust_list resumed>) = 0 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 507] rt_sigprocmask(SIG_SETMASK, [], [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 507] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 505] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 507] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 507] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] <... futex resumed>) = 0 [pid 507] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 504] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 0 [pid 505] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 505] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 1 [pid 505] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 505] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = 0 [pid 504] exit_group(0) = ? [pid 507] <... futex resumed>) = ? [pid 505] <... futex resumed>) = ? [pid 507] +++ exited with 0 +++ [pid 505] +++ exited with 0 +++ [pid 504] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=504, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./49/binderfs") = 0 umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./49/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./49") = 0 mkdir("./50", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 508 ./strace-static-x86_64: Process 508 attached [pid 508] set_robust_list(0x5555574f36a0, 24) = 0 [pid 508] chdir("./50") = 0 [pid 508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 508] setpgid(0, 0) = 0 [pid 508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 508] write(3, "1000", 4) = 4 [pid 508] close(3) = 0 [pid 508] symlink("/dev/binderfs", "./binderfs") = 0 [pid 508] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 508] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 508] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 508] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[509]}, 88) = 509 ./strace-static-x86_64: Process 509 attached [pid 509] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 509] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 509] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 508] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 508] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] <... futex resumed>) = 0 [pid 508] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 509] memfd_create("syzkaller", 0) = 3 [pid 509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 509] munmap(0x7f2081aae000, 138412032) = 0 [ 28.595357][ T505] loop0: detected capacity change from 0 to 512 [ 28.603872][ T505] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 28.617192][ T505] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 509] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 509] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 509] close(3) = 0 [pid 509] mkdir("./file0", 0777) = 0 [pid 509] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 509] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 509] chdir("./file0") = 0 [pid 509] ioctl(4, LOOP_CLR_FD) = 0 [pid 509] close(4) = 0 [pid 509] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 509] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 509] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 1 [pid 508] <... futex resumed>) = 0 [pid 508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 508] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 508] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[511]}, 88) = 511 [pid 508] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 508] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 509] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 509] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 509] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 509] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 509] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 509] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 509] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 511 attached [pid 509] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 511] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 509] <... write resumed>) = 7 [pid 511] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 511] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 509] write(4, 0x20000180, 7 [pid 511] <... mmap resumed>) = 0x20000000 [pid 509] <... write resumed>) = 7 [pid 511] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7 [pid 511] <... futex resumed>) = 1 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... write resumed>) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7 [pid 511] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 509] <... write resumed>) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 511] <... socket resumed>) = 6 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 511] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 511] <... futex resumed>) = 1 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7 [pid 511] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 509] <... write resumed>) = 7 [pid 511] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 508] <... futex resumed>) = 0 [pid 511] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] write(4, 0x20000180, 7) = 7 [pid 509] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 508] exit_group(0 [pid 511] <... futex resumed>) = ? [pid 509] <... futex resumed>) = ? [pid 508] <... exit_group resumed>) = ? [pid 511] +++ exited with 0 +++ [pid 509] +++ exited with 0 +++ [pid 508] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=508, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./50/binderfs") = 0 umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./50/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./50") = 0 mkdir("./51", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 512 ./strace-static-x86_64: Process 512 attached [pid 512] set_robust_list(0x5555574f36a0, 24) = 0 [pid 512] chdir("./51") = 0 [pid 512] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 512] setpgid(0, 0) = 0 [pid 512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 512] write(3, "1000", 4) = 4 [pid 512] close(3) = 0 [pid 512] symlink("/dev/binderfs", "./binderfs") = 0 [pid 512] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 512] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 512] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 512] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 512] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 513 attached [pid 513] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 513] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 513] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] <... clone3 resumed> => {parent_tid=[513]}, 88) = 513 [pid 512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 512] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 513] <... futex resumed>) = 0 [pid 512] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 513] memfd_create("syzkaller", 0) = 3 [pid 513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 513] munmap(0x7f2081aae000, 138412032) = 0 [pid 513] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 28.658855][ T509] loop0: detected capacity change from 0 to 512 [ 28.666745][ T509] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 28.680032][ T509] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 513] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 513] close(3) = 0 [pid 513] mkdir("./file0", 0777) = 0 [pid 513] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 513] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 513] chdir("./file0") = 0 [pid 513] ioctl(4, LOOP_CLR_FD) = 0 [pid 513] close(4) = 0 [pid 513] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 513] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 512] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 0 [pid 513] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 513] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 513] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 512] <... futex resumed>) = 0 [pid 513] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 513] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 512] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 513] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 513] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 513] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 513] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 513] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 513] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 513] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 512] <... mprotect resumed>) = 0 [pid 513] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 512] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 512] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 513] <... write resumed>) = 7 [pid 512] <... clone3 resumed> => {parent_tid=[515]}, 88) = 515 [pid 512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 512] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 515 attached [pid 515] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 513] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 515] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 515] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 513] <... write resumed>) = 7 [pid 515] <... mmap resumed>) = 0x20000000 [pid 513] write(4, 0x20000180, 7 [pid 515] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [pid 515] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 515] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [pid 513] <... write resumed>) = 7 [pid 515] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 513] write(4, 0x20000180, 7 [pid 515] <... setsockopt resumed>) = 0 [pid 515] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 515] <... futex resumed>) = 1 [pid 513] <... write resumed>) = 7 [pid 515] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] write(4, 0x20000180, 7) = 7 [pid 513] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 513] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] exit_group(0) = ? [pid 515] <... futex resumed>) = ? [pid 515] +++ exited with 0 +++ [pid 513] <... futex resumed>) = ? [pid 513] +++ exited with 0 +++ [pid 512] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=512, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./51/binderfs") = 0 umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./51/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./51") = 0 mkdir("./52", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 516 ./strace-static-x86_64: Process 516 attached [pid 516] set_robust_list(0x5555574f36a0, 24) = 0 [pid 516] chdir("./52") = 0 [pid 516] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 516] setpgid(0, 0) = 0 [pid 516] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 516] write(3, "1000", 4) = 4 [pid 516] close(3) = 0 [pid 516] symlink("/dev/binderfs", "./binderfs") = 0 [pid 516] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 516] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 516] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 516] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 516] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 516] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 517 attached => {parent_tid=[517]}, 88) = 517 [pid 516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 516] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 517] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 517] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 517] memfd_create("syzkaller", 0) = 3 [pid 517] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 517] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 517] munmap(0x7f2081aae000, 138412032) = 0 [pid 517] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 28.728583][ T513] loop0: detected capacity change from 0 to 512 [ 28.737276][ T513] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 28.750551][ T513] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 517] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 517] close(3) = 0 [pid 517] mkdir("./file0", 0777) = 0 [pid 517] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 517] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 517] chdir("./file0") = 0 [pid 517] ioctl(4, LOOP_CLR_FD) = 0 [pid 517] close(4) = 0 [pid 517] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] <... futex resumed>) = 1 [pid 517] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 517] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] <... futex resumed>) = 1 [pid 517] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 517] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 516] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 516] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 516] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[519]}, 88) = 519 [pid 516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 516] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] <... futex resumed>) = 1 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 519 attached [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 517] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 519] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 519] rt_sigprocmask(SIG_SETMASK, [], [pid 517] <... write resumed>) = 7 [pid 519] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 519] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 517] write(4, 0x20000180, 7 [pid 519] <... mmap resumed>) = 0x20000000 [pid 519] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] <... futex resumed>) = 1 [pid 519] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 517] <... write resumed>) = 7 [pid 519] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] <... futex resumed>) = 1 [pid 517] write(4, 0x20000180, 7 [pid 519] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 517] <... write resumed>) = 7 [pid 519] <... setsockopt resumed>) = 0 [pid 519] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 517] write(4, 0x20000180, 7 [pid 516] <... futex resumed>) = 0 [pid 519] <... futex resumed>) = 1 [pid 519] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 517] <... write resumed>) = 7 [pid 517] write(4, 0x20000180, 7) = 7 [pid 517] write(4, 0x20000180, 7) = 7 [pid 517] write(4, 0x20000180, 7) = 7 [pid 517] write(4, 0x20000180, 7) = 7 [pid 517] write(4, 0x20000180, 7) = 7 [pid 517] write(4, 0x20000180, 7) = 7 [pid 517] write(4, 0x20000180, 7) = 7 [pid 517] write(4, 0x20000180, 7) = 7 [pid 517] write(4, 0x20000180, 7) = 7 [pid 517] write(4, 0x20000180, 7) = 7 [pid 517] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 517] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 516] exit_group(0) = ? [pid 517] <... futex resumed>) = ? [pid 519] <... futex resumed>) = ? [pid 517] +++ exited with 0 +++ [pid 519] +++ exited with 0 +++ [pid 516] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=516, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./52/binderfs") = 0 umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./52/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./52") = 0 mkdir("./53", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 520 ./strace-static-x86_64: Process 520 attached [pid 520] set_robust_list(0x5555574f36a0, 24) = 0 [pid 520] chdir("./53") = 0 [pid 520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 520] setpgid(0, 0) = 0 [pid 520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 520] write(3, "1000", 4) = 4 [pid 520] close(3) = 0 [pid 520] symlink("/dev/binderfs", "./binderfs") = 0 [pid 520] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 520] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 520] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 520] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 520] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[521]}, 88) = 521 ./strace-static-x86_64: Process 521 attached [pid 520] rt_sigprocmask(SIG_SETMASK, [], [pid 521] set_robust_list(0x7f2089ece9a0, 24 [pid 520] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 520] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 521] <... set_robust_list resumed>) = 0 [pid 521] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 521] memfd_create("syzkaller", 0) = 3 [ 28.798178][ T517] loop0: detected capacity change from 0 to 512 [ 28.806275][ T517] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 28.819529][ T517] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 521] munmap(0x7f2081aae000, 138412032) = 0 [pid 521] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 521] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 521] close(3) = 0 [pid 521] mkdir("./file0", 0777) = 0 [pid 521] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 521] chdir("./file0") = 0 [pid 521] ioctl(4, LOOP_CLR_FD) = 0 [pid 521] close(4) = 0 [pid 521] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... futex resumed>) = 1 [pid 521] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 521] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... futex resumed>) = 1 [pid 521] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 521] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] <... write resumed>) = 7 [pid 521] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 521] <... write resumed>) = 7 [pid 520] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 521] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 520] <... mprotect resumed>) = 0 [pid 520] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 521] <... write resumed>) = 7 [pid 521] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 520] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 523 attached [pid 523] set_robust_list(0x7f2089ead9a0, 24 [pid 520] <... clone3 resumed> => {parent_tid=[523]}, 88) = 523 [pid 523] <... set_robust_list resumed>) = 0 [pid 520] rt_sigprocmask(SIG_SETMASK, [], [pid 523] rt_sigprocmask(SIG_SETMASK, [], [pid 520] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 523] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 523] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] <... write resumed>) = 7 [pid 520] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 523] <... futex resumed>) = 0 [pid 520] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 521] write(4, 0x20000180, 7 [pid 523] <... mmap resumed>) = 0x20000000 [pid 523] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... write resumed>) = 7 [pid 521] write(4, 0x20000180, 7 [pid 523] <... futex resumed>) = 1 [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 521] <... write resumed>) = 7 [pid 521] write(4, 0x20000180, 7 [pid 523] <... socket resumed>) = 6 [pid 521] <... write resumed>) = 7 [pid 523] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] write(4, 0x20000180, 7 [pid 523] <... futex resumed>) = 1 [pid 521] <... write resumed>) = 7 [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] write(4, 0x20000180, 7 [pid 523] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 521] <... write resumed>) = 7 [pid 521] write(4, 0x20000180, 7 [pid 523] <... setsockopt resumed>) = 0 [pid 523] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... write resumed>) = 7 [pid 523] <... futex resumed>) = 1 [pid 521] write(4, 0x20000180, 7 [pid 520] <... futex resumed>) = 0 [pid 523] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] <... write resumed>) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] write(4, 0x20000180, 7) = 7 [pid 521] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] exit_group(0 [pid 523] <... futex resumed>) = ? [pid 520] <... exit_group resumed>) = ? [pid 521] <... futex resumed>) = ? [pid 523] +++ exited with 0 +++ [pid 521] +++ exited with 0 +++ [pid 520] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=520, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./53/binderfs") = 0 umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./53/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./53") = 0 mkdir("./54", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 524 ./strace-static-x86_64: Process 524 attached [pid 524] set_robust_list(0x5555574f36a0, 24) = 0 [pid 524] chdir("./54") = 0 [pid 524] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 524] setpgid(0, 0) = 0 [pid 524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 524] write(3, "1000", 4) = 4 [pid 524] close(3) = 0 [pid 524] symlink("/dev/binderfs", "./binderfs") = 0 [pid 524] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 524] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 524] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 524] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 524] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 525 attached => {parent_tid=[525]}, 88) = 525 [pid 525] set_robust_list(0x7f2089ece9a0, 24 [pid 524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 524] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 525] <... set_robust_list resumed>) = 0 [ 28.882059][ T521] loop0: detected capacity change from 0 to 512 [ 28.889993][ T521] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 28.903281][ T521] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 525] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 525] memfd_create("syzkaller", 0) = 3 [pid 525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 525] munmap(0x7f2081aae000, 138412032) = 0 [pid 525] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 525] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 525] close(3) = 0 [pid 525] mkdir("./file0", 0777) = 0 [pid 525] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 525] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 525] chdir("./file0") = 0 [pid 525] ioctl(4, LOOP_CLR_FD) = 0 [pid 525] close(4) = 0 [pid 525] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] <... futex resumed>) = 0 [pid 525] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 525] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 525] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 524] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 524] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 524] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 527 attached => {parent_tid=[527]}, 88) = 527 [pid 524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 524] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 527] set_robust_list(0x7f2089ead9a0, 24 [pid 525] <... write resumed>) = 7 [pid 525] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 527] <... set_robust_list resumed>) = 0 [pid 527] rt_sigprocmask(SIG_SETMASK, [], [pid 525] <... write resumed>) = 7 [pid 527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 527] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 525] write(4, 0x20000180, 7 [pid 527] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 525] <... write resumed>) = 7 [pid 527] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 525] write(4, 0x20000180, 7 [pid 527] <... setsockopt resumed>) = 0 [pid 527] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 527] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] <... write resumed>) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] write(4, 0x20000180, 7) = 7 [pid 525] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 525] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] exit_group(0 [pid 527] <... futex resumed>) = ? [pid 524] <... exit_group resumed>) = ? [pid 525] <... futex resumed>) = ? [pid 527] +++ exited with 0 +++ [pid 525] +++ exited with 0 +++ [pid 524] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=524, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./54/binderfs") = 0 umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./54/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./54") = 0 mkdir("./55", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 528 ./strace-static-x86_64: Process 528 attached [pid 528] set_robust_list(0x5555574f36a0, 24) = 0 [pid 528] chdir("./55") = 0 [pid 528] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 528] setpgid(0, 0) = 0 [pid 528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 528] write(3, "1000", 4) = 4 [pid 528] close(3) = 0 [pid 528] symlink("/dev/binderfs", "./binderfs") = 0 [pid 528] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 528] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 528] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 528] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 528] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 529 attached [ 28.965598][ T525] loop0: detected capacity change from 0 to 512 [ 28.974077][ T525] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 28.987241][ T525] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 529] set_robust_list(0x7f2089ece9a0, 24 [pid 528] <... clone3 resumed> => {parent_tid=[529]}, 88) = 529 [pid 529] <... set_robust_list resumed>) = 0 [pid 528] rt_sigprocmask(SIG_SETMASK, [], [pid 529] rt_sigprocmask(SIG_SETMASK, [], [pid 528] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 529] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 528] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 529] memfd_create("syzkaller", 0 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 529] <... memfd_create resumed>) = 3 [pid 529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 529] munmap(0x7f2081aae000, 138412032) = 0 [pid 529] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 529] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 529] close(3) = 0 [pid 529] mkdir("./file0", 0777) = 0 [pid 529] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 529] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 529] chdir("./file0") = 0 [pid 529] ioctl(4, LOOP_CLR_FD) = 0 [pid 529] close(4) = 0 [pid 529] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 528] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 529] <... futex resumed>) = 0 [pid 529] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 529] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 529] <... futex resumed>) = 1 [pid 529] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 529] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 528] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 528] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 529] <... futex resumed>) = 1 [pid 528] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 528] <... clone3 resumed> => {parent_tid=[531]}, 88) = 531 [pid 529] <... write resumed>) = 7 [pid 528] rt_sigprocmask(SIG_SETMASK, [], [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 528] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 529] <... write resumed>) = 7 [pid 528] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 528] <... futex resumed>) = 0 [pid 529] <... write resumed>) = 7 [pid 528] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 531 attached [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 531] set_robust_list(0x7f2089ead9a0, 24 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 531] <... set_robust_list resumed>) = 0 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 531] rt_sigprocmask(SIG_SETMASK, [], [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 531] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 531] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 529] <... write resumed>) = 7 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 529] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 529] write(4, 0x20000180, 7 [pid 531] <... mmap resumed>) = 0x20000000 [pid 529] <... write resumed>) = 7 [pid 529] write(4, 0x20000180, 7) = 7 [pid 531] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 529] write(4, 0x20000180, 7) = 7 [pid 528] <... futex resumed>) = 0 [pid 529] write(4, 0x20000180, 7 [pid 528] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 531] <... futex resumed>) = 1 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 529] <... write resumed>) = 7 [pid 529] write(4, 0x20000180, 7) = 7 [pid 529] write(4, 0x20000180, 7) = 7 [pid 529] write(4, 0x20000180, 7) = 7 [pid 531] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 529] write(4, 0x20000180, 7) = 7 [pid 529] write(4, 0x20000180, 7) = 7 [pid 529] write(4, 0x20000180, 7) = 7 [pid 529] write(4, 0x20000180, 7 [pid 531] <... socket resumed>) = 6 [pid 529] <... write resumed>) = 7 [pid 529] write(4, 0x20000180, 7) = 7 [pid 529] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 529] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 531] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 528] <... futex resumed>) = 0 [pid 531] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 528] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] <... futex resumed>) = 0 [pid 528] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 529] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 529] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 528] <... futex resumed>) = 0 [pid 529] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 528] exit_group(0 [pid 531] <... futex resumed>) = ? [pid 528] <... exit_group resumed>) = ? [pid 529] <... futex resumed>) = ? [pid 531] +++ exited with 0 +++ [pid 529] +++ exited with 0 +++ [pid 528] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=528, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./55/binderfs") = 0 umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./55/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./55") = 0 mkdir("./56", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 532 ./strace-static-x86_64: Process 532 attached [pid 532] set_robust_list(0x5555574f36a0, 24) = 0 [pid 532] chdir("./56") = 0 [pid 532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 532] setpgid(0, 0) = 0 [pid 532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 532] write(3, "1000", 4) = 4 [pid 532] close(3) = 0 [pid 532] symlink("/dev/binderfs", "./binderfs") = 0 [pid 532] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 532] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 532] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 532] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 533 attached [pid 533] set_robust_list(0x7f2089ece9a0, 24 [pid 532] <... clone3 resumed> => {parent_tid=[533]}, 88) = 533 [pid 533] <... set_robust_list resumed>) = 0 [pid 532] rt_sigprocmask(SIG_SETMASK, [], [pid 533] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 533] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 532] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 533] <... futex resumed>) = 0 [pid 532] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 533] memfd_create("syzkaller", 0) = 3 [pid 533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 533] munmap(0x7f2081aae000, 138412032) = 0 [pid 533] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 29.050208][ T529] loop0: detected capacity change from 0 to 512 [ 29.059171][ T529] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 29.072546][ T529] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 533] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 533] close(3) = 0 [pid 533] mkdir("./file0", 0777) = 0 [pid 533] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 533] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 533] chdir("./file0") = 0 [pid 533] ioctl(4, LOOP_CLR_FD) = 0 [pid 533] close(4) = 0 [pid 533] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 533] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 533] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] <... write resumed>) = 7 [pid 532] <... futex resumed>) = 0 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 533] <... write resumed>) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 532] <... mmap resumed>) = 0x7f2089e8d000 [pid 532] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 533] <... write resumed>) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 532] <... mprotect resumed>) = 0 [pid 533] <... write resumed>) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 532] rt_sigprocmask(SIG_BLOCK, ~[], [pid 533] <... write resumed>) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 532] <... rt_sigprocmask resumed>[], 8) = 0 [pid 532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 533] <... write resumed>) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 532] <... clone3 resumed> => {parent_tid=[535]}, 88) = 535 [pid 532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 532] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] <... write resumed>) = 7 [pid 532] <... futex resumed>) = 0 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 532] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... write resumed>) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 535 attached ) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 535] set_robust_list(0x7f2089ead9a0, 24 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 535] <... set_robust_list resumed>) = 0 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 535] rt_sigprocmask(SIG_SETMASK, [], [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 535] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 535] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 533] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 533] write(4, 0x20000180, 7) = 7 [pid 533] write(4, 0x20000180, 7) = 7 [pid 535] <... mmap resumed>) = 0x20000000 [pid 535] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] write(4, 0x20000180, 7) = 7 [pid 535] <... futex resumed>) = 1 [pid 535] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 533] write(4, 0x20000180, 7 [pid 535] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] <... write resumed>) = 7 [pid 535] <... futex resumed>) = 1 [pid 533] write(4, 0x20000180, 7 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 533] <... write resumed>) = 7 [pid 535] <... setsockopt resumed>) = 0 [pid 533] write(4, 0x20000180, 7 [pid 535] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 533] <... write resumed>) = 7 [pid 535] <... futex resumed>) = 1 [pid 533] write(4, 0x20000180, 7 [pid 532] <... futex resumed>) = 0 [pid 535] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] <... write resumed>) = 7 [pid 533] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 533] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] exit_group(0 [pid 533] <... futex resumed>) = ? [pid 532] <... exit_group resumed>) = ? [pid 533] +++ exited with 0 +++ [pid 535] <... futex resumed>) = ? [pid 535] +++ exited with 0 +++ [pid 532] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=532, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./56/binderfs") = 0 umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./56/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./56") = 0 mkdir("./57", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 536 ./strace-static-x86_64: Process 536 attached [pid 536] set_robust_list(0x5555574f36a0, 24) = 0 [pid 536] chdir("./57") = 0 [pid 536] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 536] setpgid(0, 0) = 0 [pid 536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 536] write(3, "1000", 4) = 4 [pid 536] close(3) = 0 [pid 536] symlink("/dev/binderfs", "./binderfs") = 0 [pid 536] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 536] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 536] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 536] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[537]}, 88) = 537 ./strace-static-x86_64: Process 537 attached [pid 537] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 537] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 536] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 537] memfd_create("syzkaller", 0) = 3 [pid 537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 537] munmap(0x7f2081aae000, 138412032) = 0 [pid 537] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 29.120263][ T533] loop0: detected capacity change from 0 to 512 [ 29.128204][ T533] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 29.141848][ T533] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 537] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 537] close(3) = 0 [pid 537] mkdir("./file0", 0777) = 0 [pid 537] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 537] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 537] chdir("./file0") = 0 [pid 537] ioctl(4, LOOP_CLR_FD) = 0 [pid 537] close(4) = 0 [pid 537] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 537] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 537] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 536] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 536] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 539 attached => {parent_tid=[539]}, 88) = 539 [pid 536] rt_sigprocmask(SIG_SETMASK, [], [pid 539] set_robust_list(0x7f2089ead9a0, 24 [pid 536] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 536] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 537] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 539] <... set_robust_list resumed>) = 0 [pid 537] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 539] rt_sigprocmask(SIG_SETMASK, [], [pid 537] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 537] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 539] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 537] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 537] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 537] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 539] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 537] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 537] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 537] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 537] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 537] write(4, 0x20000180, 7 [pid 539] <... mmap resumed>) = 0x20000000 [pid 537] <... write resumed>) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 539] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] write(4, 0x20000180, 7 [pid 539] <... futex resumed>) = 1 [pid 537] <... write resumed>) = 7 [pid 536] <... futex resumed>) = 0 [pid 539] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 537] write(4, 0x20000180, 7 [pid 536] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] <... socket resumed>) = 6 [pid 537] <... write resumed>) = 7 [pid 536] <... futex resumed>) = 0 [pid 539] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] write(4, 0x20000180, 7 [pid 536] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... futex resumed>) = 0 [pid 537] <... write resumed>) = 7 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 537] write(4, 0x20000180, 7 [pid 536] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 539] <... setsockopt resumed>) = 0 [pid 537] <... write resumed>) = 7 [pid 536] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] write(4, 0x20000180, 7 [pid 539] <... futex resumed>) = 1 [pid 537] <... write resumed>) = 7 [pid 536] <... futex resumed>) = 0 [pid 539] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] write(4, 0x20000180, 7) = 7 [pid 537] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] exit_group(0 [pid 539] <... futex resumed>) = ? [pid 537] <... futex resumed>) = ? [pid 536] <... exit_group resumed>) = ? [pid 539] +++ exited with 0 +++ [pid 537] +++ exited with 0 +++ [pid 536] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=536, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./57/binderfs") = 0 umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./57/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./57") = 0 mkdir("./58", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 540 ./strace-static-x86_64: Process 540 attached [pid 540] set_robust_list(0x5555574f36a0, 24) = 0 [pid 540] chdir("./58") = 0 [pid 540] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 540] setpgid(0, 0) = 0 [pid 540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 540] write(3, "1000", 4) = 4 [pid 540] close(3) = 0 [pid 540] symlink("/dev/binderfs", "./binderfs") = 0 [pid 540] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 540] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 540] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 541 attached => {parent_tid=[541]}, 88) = 541 [pid 540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 540] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 541] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 541] memfd_create("syzkaller", 0) = 3 [pid 541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 541] munmap(0x7f2081aae000, 138412032) = 0 [pid 541] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 29.188931][ T537] loop0: detected capacity change from 0 to 512 [ 29.197307][ T537] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 29.210581][ T537] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 541] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 541] close(3) = 0 [pid 541] mkdir("./file0", 0777) = 0 [pid 541] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 541] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 541] chdir("./file0") = 0 [pid 541] ioctl(4, LOOP_CLR_FD) = 0 [pid 541] close(4) = 0 [pid 541] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 541] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 541] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 540] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[544]}, 88) = 544 [pid 540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 540] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 541] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 541] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 544 attached ) = 7 [pid 544] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 544] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 541] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 544] <... mmap resumed>) = 0x20000000 [pid 541] <... write resumed>) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 544] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] <... futex resumed>) = 1 [pid 541] write(4, 0x20000180, 7 [pid 540] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 541] <... write resumed>) = 7 [pid 544] <... socket resumed>) = 6 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 544] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7 [pid 544] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... write resumed>) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 544] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 541] write(4, 0x20000180, 7 [pid 544] <... setsockopt resumed>) = 0 [pid 541] <... write resumed>) = 7 [pid 544] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] write(4, 0x20000180, 7 [pid 544] <... futex resumed>) = 1 [pid 541] <... write resumed>) = 7 [pid 540] <... futex resumed>) = 0 [pid 544] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] write(4, 0x20000180, 7) = 7 [pid 541] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] exit_group(0 [pid 544] <... futex resumed>) = ? [pid 540] <... exit_group resumed>) = ? [pid 544] +++ exited with 0 +++ [pid 541] +++ exited with 0 +++ [pid 540] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=540, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./58/binderfs") = 0 umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./58/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./58") = 0 mkdir("./59", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 545 ./strace-static-x86_64: Process 545 attached [pid 545] set_robust_list(0x5555574f36a0, 24) = 0 [pid 545] chdir("./59") = 0 [pid 545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 545] setpgid(0, 0) = 0 [pid 545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 545] write(3, "1000", 4) = 4 [pid 545] close(3) = 0 [pid 545] symlink("/dev/binderfs", "./binderfs") = 0 [pid 545] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 545] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 545] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 546 attached [pid 546] set_robust_list(0x7f2089ece9a0, 24 [pid 545] <... clone3 resumed> => {parent_tid=[546]}, 88) = 546 [pid 546] <... set_robust_list resumed>) = 0 [pid 545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 546] rt_sigprocmask(SIG_SETMASK, [], [pid 545] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 546] memfd_create("syzkaller", 0) = 3 [pid 546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 546] munmap(0x7f2081aae000, 138412032) = 0 [pid 546] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 29.254633][ T541] loop0: detected capacity change from 0 to 512 [ 29.262487][ T541] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 29.275704][ T541] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 546] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 546] close(3) = 0 [pid 546] mkdir("./file0", 0777) = 0 [pid 546] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 546] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 546] chdir("./file0") = 0 [pid 546] ioctl(4, LOOP_CLR_FD) = 0 [pid 546] close(4) = 0 [pid 546] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... futex resumed>) = 1 [pid 546] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 546] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = 0 [pid 546] <... futex resumed>) = 1 [pid 546] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] <... futex resumed>) = 0 [pid 546] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 545] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 546] <... futex resumed>) = 0 [pid 546] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 545] <... futex resumed>) = 0 [pid 546] <... write resumed>) = 7 [pid 545] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 545] <... futex resumed>) = 0 [pid 546] <... write resumed>) = 7 [pid 545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 545] <... mmap resumed>) = 0x7f2089e8d000 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 545] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 545] <... mprotect resumed>) = 0 [pid 546] <... write resumed>) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 545] rt_sigprocmask(SIG_BLOCK, ~[], [pid 546] <... write resumed>) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 546] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] <... rt_sigprocmask resumed>[], 8) = 0 [pid 545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 548 attached => {parent_tid=[548]}, 88) = 548 [pid 548] set_robust_list(0x7f2089ead9a0, 24 [pid 545] rt_sigprocmask(SIG_SETMASK, [], [pid 548] <... set_robust_list resumed>) = 0 [pid 545] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 548] rt_sigprocmask(SIG_SETMASK, [], [pid 545] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 545] <... futex resumed>) = 0 [pid 548] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 545] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 548] <... mmap resumed>) = 0x20000000 [pid 548] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 545] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 548] <... futex resumed>) = 1 [pid 548] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 546] <... futex resumed>) = 0 [pid 546] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 546] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 545] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... setsockopt resumed>) = 0 [pid 546] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 545] <... futex resumed>) = 0 [pid 546] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] exit_group(0 [pid 548] <... futex resumed>) = ? [pid 546] <... futex resumed>) = ? [pid 545] <... exit_group resumed>) = ? [pid 546] +++ exited with 0 +++ [pid 548] +++ exited with 0 +++ [pid 545] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=545, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./59/binderfs") = 0 umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./59/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./59") = 0 mkdir("./60", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 549 ./strace-static-x86_64: Process 549 attached [pid 549] set_robust_list(0x5555574f36a0, 24) = 0 [pid 549] chdir("./60") = 0 [pid 549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 549] setpgid(0, 0) = 0 [pid 549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 549] write(3, "1000", 4) = 4 [pid 549] close(3) = 0 [pid 549] symlink("/dev/binderfs", "./binderfs") = 0 [pid 549] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 549] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 549] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 549] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 549] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[550]}, 88) = 550 ./strace-static-x86_64: Process 550 attached [pid 550] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 550] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 550] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 549] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 549] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 549] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 550] memfd_create("syzkaller", 0) = 3 [pid 550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 550] munmap(0x7f2081aae000, 138412032) = 0 [pid 550] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 29.321107][ T546] loop0: detected capacity change from 0 to 512 [ 29.328927][ T546] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 29.342173][ T546] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 550] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 550] close(3) = 0 [pid 550] mkdir("./file0", 0777) = 0 [pid 550] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 550] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 550] chdir("./file0") = 0 [pid 550] ioctl(4, LOOP_CLR_FD) = 0 [pid 550] close(4) = 0 [pid 550] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [pid 550] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 550] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 549] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 0 [pid 550] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 550] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 549] <... futex resumed>) = 0 [pid 549] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 549] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 549] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 549] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[552]}, 88) = 552 [pid 549] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 549] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... futex resumed>) = 1 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 552 attached [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 552] set_robust_list(0x7f2089ead9a0, 24 [pid 550] <... write resumed>) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 552] <... set_robust_list resumed>) = 0 [pid 550] <... write resumed>) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 552] rt_sigprocmask(SIG_SETMASK, [], [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 552] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 552] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 550] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 552] <... mmap resumed>) = 0x20000000 [pid 550] <... write resumed>) = 7 [pid 552] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] write(4, 0x20000180, 7) = 7 [pid 550] write(4, 0x20000180, 7) = 7 [pid 550] write(4, 0x20000180, 7) = 7 [pid 550] write(4, 0x20000180, 7) = 7 [pid 550] write(4, 0x20000180, 7) = 7 [pid 550] write(4, 0x20000180, 7) = 7 [pid 550] write(4, 0x20000180, 7) = 7 [pid 549] <... futex resumed>) = 0 [pid 550] write(4, 0x20000180, 7 [pid 549] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] <... write resumed>) = 7 [pid 550] write(4, 0x20000180, 7) = 7 [pid 550] write(4, 0x20000180, 7) = 7 [pid 550] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 552] <... futex resumed>) = 1 [pid 552] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 552] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 549] <... futex resumed>) = 0 [pid 552] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 549] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 549] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 550] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 550] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 549] <... futex resumed>) = 0 [pid 550] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 549] exit_group(0 [pid 550] <... futex resumed>) = ? [pid 549] <... exit_group resumed>) = ? [pid 552] <... futex resumed>) = ? [pid 552] +++ exited with 0 +++ [pid 550] +++ exited with 0 +++ [pid 549] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=549, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./60/binderfs") = 0 umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./60/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./60") = 0 mkdir("./61", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 553 attached , child_tidptr=0x5555574f3690) = 553 [pid 553] set_robust_list(0x5555574f36a0, 24) = 0 [pid 553] chdir("./61") = 0 [pid 553] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 553] setpgid(0, 0) = 0 [pid 553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 553] write(3, "1000", 4) = 4 [pid 553] close(3) = 0 [pid 553] symlink("/dev/binderfs", "./binderfs") = 0 [pid 553] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 553] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 553] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 553] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 553] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 554 attached [pid 554] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 554] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 554] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 553] <... clone3 resumed> => {parent_tid=[554]}, 88) = 554 [pid 553] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 553] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] <... futex resumed>) = 0 [pid 554] memfd_create("syzkaller", 0) = 3 [pid 554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 553] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 554] <... mmap resumed>) = 0x7f2081aae000 [pid 554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 554] munmap(0x7f2081aae000, 138412032) = 0 [pid 554] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 29.388881][ T550] loop0: detected capacity change from 0 to 512 [ 29.397226][ T550] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 29.410539][ T550] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 554] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 554] close(3) = 0 [pid 554] mkdir("./file0", 0777) = 0 [pid 554] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 554] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 554] chdir("./file0") = 0 [pid 554] ioctl(4, LOOP_CLR_FD) = 0 [pid 554] close(4) = 0 [pid 554] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] <... futex resumed>) = 1 [pid 554] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 554] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] <... futex resumed>) = 1 [pid 554] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 554] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 553] <... futex resumed>) = 0 [pid 554] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 553] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 554] <... write resumed>) = 7 [pid 554] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 553] <... futex resumed>) = 0 [pid 553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 554] <... write resumed>) = 7 [pid 554] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 553] <... mmap resumed>) = 0x7f2089e8d000 [pid 553] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 554] <... write resumed>) = 7 [pid 553] <... mprotect resumed>) = 0 [pid 554] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 553] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 553] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[556]}, 88) = 556 [pid 553] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 553] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 556 attached [pid 556] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 556] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 556] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 554] <... write resumed>) = 7 [pid 556] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] <... futex resumed>) = 1 [pid 556] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 556] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] <... futex resumed>) = 1 [pid 554] write(4, 0x20000180, 7 [pid 556] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 554] <... write resumed>) = 7 [pid 556] <... setsockopt resumed>) = 0 [pid 556] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 554] write(4, 0x20000180, 7 [pid 556] <... futex resumed>) = 1 [pid 554] <... write resumed>) = 7 [pid 553] <... futex resumed>) = 0 [pid 556] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] write(4, 0x20000180, 7) = 7 [pid 554] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 553] exit_group(0) = ? [pid 556] <... futex resumed>) = ? [pid 556] +++ exited with 0 +++ [pid 554] <... futex resumed>) = ? [pid 554] +++ exited with 0 +++ [pid 553] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=553, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./61/binderfs") = 0 umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./61/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./61") = 0 mkdir("./62", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 557 attached [pid 557] set_robust_list(0x5555574f36a0, 24) = 0 [pid 557] chdir("./62") = 0 [pid 557] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 557] setpgid(0, 0) = 0 [pid 557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 557] write(3, "1000", 4) = 4 [pid 298] <... clone resumed>, child_tidptr=0x5555574f3690) = 557 [pid 557] close(3) = 0 [pid 557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 557] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 557] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 557] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 557] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[558]}, 88) = 558 ./strace-static-x86_64: Process 558 attached [pid 557] rt_sigprocmask(SIG_SETMASK, [], [pid 558] set_robust_list(0x7f2089ece9a0, 24 [pid 557] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 557] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 558] <... set_robust_list resumed>) = 0 [pid 558] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 558] memfd_create("syzkaller", 0) = 3 [pid 558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [ 29.465669][ T554] loop0: detected capacity change from 0 to 512 [ 29.474460][ T554] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 29.487617][ T554] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 558] munmap(0x7f2081aae000, 138412032) = 0 [pid 558] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 558] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 558] close(3) = 0 [pid 558] mkdir("./file0", 0777) = 0 [pid 558] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 558] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 558] chdir("./file0") = 0 [pid 558] ioctl(4, LOOP_CLR_FD) = 0 [pid 558] close(4) = 0 [pid 558] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [pid 558] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 558] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [pid 558] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 558] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 557] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 557] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[560]}, 88) = 560 [pid 557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 557] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 558] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 558] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 560 attached [pid 560] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 560] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 560] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 557] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 0 [pid 558] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 558] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... futex resumed>) = 1 [pid 558] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 558] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] <... futex resumed>) = 0 [pid 557] exit_group(0) = ? [pid 558] <... futex resumed>) = ? [pid 558] +++ exited with 0 +++ [pid 560] <... futex resumed>) = ? [pid 560] +++ exited with 0 +++ [pid 557] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=557, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./62/binderfs") = 0 umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./62/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./62") = 0 mkdir("./63", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 561 ./strace-static-x86_64: Process 561 attached [pid 561] set_robust_list(0x5555574f36a0, 24) = 0 [pid 561] chdir("./63") = 0 [pid 561] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 561] setpgid(0, 0) = 0 [pid 561] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 561] write(3, "1000", 4) = 4 [pid 561] close(3) = 0 [pid 561] symlink("/dev/binderfs", "./binderfs") = 0 [pid 561] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 561] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 561] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 561] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 561] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 561] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 562 attached [pid 562] set_robust_list(0x7f2089ece9a0, 24 [pid 561] <... clone3 resumed> => {parent_tid=[562]}, 88) = 562 [pid 562] <... set_robust_list resumed>) = 0 [pid 561] rt_sigprocmask(SIG_SETMASK, [], [pid 562] rt_sigprocmask(SIG_SETMASK, [], [pid 561] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 562] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 561] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 561] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 562] memfd_create("syzkaller", 0) = 3 [pid 562] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 562] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 562] munmap(0x7f2081aae000, 138412032) = 0 [pid 562] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 29.548220][ T558] loop0: detected capacity change from 0 to 512 [ 29.556497][ T558] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 29.569645][ T558] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 562] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 562] close(3) = 0 [pid 562] mkdir("./file0", 0777) = 0 [pid 562] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 562] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 562] chdir("./file0") = 0 [pid 562] ioctl(4, LOOP_CLR_FD) = 0 [pid 562] close(4) = 0 [pid 562] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 561] <... futex resumed>) = 0 [pid 561] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 561] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 562] <... futex resumed>) = 1 [pid 562] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 562] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 561] <... futex resumed>) = 0 [pid 561] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 561] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 562] <... futex resumed>) = 1 [pid 562] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 562] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 561] <... futex resumed>) = 0 [pid 561] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 561] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 561] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 562] <... futex resumed>) = 1 [pid 561] <... mprotect resumed>) = 0 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 561] rt_sigprocmask(SIG_BLOCK, ~[], [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 561] <... rt_sigprocmask resumed>[], 8) = 0 [pid 561] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 562] <... write resumed>) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 561] <... clone3 resumed> => {parent_tid=[564]}, 88) = 564 [pid 561] rt_sigprocmask(SIG_SETMASK, [], [pid 562] <... write resumed>) = 7 [pid 561] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 564 attached [pid 561] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 561] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 564] set_robust_list(0x7f2089ead9a0, 24 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 564] <... set_robust_list resumed>) = 0 [pid 562] <... write resumed>) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 564] rt_sigprocmask(SIG_SETMASK, [], [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 564] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 564] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 562] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] <... mmap resumed>) = 0x20000000 [pid 564] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 561] <... futex resumed>) = 0 [pid 564] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 561] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 561] <... futex resumed>) = 1 [pid 562] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 561] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 562] <... socket resumed>) = 6 [pid 562] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 561] <... futex resumed>) = 0 [pid 561] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 561] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 562] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 562] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 561] <... futex resumed>) = 0 [pid 562] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 561] exit_group(0) = ? [pid 562] <... futex resumed>) = ? [pid 562] +++ exited with 0 +++ [pid 564] <... futex resumed>) = ? [pid 564] +++ exited with 0 +++ [pid 561] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=561, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./63/binderfs") = 0 umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./63/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./63") = 0 mkdir("./64", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 565 ./strace-static-x86_64: Process 565 attached [pid 565] set_robust_list(0x5555574f36a0, 24) = 0 [pid 565] chdir("./64") = 0 [pid 565] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 565] setpgid(0, 0) = 0 [pid 565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 565] write(3, "1000", 4) = 4 [pid 565] close(3) = 0 [pid 565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 565] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 565] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 565] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 565] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[566]}, 88) = 566 ./strace-static-x86_64: Process 566 attached [pid 565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 565] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 566] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 566] memfd_create("syzkaller", 0) = 3 [pid 566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 566] munmap(0x7f2081aae000, 138412032) = 0 [ 29.602185][ T562] loop0: detected capacity change from 0 to 512 [ 29.610481][ T562] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 29.623898][ T562] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 566] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 566] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 566] close(3) = 0 [pid 566] mkdir("./file0", 0777) = 0 [pid 566] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 566] chdir("./file0") = 0 [pid 566] ioctl(4, LOOP_CLR_FD) = 0 [pid 566] close(4) = 0 [pid 566] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 565] <... futex resumed>) = 0 [pid 566] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 565] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 565] <... futex resumed>) = 0 [pid 565] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 566] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... futex resumed>) = 0 [pid 565] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 566] <... futex resumed>) = 1 [pid 566] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 566] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... futex resumed>) = 0 [pid 565] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 565] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 565] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 566] <... futex resumed>) = 1 ./strace-static-x86_64: Process 568 attached [pid 565] <... clone3 resumed> => {parent_tid=[568]}, 88) = 568 [pid 568] set_robust_list(0x7f2089ead9a0, 24 [pid 566] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 568] <... set_robust_list resumed>) = 0 [pid 565] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 568] rt_sigprocmask(SIG_SETMASK, [], [pid 565] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 568] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 568] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 566] <... write resumed>) = -1 EFAULT (Bad address) [pid 568] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... futex resumed>) = 0 [pid 565] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 568] <... futex resumed>) = 1 [pid 568] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 566] write(4, 0x20000180, 7 [pid 568] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] <... futex resumed>) = 0 [pid 565] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 568] <... futex resumed>) = 1 [pid 568] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 566] <... write resumed>) = -1 EFAULT (Bad address) [pid 565] <... futex resumed>) = ? [pid 566] +++ killed by SIGBUS +++ [pid 568] +++ killed by SIGBUS +++ [pid 565] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=565, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./64/binderfs") = 0 umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./64/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./64") = 0 mkdir("./65", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 569 ./strace-static-x86_64: Process 569 attached [pid 569] set_robust_list(0x5555574f36a0, 24) = 0 [pid 569] chdir("./65") = 0 [pid 569] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 569] setpgid(0, 0) = 0 [pid 569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 569] write(3, "1000", 4) = 4 [pid 569] close(3) = 0 [pid 569] symlink("/dev/binderfs", "./binderfs") = 0 [pid 569] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 569] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 569] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 569] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 569] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 570 attached => {parent_tid=[570]}, 88) = 570 [pid 569] rt_sigprocmask(SIG_SETMASK, [], [pid 570] set_robust_list(0x7f2089ece9a0, 24 [pid 569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 569] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 569] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 570] <... set_robust_list resumed>) = 0 [pid 570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 570] memfd_create("syzkaller", 0) = 3 [pid 570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 570] munmap(0x7f2081aae000, 138412032) = 0 [pid 570] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 29.675327][ T566] loop0: detected capacity change from 0 to 512 [ 29.683556][ T566] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 29.696852][ T566] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 570] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 570] close(3) = 0 [pid 570] mkdir("./file0", 0777) = 0 [pid 570] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 570] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 570] chdir("./file0") = 0 [pid 570] ioctl(4, LOOP_CLR_FD) = 0 [pid 570] close(4) = 0 [pid 570] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... futex resumed>) = 0 [pid 569] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 569] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 570] <... futex resumed>) = 1 [pid 570] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 570] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... futex resumed>) = 0 [pid 569] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 569] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 570] <... futex resumed>) = 1 [pid 570] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 570] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... futex resumed>) = 0 [pid 569] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 569] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 569] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 569] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[572]}, 88) = 572 [pid 569] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 569] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 569] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 570] <... futex resumed>) = 1 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 570] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 572 attached [pid 572] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 572] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 572] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 572] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... futex resumed>) = 0 [pid 572] <... futex resumed>) = 1 [pid 569] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 572] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 569] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 570] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 570] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 569] <... futex resumed>) = 0 [pid 569] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 569] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 570] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 570] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... futex resumed>) = 0 [pid 569] exit_group(0) = ? [pid 570] <... futex resumed>) = ? [pid 570] +++ exited with 0 +++ [pid 572] <... futex resumed>) = ? [pid 572] +++ exited with 0 +++ [pid 569] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=569, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./65/binderfs") = 0 umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./65/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./65") = 0 mkdir("./66", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 573 attached , child_tidptr=0x5555574f3690) = 573 [pid 573] set_robust_list(0x5555574f36a0, 24) = 0 [pid 573] chdir("./66") = 0 [pid 573] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 573] setpgid(0, 0) = 0 [pid 573] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 573] write(3, "1000", 4) = 4 [pid 573] close(3) = 0 [pid 573] symlink("/dev/binderfs", "./binderfs") = 0 [pid 573] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 573] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 573] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 573] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 573] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 573] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 574 attached => {parent_tid=[574]}, 88) = 574 [pid 574] set_robust_list(0x7f2089ece9a0, 24 [pid 573] rt_sigprocmask(SIG_SETMASK, [], [pid 574] <... set_robust_list resumed>) = 0 [pid 573] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 574] rt_sigprocmask(SIG_SETMASK, [], [pid 573] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 573] <... futex resumed>) = 0 [pid 573] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 574] memfd_create("syzkaller", 0) = 3 [pid 574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 574] munmap(0x7f2081aae000, 138412032) = 0 [pid 574] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 29.741029][ T570] loop0: detected capacity change from 0 to 512 [ 29.749385][ T570] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 29.762675][ T570] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 574] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 574] close(3) = 0 [pid 574] mkdir("./file0", 0777) = 0 [pid 574] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 574] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 574] chdir("./file0") = 0 [pid 574] ioctl(4, LOOP_CLR_FD) = 0 [pid 574] close(4) = 0 [pid 574] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 573] <... futex resumed>) = 0 [pid 573] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] <... futex resumed>) = 0 [pid 574] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 574] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 573] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] <... futex resumed>) = 1 [pid 574] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 574] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 573] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 573] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 573] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 573] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 576 attached => {parent_tid=[576]}, 88) = 576 [pid 576] set_robust_list(0x7f2089ead9a0, 24 [pid 573] rt_sigprocmask(SIG_SETMASK, [], [pid 576] <... set_robust_list resumed>) = 0 [pid 576] rt_sigprocmask(SIG_SETMASK, [], [pid 573] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 576] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 573] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 573] <... futex resumed>) = 0 [pid 573] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... mmap resumed>) = 0x20000000 [pid 574] <... futex resumed>) = 1 [pid 576] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 576] <... futex resumed>) = 1 [pid 573] <... futex resumed>) = 0 [pid 576] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 576] +++ killed by SIGBUS +++ [pid 574] +++ killed by SIGBUS +++ [pid 573] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=573, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./66/binderfs") = 0 umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./66/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./66") = 0 mkdir("./67", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 577 ./strace-static-x86_64: Process 577 attached [pid 577] set_robust_list(0x5555574f36a0, 24) = 0 [pid 577] chdir("./67") = 0 [pid 577] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 577] setpgid(0, 0) = 0 [pid 577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 577] write(3, "1000", 4) = 4 [pid 577] close(3) = 0 [pid 577] symlink("/dev/binderfs", "./binderfs") = 0 [pid 577] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 577] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 577] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 577] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 577] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 578 attached [pid 578] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 578] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 578] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] <... clone3 resumed> => {parent_tid=[578]}, 88) = 578 [pid 577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 577] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 578] <... futex resumed>) = 0 [pid 577] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 578] memfd_create("syzkaller", 0) = 3 [pid 578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 578] munmap(0x7f2081aae000, 138412032) = 0 [pid 578] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 29.798805][ T574] loop0: detected capacity change from 0 to 512 [ 29.807155][ T574] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 29.820319][ T574] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 578] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 578] close(3) = 0 [pid 578] mkdir("./file0", 0777) = 0 [pid 578] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 578] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 578] chdir("./file0") = 0 [pid 578] ioctl(4, LOOP_CLR_FD) = 0 [pid 578] close(4) = 0 [pid 578] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = 0 [pid 577] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... futex resumed>) = 1 [pid 578] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 578] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = 0 [pid 577] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... futex resumed>) = 1 [pid 578] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 578] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = 0 [pid 577] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 577] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 577] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 577] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[580]}, 88) = 580 ./strace-static-x86_64: Process 580 attached [pid 577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 577] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... futex resumed>) = 1 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 580] set_robust_list(0x7f2089ead9a0, 24 [pid 578] <... write resumed>) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 580] <... set_robust_list resumed>) = 0 [pid 578] <... write resumed>) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 580] rt_sigprocmask(SIG_SETMASK, [], [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 580] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 580] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 578] write(4, 0x20000180, 7) = 7 [pid 578] write(4, 0x20000180, 7) = 7 [pid 580] <... mmap resumed>) = 0x20000000 [pid 580] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] write(4, 0x20000180, 7 [pid 577] <... futex resumed>) = 0 [pid 577] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 1 [pid 578] <... write resumed>) = 7 [pid 580] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 578] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... socket resumed>) = 6 [pid 578] <... futex resumed>) = 0 [pid 578] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 580] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 577] <... futex resumed>) = 0 [pid 577] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = 0 [pid 577] <... futex resumed>) = 1 [pid 577] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 578] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 578] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 577] <... futex resumed>) = 0 [pid 577] exit_group(0) = ? [pid 580] <... futex resumed>) = ? [pid 580] +++ exited with 0 +++ [pid 578] +++ exited with 0 +++ [pid 577] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=577, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./67/binderfs") = 0 umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./67/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./67") = 0 mkdir("./68", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 581 ./strace-static-x86_64: Process 581 attached [pid 581] set_robust_list(0x5555574f36a0, 24) = 0 [pid 581] chdir("./68") = 0 [pid 581] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 581] setpgid(0, 0) = 0 [pid 581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 581] write(3, "1000", 4) = 4 [pid 581] close(3) = 0 [pid 581] symlink("/dev/binderfs", "./binderfs") = 0 [pid 581] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 581] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 581] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 581] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 581] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 581] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 582 attached [pid 582] set_robust_list(0x7f2089ece9a0, 24 [pid 581] <... clone3 resumed> => {parent_tid=[582]}, 88) = 582 [pid 582] <... set_robust_list resumed>) = 0 [pid 581] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 582] rt_sigprocmask(SIG_SETMASK, [], [pid 581] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 581] <... futex resumed>) = 0 [pid 581] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 582] memfd_create("syzkaller", 0) = 3 [pid 582] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 582] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 582] munmap(0x7f2081aae000, 138412032) = 0 [pid 582] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 29.877746][ T578] loop0: detected capacity change from 0 to 512 [ 29.885581][ T578] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 29.898758][ T578] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 582] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 582] close(3) = 0 [pid 582] mkdir("./file0", 0777) = 0 [pid 582] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 582] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 582] chdir("./file0") = 0 [pid 582] ioctl(4, LOOP_CLR_FD) = 0 [pid 582] close(4) = 0 [pid 582] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 582] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 581] <... futex resumed>) = 0 [pid 581] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 581] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] <... futex resumed>) = 0 [pid 582] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 582] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = 0 [pid 581] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 581] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] <... futex resumed>) = 1 [pid 582] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 582] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = 0 [pid 581] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 581] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 581] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 581] rt_sigprocmask(SIG_BLOCK, ~[], [pid 582] <... futex resumed>) = 1 [pid 582] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 581] <... rt_sigprocmask resumed>[], 8) = 0 [pid 582] <... write resumed>) = 7 [pid 581] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 582] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 582] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 582] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 584 attached [pid 581] <... clone3 resumed> => {parent_tid=[584]}, 88) = 584 [pid 582] <... write resumed>) = 7 [pid 582] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 582] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 581] rt_sigprocmask(SIG_SETMASK, [], [pid 582] <... write resumed>) = 7 [pid 582] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 582] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 584] set_robust_list(0x7f2089ead9a0, 24 [pid 581] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 581] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... set_robust_list resumed>) = 0 [pid 581] <... futex resumed>) = 0 [pid 582] <... write resumed>) = 7 [pid 581] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 582] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 582] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 584] rt_sigprocmask(SIG_SETMASK, [], [pid 582] <... write resumed>) = 7 [pid 582] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 582] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 584] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 582] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 584] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 582] <... write resumed>) = 7 [pid 582] write(4, 0x20000180, 7 [pid 584] <... mmap resumed>) = 0x20000000 [pid 584] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... write resumed>) = 7 [pid 582] write(4, 0x20000180, 7) = 7 [pid 584] <... futex resumed>) = 1 [pid 582] write(4, 0x20000180, 7 [pid 581] <... futex resumed>) = 0 [pid 581] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 581] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] <... write resumed>) = 7 [pid 584] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 582] write(4, 0x20000180, 7) = 7 [pid 584] <... socket resumed>) = 6 [pid 582] write(4, 0x20000180, 7 [pid 584] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = 0 [pid 581] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 581] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 584] <... futex resumed>) = 1 [pid 584] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 582] <... write resumed>) = 7 [pid 584] <... setsockopt resumed>) = 0 [pid 582] write(4, 0x20000180, 7 [pid 584] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = 0 [pid 584] <... futex resumed>) = 1 [pid 584] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 582] <... write resumed>) = 7 [pid 582] write(4, 0x20000180, 7) = 7 [pid 582] write(4, 0x20000180, 7) = 7 [pid 582] write(4, 0x20000180, 7) = 7 [pid 582] write(4, 0x20000180, 7) = 7 [pid 582] write(4, 0x20000180, 7) = 7 [pid 582] write(4, 0x20000180, 7) = 7 [pid 582] write(4, 0x20000180, 7) = 7 [pid 582] write(4, 0x20000180, 7) = 7 [pid 582] write(4, 0x20000180, 7) = 7 [pid 582] write(4, 0x20000180, 7) = 7 [pid 582] write(4, 0x20000180, 7) = 7 [pid 582] write(4, 0x20000180, 7) = 7 [pid 582] write(4, 0x20000180, 7) = 7 [pid 582] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 582] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 581] exit_group(0) = ? [pid 584] <... futex resumed>) = ? [pid 584] +++ exited with 0 +++ [pid 582] <... futex resumed>) = ? [pid 582] +++ exited with 0 +++ [pid 581] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=581, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./68/binderfs") = 0 umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./68/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./68") = 0 mkdir("./69", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 585 ./strace-static-x86_64: Process 585 attached [pid 585] set_robust_list(0x5555574f36a0, 24) = 0 [pid 585] chdir("./69") = 0 [pid 585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 585] setpgid(0, 0) = 0 [pid 585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 585] write(3, "1000", 4) = 4 [pid 585] close(3) = 0 [pid 585] symlink("/dev/binderfs", "./binderfs") = 0 [pid 585] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 585] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 585] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 585] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[586]}, 88) = 586 [pid 585] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 585] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 585] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 586 attached [pid 586] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 586] memfd_create("syzkaller", 0) = 3 [pid 586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 586] munmap(0x7f2081aae000, 138412032) = 0 [pid 586] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 29.942895][ T582] loop0: detected capacity change from 0 to 512 [ 29.950482][ T582] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 29.964191][ T582] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 586] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 586] close(3) = 0 [pid 586] mkdir("./file0", 0777) = 0 [pid 586] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 586] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 586] chdir("./file0") = 0 [pid 586] ioctl(4, LOOP_CLR_FD) = 0 [pid 586] close(4) = 0 [pid 586] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] <... futex resumed>) = 0 [pid 585] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 585] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 586] <... futex resumed>) = 1 [pid 586] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 586] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] <... futex resumed>) = 0 [pid 585] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 585] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 586] <... futex resumed>) = 1 [pid 586] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 586] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] <... futex resumed>) = 0 [pid 585] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 585] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 585] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 586] <... futex resumed>) = 1 [pid 585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 586] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 585] <... clone3 resumed> => {parent_tid=[588]}, 88) = 588 [pid 585] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 585] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 585] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 588 attached [pid 588] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 588] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 588] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 586] <... write resumed>) = 7 [pid 586] write(4, 0x20000180, 7 [pid 588] <... mmap resumed>) = 0x20000000 [pid 586] <... write resumed>) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 588] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 585] <... futex resumed>) = 0 [pid 586] write(4, 0x20000180, 7 [pid 585] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 585] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 586] <... write resumed>) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 588] <... futex resumed>) = 1 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 588] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] write(4, 0x20000180, 7) = 7 [pid 586] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 588] <... socket resumed>) = 6 [pid 588] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 585] <... futex resumed>) = 0 [pid 588] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 585] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 0 [pid 585] <... futex resumed>) = 1 [pid 585] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 586] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 586] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 585] <... futex resumed>) = 0 [pid 585] exit_group(0 [pid 588] <... futex resumed>) = ? [pid 585] <... exit_group resumed>) = ? [pid 588] +++ exited with 0 +++ [pid 586] +++ exited with 0 +++ [pid 585] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=585, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./69/binderfs") = 0 umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./69/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./69") = 0 mkdir("./70", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 589 attached , child_tidptr=0x5555574f3690) = 589 [pid 589] set_robust_list(0x5555574f36a0, 24) = 0 [pid 589] chdir("./70") = 0 [pid 589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 589] setpgid(0, 0) = 0 [pid 589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 589] write(3, "1000", 4) = 4 [pid 589] close(3) = 0 [pid 589] symlink("/dev/binderfs", "./binderfs") = 0 [pid 589] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 589] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 589] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 589] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 589] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[590]}, 88) = 590 [pid 589] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 589] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 590 attached [pid 590] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 590] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 590] memfd_create("syzkaller", 0) = 3 [pid 590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 590] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 590] munmap(0x7f2081aae000, 138412032) = 0 [ 30.002748][ T586] loop0: detected capacity change from 0 to 512 [ 30.010488][ T586] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.023751][ T586] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 590] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 590] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 590] close(3) = 0 [pid 590] mkdir("./file0", 0777) = 0 [pid 590] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 590] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 590] chdir("./file0") = 0 [pid 590] ioctl(4, LOOP_CLR_FD) = 0 [pid 590] close(4) = 0 [pid 590] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 590] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 589] <... futex resumed>) = 0 [pid 589] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 589] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 590] <... futex resumed>) = 0 [pid 590] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 590] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] <... futex resumed>) = 0 [pid 589] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 590] <... futex resumed>) = 1 [pid 590] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 590] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 589] <... futex resumed>) = 0 [pid 590] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 589] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... write resumed>) = 7 [pid 589] <... futex resumed>) = 0 [pid 590] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 589] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 589] rt_sigprocmask(SIG_BLOCK, ~[], [pid 590] <... write resumed>) = 7 [pid 589] <... rt_sigprocmask resumed>[], 8) = 0 [pid 589] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 592 attached [pid 592] set_robust_list(0x7f2089ead9a0, 24 [pid 589] <... clone3 resumed> => {parent_tid=[592]}, 88) = 592 [pid 590] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 589] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 589] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... set_robust_list resumed>) = 0 [pid 589] <... futex resumed>) = 0 [pid 592] rt_sigprocmask(SIG_SETMASK, [], [pid 589] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 592] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 592] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 592] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] <... futex resumed>) = 0 [pid 589] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 592] <... futex resumed>) = 1 [pid 592] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 592] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] <... futex resumed>) = 0 [pid 589] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 592] <... futex resumed>) = 1 [pid 590] <... write resumed>) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] write(4, 0x20000180, 7) = 7 [pid 590] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 590] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 592] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] <... futex resumed>) = 0 [pid 589] exit_group(0) = ? [pid 590] <... futex resumed>) = ? [pid 590] +++ exited with 0 +++ [pid 592] <... futex resumed>) = ? [pid 592] +++ exited with 0 +++ [pid 589] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=589, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./70/binderfs") = 0 umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./70/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./70") = 0 mkdir("./71", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 593 ./strace-static-x86_64: Process 593 attached [pid 593] set_robust_list(0x5555574f36a0, 24) = 0 [pid 593] chdir("./71") = 0 [pid 593] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 593] setpgid(0, 0) = 0 [pid 593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 593] write(3, "1000", 4) = 4 [pid 593] close(3) = 0 [pid 593] symlink("/dev/binderfs", "./binderfs") = 0 [pid 593] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 593] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 593] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 593] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 593] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 594 attached => {parent_tid=[594]}, 88) = 594 [pid 593] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 593] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 594] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 594] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 594] memfd_create("syzkaller", 0) = 3 [pid 594] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 594] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 594] munmap(0x7f2081aae000, 138412032) = 0 [pid 594] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 30.064426][ T590] loop0: detected capacity change from 0 to 512 [ 30.072436][ T590] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.086498][ T590] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 594] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 594] close(3) = 0 [pid 594] mkdir("./file0", 0777) = 0 [pid 594] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 594] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 594] chdir("./file0") = 0 [pid 594] ioctl(4, LOOP_CLR_FD) = 0 [pid 594] close(4) = 0 [pid 594] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] <... futex resumed>) = 0 [pid 593] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 594] <... futex resumed>) = 1 [pid 594] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 594] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] <... futex resumed>) = 0 [pid 593] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 594] <... futex resumed>) = 1 [pid 594] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 594] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] <... futex resumed>) = 0 [pid 593] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 593] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 593] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 593] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[596]}, 88) = 596 [pid 593] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 593] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 594] <... futex resumed>) = 1 [pid 594] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 594] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 594] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 594] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 594] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 594] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 596 attached ) = 7 [pid 596] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 594] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 596] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 596] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 594] <... write resumed>) = 7 [pid 596] <... mmap resumed>) = 0x20000000 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7 [pid 596] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 594] <... write resumed>) = 7 [pid 596] <... futex resumed>) = 1 [pid 593] <... futex resumed>) = 0 [pid 596] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 594] write(4, 0x20000180, 7 [pid 593] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 594] <... write resumed>) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 596] <... socket resumed>) = 6 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 596] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 593] <... futex resumed>) = 0 [pid 593] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... futex resumed>) = 1 [pid 593] <... futex resumed>) = 0 [pid 593] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 596] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] write(4, 0x20000180, 7 [pid 596] <... setsockopt resumed>) = 0 [pid 594] <... write resumed>) = 7 [pid 596] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] <... futex resumed>) = 0 [pid 596] <... futex resumed>) = 1 [pid 594] write(4, 0x20000180, 7 [pid 596] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 594] <... write resumed>) = 7 [pid 594] write(4, 0x20000180, 7) = 7 [pid 594] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 594] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 593] exit_group(0) = ? [pid 596] <... futex resumed>) = ? [pid 596] +++ exited with 0 +++ [pid 594] <... futex resumed>) = ? [pid 594] +++ exited with 0 +++ [pid 593] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=593, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./71/binderfs") = 0 umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./71/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./71") = 0 mkdir("./72", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 597 ./strace-static-x86_64: Process 597 attached [pid 597] set_robust_list(0x5555574f36a0, 24) = 0 [pid 597] chdir("./72") = 0 [pid 597] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 597] setpgid(0, 0) = 0 [pid 597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 597] write(3, "1000", 4) = 4 [pid 597] close(3) = 0 [pid 597] symlink("/dev/binderfs", "./binderfs") = 0 [pid 597] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 597] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 597] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[598]}, 88) = 598 [pid 597] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 597] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 598 attached [pid 598] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 598] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 598] memfd_create("syzkaller", 0) = 3 [pid 598] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 598] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 598] munmap(0x7f2081aae000, 138412032) = 0 [pid 598] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 30.140081][ T594] loop0: detected capacity change from 0 to 512 [ 30.148522][ T594] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.161836][ T594] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 598] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 598] close(3) = 0 [pid 598] mkdir("./file0", 0777) = 0 [pid 598] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 598] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 598] chdir("./file0") = 0 [pid 598] ioctl(4, LOOP_CLR_FD) = 0 [pid 598] close(4) = 0 [pid 598] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... futex resumed>) = 1 [pid 598] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 598] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 597] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... futex resumed>) = 0 [pid 598] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 598] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 597] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[600]}, 88) = 600 [pid 597] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 597] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... futex resumed>) = 1 ./strace-static-x86_64: Process 600 attached [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 600] set_robust_list(0x7f2089ead9a0, 24 [pid 598] <... write resumed>) = 7 [pid 600] <... set_robust_list resumed>) = 0 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 600] rt_sigprocmask(SIG_SETMASK, [], [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 600] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 598] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 600] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 600] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 597] <... futex resumed>) = 0 [pid 600] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 597] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... futex resumed>) = 0 [pid 597] <... futex resumed>) = 1 [pid 598] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 597] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... socket resumed>) = 6 [pid 598] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... futex resumed>) = 1 [pid 598] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 598] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = 0 [pid 597] exit_group(0) = ? [pid 600] <... futex resumed>) = ? [pid 600] +++ exited with 0 +++ [pid 598] <... futex resumed>) = ? [pid 598] +++ exited with 0 +++ [pid 597] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=597, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./72/binderfs") = 0 umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./72/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./72") = 0 mkdir("./73", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 602 attached , child_tidptr=0x5555574f3690) = 602 [pid 602] set_robust_list(0x5555574f36a0, 24) = 0 [pid 602] chdir("./73") = 0 [pid 602] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 602] setpgid(0, 0) = 0 [pid 602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 602] write(3, "1000", 4) = 4 [pid 602] close(3) = 0 [pid 602] symlink("/dev/binderfs", "./binderfs") = 0 [pid 602] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 602] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 602] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 602] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 602] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[603]}, 88) = 603 ./strace-static-x86_64: Process 603 attached [pid 602] rt_sigprocmask(SIG_SETMASK, [], [pid 603] set_robust_list(0x7f2089ece9a0, 24 [pid 602] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 602] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 603] <... set_robust_list resumed>) = 0 [pid 603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 603] memfd_create("syzkaller", 0) = 3 [pid 603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 603] munmap(0x7f2081aae000, 138412032) = 0 [ 30.210329][ T598] loop0: detected capacity change from 0 to 512 [ 30.218734][ T598] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.231955][ T598] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 603] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 603] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 603] close(3) = 0 [pid 603] mkdir("./file0", 0777) = 0 [pid 603] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 603] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 603] chdir("./file0") = 0 [pid 603] ioctl(4, LOOP_CLR_FD) = 0 [pid 603] close(4) = 0 [pid 603] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 1 [pid 603] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 603] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 1 [pid 603] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 603] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 602] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 602] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 603] <... futex resumed>) = 1 [pid 603] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 602] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 605 attached => {parent_tid=[605]}, 88) = 605 [pid 605] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 605] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 602] rt_sigprocmask(SIG_SETMASK, [], [pid 603] <... write resumed>) = 7 [pid 603] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 602] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 602] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 605] <... futex resumed>) = 0 [pid 605] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 602] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] <... mmap resumed>) = 0x20000000 [pid 603] <... write resumed>) = 7 [pid 605] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] write(4, 0x20000180, 7 [pid 605] <... futex resumed>) = 1 [pid 603] <... write resumed>) = 7 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7 [pid 605] <... socket resumed>) = 6 [pid 603] <... write resumed>) = 7 [pid 605] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 603] write(4, 0x20000180, 7 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... write resumed>) = 7 [pid 603] write(4, 0x20000180, 7 [pid 605] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 603] <... write resumed>) = 7 [pid 603] write(4, 0x20000180, 7 [pid 605] <... setsockopt resumed>) = 0 [pid 603] <... write resumed>) = 7 [pid 605] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] write(4, 0x20000180, 7 [pid 605] <... futex resumed>) = 1 [pid 603] <... write resumed>) = 7 [pid 602] <... futex resumed>) = 0 [pid 605] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] write(4, 0x20000180, 7) = 7 [pid 603] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 603] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 602] exit_group(0) = ? [pid 605] <... futex resumed>) = ? [pid 603] <... futex resumed>) = ? [pid 605] +++ exited with 0 +++ [pid 603] +++ exited with 0 +++ [pid 602] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=602, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./73/binderfs") = 0 [ 30.277168][ T603] loop0: detected capacity change from 0 to 512 [ 30.285084][ T603] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.298359][ T603] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./73/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./73") = 0 mkdir("./74", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 606 ./strace-static-x86_64: Process 606 attached [pid 606] set_robust_list(0x5555574f36a0, 24) = 0 [pid 606] chdir("./74") = 0 [pid 606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 606] setpgid(0, 0) = 0 [pid 606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 606] write(3, "1000", 4) = 4 [pid 606] close(3) = 0 [pid 606] symlink("/dev/binderfs", "./binderfs") = 0 [pid 606] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 606] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 606] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[607]}, 88) = 607 [pid 606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 606] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 607 attached [pid 607] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 607] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 607] memfd_create("syzkaller", 0) = 3 [pid 607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 607] munmap(0x7f2081aae000, 138412032) = 0 [pid 607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 607] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 607] close(3) = 0 [pid 607] mkdir("./file0", 0777) = 0 [pid 607] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 607] chdir("./file0") = 0 [pid 607] ioctl(4, LOOP_CLR_FD) = 0 [pid 607] close(4) = 0 [pid 607] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 1 [pid 607] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 607] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 1 [pid 607] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 607] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 606] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[609]}, 88) = 609 [pid 606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 606] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 1 [pid 607] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 609 attached ) = 7 [pid 607] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 607] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 607] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 607] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 607] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 607] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 607] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 609] set_robust_list(0x7f2089ead9a0, 24 [pid 607] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 607] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 609] <... set_robust_list resumed>) = 0 [pid 607] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 609] rt_sigprocmask(SIG_SETMASK, [], [pid 607] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 609] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 609] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 609] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 1 [pid 609] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 609] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 1 [pid 609] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 607] <... write resumed>) = 7 [pid 609] <... setsockopt resumed>) = 0 [pid 609] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 609] <... futex resumed>) = 1 [pid 609] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] write(4, 0x20000180, 7) = 7 [pid 607] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 607] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] exit_group(0) = ? [pid 609] <... futex resumed>) = ? [pid 609] +++ exited with 0 +++ [pid 607] <... futex resumed>) = ? [pid 607] +++ exited with 0 +++ [pid 606] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=606, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./74/binderfs") = 0 umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./74/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./74") = 0 mkdir("./75", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 610 ./strace-static-x86_64: Process 610 attached [pid 610] set_robust_list(0x5555574f36a0, 24) = 0 [pid 610] chdir("./75") = 0 [pid 610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 610] setpgid(0, 0) = 0 [pid 610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 610] write(3, "1000", 4) = 4 [pid 610] close(3) = 0 [pid 610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 610] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 610] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 610] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 611 attached => {parent_tid=[611]}, 88) = 611 [pid 610] rt_sigprocmask(SIG_SETMASK, [], [pid 611] set_robust_list(0x7f2089ece9a0, 24 [pid 610] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 610] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 611] <... set_robust_list resumed>) = 0 [pid 610] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 611] memfd_create("syzkaller", 0) = 3 [pid 611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 611] munmap(0x7f2081aae000, 138412032) = 0 [pid 611] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 30.343267][ T607] loop0: detected capacity change from 0 to 512 [ 30.350992][ T607] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.364582][ T607] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 611] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 611] close(3) = 0 [pid 611] mkdir("./file0", 0777) = 0 [pid 611] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 611] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 611] chdir("./file0") = 0 [pid 611] ioctl(4, LOOP_CLR_FD) = 0 [pid 611] close(4) = 0 [pid 611] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 611] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 611] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 610] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[613]}, 88) = 613 [pid 610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 610] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 611] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 611] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 611] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 611] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 613 attached ) = 7 [pid 613] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 611] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 613] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 611] <... write resumed>) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 613] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 611] write(4, 0x20000180, 7 [pid 613] <... socket resumed>) = 6 [pid 613] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... write resumed>) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 610] <... futex resumed>) = 0 [pid 613] <... futex resumed>) = 1 [pid 611] write(4, 0x20000180, 7 [pid 610] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... write resumed>) = 7 [pid 611] write(4, 0x20000180, 7 [pid 613] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 611] <... write resumed>) = 7 [pid 613] <... setsockopt resumed>) = 0 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 613] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 611] write(4, 0x20000180, 7 [pid 613] <... futex resumed>) = 1 [pid 611] <... write resumed>) = 7 [pid 613] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] write(4, 0x20000180, 7) = 7 [pid 611] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] exit_group(0) = ? [pid 613] <... futex resumed>) = ? [pid 613] +++ exited with 0 +++ [pid 611] +++ exited with 0 +++ [pid 610] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=610, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./75/binderfs") = 0 umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./75/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./75") = 0 mkdir("./76", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 614 ./strace-static-x86_64: Process 614 attached [pid 614] set_robust_list(0x5555574f36a0, 24) = 0 [pid 614] chdir("./76") = 0 [pid 614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 614] setpgid(0, 0) = 0 [pid 614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 614] write(3, "1000", 4) = 4 [pid 614] close(3) = 0 [pid 614] symlink("/dev/binderfs", "./binderfs") = 0 [pid 614] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 614] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 614] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 614] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 615 attached => {parent_tid=[615]}, 88) = 615 [pid 615] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 615] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 615] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 614] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 615] <... futex resumed>) = 0 [pid 615] memfd_create("syzkaller", 0 [pid 614] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 615] <... memfd_create resumed>) = 3 [pid 615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 615] munmap(0x7f2081aae000, 138412032) = 0 [pid 615] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 30.407265][ T611] loop0: detected capacity change from 0 to 512 [ 30.415024][ T611] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.428209][ T611] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 615] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 615] close(3) = 0 [pid 615] mkdir("./file0", 0777) = 0 [pid 615] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 615] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 615] chdir("./file0") = 0 [pid 615] ioctl(4, LOOP_CLR_FD) = 0 [pid 615] close(4) = 0 [pid 615] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 615] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 615] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 614] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 614] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 617 attached [pid 617] set_robust_list(0x7f2089ead9a0, 24 [pid 614] <... clone3 resumed> => {parent_tid=[617]}, 88) = 617 [pid 617] <... set_robust_list resumed>) = 0 [pid 617] rt_sigprocmask(SIG_SETMASK, [], [pid 614] rt_sigprocmask(SIG_SETMASK, [], [pid 617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 617] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 614] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] <... mmap resumed>) = 0x20000000 [pid 615] <... futex resumed>) = 1 [pid 617] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 614] <... futex resumed>) = 0 [pid 617] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 614] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... socket resumed>) = 6 [pid 617] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 617] <... futex resumed>) = 0 [pid 614] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 614] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... futex resumed>) = 0 [pid 614] <... futex resumed>) = 1 [pid 617] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 614] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = ? [pid 617] +++ killed by SIGBUS +++ [pid 615] +++ killed by SIGBUS +++ [pid 614] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=614, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./76/binderfs") = 0 umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./76/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./76") = 0 mkdir("./77", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 618 ./strace-static-x86_64: Process 618 attached [pid 618] set_robust_list(0x5555574f36a0, 24) = 0 [pid 618] chdir("./77") = 0 [pid 618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 618] setpgid(0, 0) = 0 [pid 618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 618] write(3, "1000", 4) = 4 [pid 618] close(3) = 0 [pid 618] symlink("/dev/binderfs", "./binderfs") = 0 [pid 618] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 618] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 618] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 618] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 618] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 619 attached => {parent_tid=[619]}, 88) = 619 [pid 618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 618] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 619] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 619] memfd_create("syzkaller", 0) = 3 [pid 619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 619] munmap(0x7f2081aae000, 138412032) = 0 [pid 619] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 30.476593][ T615] loop0: detected capacity change from 0 to 512 [ 30.484894][ T615] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.498036][ T615] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 619] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 619] close(3) = 0 [pid 619] mkdir("./file0", 0777) = 0 [pid 619] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 619] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 619] chdir("./file0") = 0 [pid 619] ioctl(4, LOOP_CLR_FD) = 0 [pid 619] close(4) = 0 [pid 619] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 618] <... futex resumed>) = 0 [pid 618] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... futex resumed>) = 1 [pid 619] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 619] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 618] <... futex resumed>) = 0 [pid 618] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... futex resumed>) = 1 [pid 619] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 619] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 618] <... futex resumed>) = 0 [pid 618] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 618] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 618] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 618] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[621]}, 88) = 621 [pid 618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 618] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... futex resumed>) = 1 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 621 attached ) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 621] set_robust_list(0x7f2089ead9a0, 24 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 621] <... set_robust_list resumed>) = 0 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 621] rt_sigprocmask(SIG_SETMASK, [], [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 621] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 619] <... write resumed>) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 621] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 619] write(4, 0x20000180, 7 [pid 621] <... mmap resumed>) = 0x20000000 [pid 619] <... write resumed>) = 7 [pid 619] write(4, 0x20000180, 7) = 7 [pid 619] write(4, 0x20000180, 7) = 7 [pid 619] write(4, 0x20000180, 7 [pid 621] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... write resumed>) = 7 [pid 618] <... futex resumed>) = 0 [pid 618] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 621] <... futex resumed>) = 1 [pid 621] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 621] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] write(4, 0x20000180, 7) = 7 [pid 618] <... futex resumed>) = 0 [pid 618] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] write(4, 0x20000180, 7 [pid 621] <... futex resumed>) = 1 [pid 621] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 619] <... write resumed>) = 7 [pid 619] write(4, 0x20000180, 7) = 7 [pid 619] write(4, 0x20000180, 7) = 7 [pid 619] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 621] <... setsockopt resumed>) = 0 [pid 621] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 618] <... futex resumed>) = 0 [pid 618] exit_group(0) = ? [pid 619] <... futex resumed>) = ? [pid 619] +++ exited with 0 +++ [pid 621] <... futex resumed>) = ? [pid 621] +++ exited with 0 +++ [pid 618] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=618, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./77/binderfs") = 0 umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./77/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./77") = 0 mkdir("./78", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 622 ./strace-static-x86_64: Process 622 attached [pid 622] set_robust_list(0x5555574f36a0, 24) = 0 [pid 622] chdir("./78") = 0 [pid 622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 622] setpgid(0, 0) = 0 [pid 622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 622] write(3, "1000", 4) = 4 [pid 622] close(3) = 0 [pid 622] symlink("/dev/binderfs", "./binderfs") = 0 [pid 622] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 622] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 622] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 622] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 622] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 623 attached => {parent_tid=[623]}, 88) = 623 [pid 623] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 623] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 623] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 622] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 623] <... futex resumed>) = 0 [pid 623] memfd_create("syzkaller", 0) = 3 [pid 623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 622] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 623] munmap(0x7f2081aae000, 138412032) = 0 [pid 623] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 30.542756][ T619] loop0: detected capacity change from 0 to 512 [ 30.551316][ T619] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.564563][ T619] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 623] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 623] close(3) = 0 [pid 623] mkdir("./file0", 0777) = 0 [pid 623] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 623] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 623] chdir("./file0") = 0 [pid 623] ioctl(4, LOOP_CLR_FD) = 0 [pid 623] close(4) = 0 [pid 623] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... futex resumed>) = 1 [pid 623] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 623] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... futex resumed>) = 1 [pid 623] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 623] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 622] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 622] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 622] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 625 attached [pid 623] <... futex resumed>) = 1 [pid 622] <... clone3 resumed> => {parent_tid=[625]}, 88) = 625 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 622] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] <... write resumed>) = 7 [pid 622] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 625] set_robust_list(0x7f2089ead9a0, 24 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 625] <... set_robust_list resumed>) = 0 [pid 623] <... write resumed>) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 625] rt_sigprocmask(SIG_SETMASK, [], [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 625] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 625] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 623] <... write resumed>) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 623] write(4, 0x20000180, 7 [pid 625] <... mmap resumed>) = 0x20000000 [pid 623] <... write resumed>) = 7 [pid 625] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] write(4, 0x20000180, 7) = 7 [pid 623] write(4, 0x20000180, 7 [pid 625] <... futex resumed>) = 1 [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... write resumed>) = 7 [pid 623] write(4, 0x20000180, 7) = 7 [pid 623] write(4, 0x20000180, 7) = 7 [pid 623] write(4, 0x20000180, 7) = 7 [pid 623] write(4, 0x20000180, 7) = 7 [pid 625] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 623] write(4, 0x20000180, 7 [pid 625] <... socket resumed>) = 6 [pid 623] <... write resumed>) = 7 [pid 623] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 625] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 625] <... futex resumed>) = 1 [pid 622] <... futex resumed>) = 0 [pid 623] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 625] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 623] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = 0 [pid 623] <... futex resumed>) = 1 [pid 622] exit_group(0 [pid 623] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] <... exit_group resumed>) = ? [pid 625] <... futex resumed>) = ? [pid 623] <... futex resumed>) = ? [pid 625] +++ exited with 0 +++ [pid 623] +++ exited with 0 +++ [pid 622] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=622, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./78/binderfs") = 0 umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./78/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./78") = 0 mkdir("./79", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 626 ./strace-static-x86_64: Process 626 attached [pid 626] set_robust_list(0x5555574f36a0, 24) = 0 [pid 626] chdir("./79") = 0 [pid 626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 626] setpgid(0, 0) = 0 [pid 626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 626] write(3, "1000", 4) = 4 [pid 626] close(3) = 0 [pid 626] symlink("/dev/binderfs", "./binderfs") = 0 [pid 626] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 626] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 626] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 626] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 626] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 627 attached => {parent_tid=[627]}, 88) = 627 [pid 627] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 627] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 626] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 627] <... futex resumed>) = 0 [pid 627] memfd_create("syzkaller", 0 [pid 626] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 627] <... memfd_create resumed>) = 3 [pid 627] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 627] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 627] munmap(0x7f2081aae000, 138412032) = 0 [pid 627] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 30.611529][ T623] loop0: detected capacity change from 0 to 512 [ 30.620060][ T623] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.633329][ T623] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 627] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 627] close(3) = 0 [pid 627] mkdir("./file0", 0777) = 0 [pid 627] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 627] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 627] chdir("./file0") = 0 [pid 627] ioctl(4, LOOP_CLR_FD) = 0 [pid 627] close(4) = 0 [pid 627] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] <... futex resumed>) = 0 [pid 626] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... futex resumed>) = 1 [pid 627] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 627] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] <... futex resumed>) = 0 [pid 626] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... futex resumed>) = 1 [pid 627] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 627] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] <... futex resumed>) = 0 [pid 626] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 626] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 626] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 626] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 629 attached [pid 629] set_robust_list(0x7f2089ead9a0, 24 [pid 626] <... clone3 resumed> => {parent_tid=[629]}, 88) = 629 [pid 629] <... set_robust_list resumed>) = 0 [pid 626] rt_sigprocmask(SIG_SETMASK, [], [pid 629] rt_sigprocmask(SIG_SETMASK, [], [pid 626] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 629] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 626] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 629] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 626] <... futex resumed>) = 0 [pid 626] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 629] <... mmap resumed>) = 0x20000000 [pid 627] <... futex resumed>) = 1 [pid 629] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 626] <... futex resumed>) = 0 [pid 629] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 626] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 629] <... socket resumed>) = 6 [pid 626] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 629] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 629] <... futex resumed>) = 0 [pid 626] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 629] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 626] <... futex resumed>) = 0 [pid 629] +++ killed by SIGBUS +++ [pid 627] +++ killed by SIGBUS +++ [pid 626] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=626, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./79/binderfs") = 0 umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./79/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./79") = 0 mkdir("./80", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 630 ./strace-static-x86_64: Process 630 attached [pid 630] set_robust_list(0x5555574f36a0, 24) = 0 [pid 630] chdir("./80") = 0 [pid 630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 630] setpgid(0, 0) = 0 [pid 630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 630] write(3, "1000", 4) = 4 [pid 630] close(3) = 0 [pid 630] symlink("/dev/binderfs", "./binderfs") = 0 [pid 630] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 630] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 630] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 630] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 630] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 631 attached [pid 631] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 631] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] <... clone3 resumed> => {parent_tid=[631]}, 88) = 631 [pid 630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 630] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 631] <... futex resumed>) = 0 [pid 631] memfd_create("syzkaller", 0) = 3 [pid 631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 631] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 631] munmap(0x7f2081aae000, 138412032) = 0 [ 30.681782][ T627] loop0: detected capacity change from 0 to 512 [ 30.690473][ T627] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.703704][ T627] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 631] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 631] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 631] close(3) = 0 [pid 631] mkdir("./file0", 0777) = 0 [pid 631] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 631] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 631] chdir("./file0") = 0 [pid 631] ioctl(4, LOOP_CLR_FD) = 0 [pid 631] close(4) = 0 [pid 631] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 631] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... futex resumed>) = 0 [pid 631] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 631] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... futex resumed>) = 1 [pid 631] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 631] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 630] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 630] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 630] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[633]}, 88) = 633 [pid 630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 630] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... futex resumed>) = 1 [pid 631] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 631] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 631] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 631] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 631] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 631] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 631] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 631] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 631] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 631] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 631] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 633 attached [pid 631] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 633] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 633] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 631] <... write resumed>) = 7 [pid 633] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 631] write(4, 0x20000180, 7 [pid 633] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 631] <... write resumed>) = 7 [pid 633] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 633] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = 0 [pid 633] <... futex resumed>) = 1 [pid 633] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] write(4, 0x20000180, 7) = 7 [pid 631] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 631] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] exit_group(0) = ? [pid 633] <... futex resumed>) = ? [pid 633] +++ exited with 0 +++ [pid 631] <... futex resumed>) = ? [pid 631] +++ exited with 0 +++ [pid 630] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=630, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./80/binderfs") = 0 umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./80/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./80") = 0 mkdir("./81", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 634 ./strace-static-x86_64: Process 634 attached [pid 634] set_robust_list(0x5555574f36a0, 24) = 0 [pid 634] chdir("./81") = 0 [pid 634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 634] setpgid(0, 0) = 0 [pid 634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 634] write(3, "1000", 4) = 4 [pid 634] close(3) = 0 [pid 634] symlink("/dev/binderfs", "./binderfs") = 0 [pid 634] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 634] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 634] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 634] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 634] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 635 attached [pid 635] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 635] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] <... clone3 resumed> => {parent_tid=[635]}, 88) = 635 [pid 634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 634] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 635] <... futex resumed>) = 0 [pid 635] memfd_create("syzkaller", 0) = 3 [pid 635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 634] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 635] <... mmap resumed>) = 0x7f2081aae000 [pid 635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 635] munmap(0x7f2081aae000, 138412032) = 0 [pid 635] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 30.757360][ T631] loop0: detected capacity change from 0 to 512 [ 30.765212][ T631] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.778609][ T631] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 635] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 635] close(3) = 0 [pid 635] mkdir("./file0", 0777) = 0 [pid 635] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 635] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 635] chdir("./file0") = 0 [pid 635] ioctl(4, LOOP_CLR_FD) = 0 [pid 635] close(4) = 0 [pid 635] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... futex resumed>) = 1 [pid 635] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 635] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... futex resumed>) = 1 [pid 635] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 635] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 634] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 634] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 634] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[637]}, 88) = 637 [pid 634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 634] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 637 attached ) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 637] set_robust_list(0x7f2089ead9a0, 24 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 637] <... set_robust_list resumed>) = 0 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 637] rt_sigprocmask(SIG_SETMASK, [], [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 637] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 635] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 635] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 637] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 637] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... futex resumed>) = 0 [pid 635] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 635] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... futex resumed>) = 1 [pid 637] <... futex resumed>) = 1 [pid 635] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 635] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = 0 [pid 634] exit_group(0) = ? [pid 635] <... futex resumed>) = ? [pid 635] +++ exited with 0 +++ [pid 637] +++ exited with 0 +++ [pid 634] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=634, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./81/binderfs") = 0 umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./81/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./81") = 0 mkdir("./82", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 638 ./strace-static-x86_64: Process 638 attached [pid 638] set_robust_list(0x5555574f36a0, 24) = 0 [pid 638] chdir("./82") = 0 [pid 638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 638] setpgid(0, 0) = 0 [pid 638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 638] write(3, "1000", 4) = 4 [pid 638] close(3) = 0 [pid 638] symlink("/dev/binderfs", "./binderfs") = 0 [pid 638] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 638] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 638] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 638] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 638] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 638] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 639 attached [pid 639] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 639] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] <... clone3 resumed> => {parent_tid=[639]}, 88) = 639 [pid 638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 638] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 639] <... futex resumed>) = 0 [pid 639] memfd_create("syzkaller", 0) = 3 [pid 639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 638] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 639] <... mmap resumed>) = 0x7f2081aae000 [pid 639] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 639] munmap(0x7f2081aae000, 138412032) = 0 [pid 639] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 30.823910][ T635] loop0: detected capacity change from 0 to 512 [ 30.832538][ T635] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.845898][ T635] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 639] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 639] close(3) = 0 [pid 639] mkdir("./file0", 0777) = 0 [pid 639] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 639] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 639] chdir("./file0") = 0 [pid 639] ioctl(4, LOOP_CLR_FD) = 0 [pid 639] close(4) = 0 [pid 639] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... futex resumed>) = 1 [pid 639] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 639] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... futex resumed>) = 1 [pid 639] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 639] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 638] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 639] <... futex resumed>) = 1 [pid 638] <... mprotect resumed>) = 0 [pid 639] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 639] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 638] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 639] <... write resumed>) = 7 [pid 638] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 639] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 639] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 638] <... clone3 resumed> => {parent_tid=[641]}, 88) = 641 [pid 638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 639] <... write resumed>) = 7 [pid 639] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 639] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 639] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 639] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 639] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 639] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 639] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 641 attached [pid 639] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 638] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] set_robust_list(0x7f2089ead9a0, 24 [pid 639] <... write resumed>) = 7 [pid 641] <... set_robust_list resumed>) = 0 [pid 641] rt_sigprocmask(SIG_SETMASK, [], [pid 639] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 641] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 641] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 639] <... write resumed>) = 7 [pid 639] write(4, 0x20000180, 7 [pid 641] <... mmap resumed>) = 0x20000000 [pid 639] <... write resumed>) = 7 [pid 639] write(4, 0x20000180, 7) = 7 [pid 641] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] write(4, 0x20000180, 7 [pid 638] <... futex resumed>) = 0 [pid 641] <... futex resumed>) = 1 [pid 638] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] <... write resumed>) = 7 [pid 638] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] write(4, 0x20000180, 7) = 7 [pid 639] write(4, 0x20000180, 7 [pid 641] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 639] <... write resumed>) = 7 [pid 639] write(4, 0x20000180, 7) = 7 [pid 639] write(4, 0x20000180, 7) = 7 [pid 639] write(4, 0x20000180, 7) = 7 [pid 639] write(4, 0x20000180, 7) = 7 [pid 641] <... socket resumed>) = 6 [pid 639] write(4, 0x20000180, 7 [pid 641] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... write resumed>) = 7 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 639] write(4, 0x20000180, 7 [pid 641] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 639] <... write resumed>) = 7 [pid 641] <... setsockopt resumed>) = 0 [pid 641] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... futex resumed>) = 0 [pid 641] <... futex resumed>) = 1 [pid 641] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 639] write(4, 0x20000180, 7) = 7 [pid 639] write(4, 0x20000180, 7) = 7 [pid 639] write(4, 0x20000180, 7) = 7 [pid 639] write(4, 0x20000180, 7) = 7 [pid 639] write(4, 0x20000180, 7) = 7 [pid 639] write(4, 0x20000180, 7) = 7 [pid 639] write(4, 0x20000180, 7) = 7 [pid 639] write(4, 0x20000180, 7) = 7 [pid 639] write(4, 0x20000180, 7) = 7 [pid 639] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] exit_group(0) = ? [pid 641] <... futex resumed>) = ? [pid 639] <... futex resumed>) = ? [pid 641] +++ exited with 0 +++ [pid 639] +++ exited with 0 +++ [pid 638] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=638, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./82/binderfs") = 0 umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./82/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./82") = 0 mkdir("./83", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 642 ./strace-static-x86_64: Process 642 attached [pid 642] set_robust_list(0x5555574f36a0, 24) = 0 [pid 642] chdir("./83") = 0 [pid 642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 642] setpgid(0, 0) = 0 [pid 642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 642] write(3, "1000", 4) = 4 [pid 642] close(3) = 0 [pid 642] symlink("/dev/binderfs", "./binderfs") = 0 [pid 642] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 642] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 642] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 642] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 642] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 643 attached => {parent_tid=[643]}, 88) = 643 [pid 643] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 643] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 642] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] <... futex resumed>) = 0 [pid 642] <... futex resumed>) = 1 [pid 643] memfd_create("syzkaller", 0) = 3 [pid 643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 642] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 643] munmap(0x7f2081aae000, 138412032) = 0 [pid 643] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 30.886652][ T639] loop0: detected capacity change from 0 to 512 [ 30.894820][ T639] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.908305][ T639] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 643] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 643] close(3) = 0 [pid 643] mkdir("./file0", 0777) = 0 [pid 643] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 643] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 643] chdir("./file0") = 0 [pid 643] ioctl(4, LOOP_CLR_FD) = 0 [pid 643] close(4) = 0 [pid 643] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 642] <... futex resumed>) = 0 [pid 643] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 642] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] <... open resumed>) = 4 [pid 643] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 642] <... futex resumed>) = 0 [pid 643] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 642] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] <... open resumed>) = 5 [pid 643] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 642] <... futex resumed>) = 0 [pid 643] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 642] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] <... write resumed>) = 7 [pid 642] <... futex resumed>) = 0 [pid 643] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 643] <... write resumed>) = 7 [pid 642] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 643] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 642] <... mprotect resumed>) = 0 [pid 642] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 643] <... write resumed>) = 7 [pid 642] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 643] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 645 attached [pid 645] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 645] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 642] <... clone3 resumed> => {parent_tid=[645]}, 88) = 645 [pid 643] <... write resumed>) = 7 [pid 642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 642] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 642] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] <... futex resumed>) = 0 [pid 645] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 643] write(4, 0x20000180, 7 [pid 645] <... mmap resumed>) = 0x20000000 [pid 645] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... futex resumed>) = 0 [pid 642] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] <... futex resumed>) = 1 [pid 645] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 643] <... write resumed>) = 7 [pid 645] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] write(4, 0x20000180, 7) = 7 [pid 645] <... futex resumed>) = 1 [pid 642] <... futex resumed>) = 0 [pid 642] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 643] write(4, 0x20000180, 7) = 7 [pid 645] <... setsockopt resumed>) = 0 [pid 645] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] write(4, 0x20000180, 7) = 7 [pid 645] <... futex resumed>) = 1 [pid 642] <... futex resumed>) = 0 [pid 645] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] write(4, 0x20000180, 7) = 7 [pid 643] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 643] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 642] exit_group(0 [pid 643] <... futex resumed>) = ? [pid 642] <... exit_group resumed>) = ? [pid 645] <... futex resumed>) = ? [pid 643] +++ exited with 0 +++ [pid 645] +++ exited with 0 +++ [pid 642] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=642, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./83/binderfs") = 0 umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./83/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./83") = 0 mkdir("./84", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 646 ./strace-static-x86_64: Process 646 attached [pid 646] set_robust_list(0x5555574f36a0, 24) = 0 [pid 646] chdir("./84") = 0 [pid 646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 646] setpgid(0, 0) = 0 [pid 646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 646] write(3, "1000", 4) = 4 [pid 646] close(3) = 0 [pid 646] symlink("/dev/binderfs", "./binderfs") = 0 [pid 646] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 646] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 646] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 646] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 646] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[647]}, 88) = 647 [pid 646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 646] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 647 attached [pid 647] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 647] memfd_create("syzkaller", 0) = 3 [pid 647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [ 30.955174][ T643] loop0: detected capacity change from 0 to 512 [ 30.963853][ T643] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 30.977196][ T643] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 647] munmap(0x7f2081aae000, 138412032) = 0 [pid 647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 647] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 647] close(3) = 0 [pid 647] mkdir("./file0", 0777) = 0 [pid 647] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 647] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 647] chdir("./file0") = 0 [pid 647] ioctl(4, LOOP_CLR_FD) = 0 [pid 647] close(4) = 0 [pid 647] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 646] <... futex resumed>) = 0 [pid 647] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 646] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] <... open resumed>) = 4 [pid 647] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 646] <... futex resumed>) = 0 [pid 647] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 646] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 647] <... open resumed>) = 5 [pid 646] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 646] <... futex resumed>) = 0 [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 646] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 647] <... write resumed>) = 7 [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 646] <... mmap resumed>) = 0x7f2089e8d000 [pid 646] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 647] <... write resumed>) = 7 [pid 646] rt_sigprocmask(SIG_BLOCK, ~[], [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 646] <... rt_sigprocmask resumed>[], 8) = 0 [pid 646] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 647] <... write resumed>) = 7 ./strace-static-x86_64: Process 649 attached [pid 649] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 649] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 646] <... clone3 resumed> => {parent_tid=[649]}, 88) = 649 [pid 646] rt_sigprocmask(SIG_SETMASK, [], [pid 647] <... write resumed>) = 7 [pid 646] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 646] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 649] <... futex resumed>) = 0 [pid 647] <... write resumed>) = 7 [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 646] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] <... write resumed>) = 7 [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 649] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 647] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 647] write(4, 0x20000180, 7 [pid 649] <... mmap resumed>) = 0x20000000 [pid 649] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] <... write resumed>) = 7 [pid 647] write(4, 0x20000180, 7) = 7 [pid 647] write(4, 0x20000180, 7) = 7 [pid 649] <... futex resumed>) = 1 [pid 646] <... futex resumed>) = 0 [pid 647] write(4, 0x20000180, 7) = 7 [pid 646] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] write(4, 0x20000180, 7 [pid 646] <... futex resumed>) = 0 [pid 646] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] <... write resumed>) = 7 [pid 647] write(4, 0x20000180, 7) = 7 [pid 647] write(4, 0x20000180, 7) = 7 [pid 649] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 647] write(4, 0x20000180, 7) = 7 [pid 647] write(4, 0x20000180, 7) = 7 [pid 647] write(4, 0x20000180, 7) = 7 [pid 647] write(4, 0x20000180, 7) = 7 [pid 647] write(4, 0x20000180, 7) = 7 [pid 647] write(4, 0x20000180, 7) = 7 [pid 647] write(4, 0x20000180, 7) = 7 [pid 647] write(4, 0x20000180, 7) = 7 [pid 647] write(4, 0x20000180, 7) = 7 [pid 647] write(4, 0x20000180, 7) = 7 [pid 647] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 647] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 649] <... socket resumed>) = 6 [pid 649] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 646] <... futex resumed>) = 0 [pid 646] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 647] <... futex resumed>) = 0 [pid 646] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 647] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 647] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 646] <... futex resumed>) = 0 [pid 646] exit_group(0) = ? [pid 649] <... futex resumed>) = ? [pid 647] +++ exited with 0 +++ [pid 649] +++ exited with 0 +++ [pid 646] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=646, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./84/binderfs") = 0 umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./84/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./84") = 0 mkdir("./85", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 650 ./strace-static-x86_64: Process 650 attached [pid 650] set_robust_list(0x5555574f36a0, 24) = 0 [pid 650] chdir("./85") = 0 [pid 650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 650] setpgid(0, 0) = 0 [pid 650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 650] write(3, "1000", 4) = 4 [pid 650] close(3) = 0 [pid 650] symlink("/dev/binderfs", "./binderfs") = 0 [pid 650] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 650] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 650] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 650] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 650] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 651 attached [pid 651] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 651] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 651] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 650] <... clone3 resumed> => {parent_tid=[651]}, 88) = 651 [pid 650] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 650] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 651] <... futex resumed>) = 0 [pid 651] memfd_create("syzkaller", 0) = 3 [pid 651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 650] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 651] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 651] munmap(0x7f2081aae000, 138412032) = 0 [pid 651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 31.021595][ T647] loop0: detected capacity change from 0 to 512 [ 31.029840][ T647] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.043206][ T647] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 651] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 651] close(3) = 0 [pid 651] mkdir("./file0", 0777) = 0 [pid 651] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 651] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 651] chdir("./file0") = 0 [pid 651] ioctl(4, LOOP_CLR_FD) = 0 [pid 651] close(4) = 0 [pid 651] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 650] <... futex resumed>) = 0 [pid 650] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] <... futex resumed>) = 1 [pid 651] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 651] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 650] <... futex resumed>) = 0 [pid 650] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... futex resumed>) = 1 [pid 650] <... futex resumed>) = 0 [pid 651] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 650] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] <... open resumed>) = 5 [pid 651] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 650] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 650] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 650] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 650] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 650] rt_sigprocmask(SIG_BLOCK, ~[], [pid 651] <... futex resumed>) = 0 [pid 650] <... rt_sigprocmask resumed>[], 8) = 0 [pid 651] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 650] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 651] <... write resumed>) = 7 [pid 651] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 651] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 653 attached [pid 650] <... clone3 resumed> => {parent_tid=[653]}, 88) = 653 [pid 651] <... write resumed>) = 7 [pid 650] rt_sigprocmask(SIG_SETMASK, [], [pid 653] set_robust_list(0x7f2089ead9a0, 24 [pid 651] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 651] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 651] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 651] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 653] <... set_robust_list resumed>) = 0 [pid 650] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 651] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 653] rt_sigprocmask(SIG_SETMASK, [], [pid 650] <... futex resumed>) = 0 [pid 650] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 653] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 653] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 651] <... write resumed>) = 7 [pid 651] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 651] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 651] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 653] <... mmap resumed>) = 0x20000000 [pid 651] write(4, 0x20000180, 7) = 7 [pid 653] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 650] <... futex resumed>) = 0 [pid 653] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 650] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... socket resumed>) = 6 [pid 653] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 651] write(4, 0x20000180, 7 [pid 650] <... futex resumed>) = 0 [pid 650] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 651] <... write resumed>) = 7 [pid 653] <... setsockopt resumed>) = 0 [pid 653] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 650] <... futex resumed>) = 0 [pid 653] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] write(4, 0x20000180, 7) = 7 [pid 651] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 650] exit_group(0 [pid 653] <... futex resumed>) = ? [pid 650] <... exit_group resumed>) = ? [pid 653] +++ exited with 0 +++ [pid 651] <... futex resumed>) = ? [pid 651] +++ exited with 0 +++ [pid 650] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=650, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./85/binderfs") = 0 umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./85/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./85") = 0 mkdir("./86", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 654 ./strace-static-x86_64: Process 654 attached [pid 654] set_robust_list(0x5555574f36a0, 24) = 0 [pid 654] chdir("./86") = 0 [pid 654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 654] setpgid(0, 0) = 0 [pid 654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 654] write(3, "1000", 4) = 4 [pid 654] close(3) = 0 [pid 654] symlink("/dev/binderfs", "./binderfs") = 0 [pid 654] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 654] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 654] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 654] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 654] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[655]}, 88) = 655 [pid 654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 654] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 655 attached [pid 655] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 655] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 655] memfd_create("syzkaller", 0) = 3 [pid 655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 655] munmap(0x7f2081aae000, 138412032) = 0 [ 31.096685][ T651] loop0: detected capacity change from 0 to 512 [ 31.104489][ T651] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.117579][ T651] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 655] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 655] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 655] close(3) = 0 [pid 655] mkdir("./file0", 0777) = 0 [pid 655] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 655] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 655] chdir("./file0") = 0 [pid 655] ioctl(4, LOOP_CLR_FD) = 0 [pid 655] close(4) = 0 [pid 655] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 655] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 654] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] <... futex resumed>) = 0 [pid 655] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 655] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] <... futex resumed>) = 1 [pid 655] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 655] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 654] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 654] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 654] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[657]}, 88) = 657 [pid 654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 654] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] <... futex resumed>) = 1 [pid 655] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 655] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 655] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 655] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 655] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 655] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 655] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 655] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 655] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 657 attached [pid 657] set_robust_list(0x7f2089ead9a0, 24 [pid 655] <... write resumed>) = 7 [pid 657] <... set_robust_list resumed>) = 0 [pid 657] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 657] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 655] write(4, 0x20000180, 7 [pid 657] <... mmap resumed>) = 0x20000000 [pid 655] <... write resumed>) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] write(4, 0x20000180, 7 [pid 657] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 655] <... write resumed>) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] write(4, 0x20000180, 7 [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] <... write resumed>) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] write(4, 0x20000180, 7 [pid 657] <... futex resumed>) = 1 [pid 655] <... write resumed>) = 7 [pid 657] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 655] write(4, 0x20000180, 7 [pid 657] <... socket resumed>) = 6 [pid 655] <... write resumed>) = 7 [pid 657] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] write(4, 0x20000180, 7 [pid 657] <... futex resumed>) = 1 [pid 655] <... write resumed>) = 7 [pid 657] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 657] <... setsockopt resumed>) = 0 [pid 655] write(4, 0x20000180, 7 [pid 657] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 654] <... futex resumed>) = 0 [pid 657] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 655] <... write resumed>) = 7 [pid 655] write(4, 0x20000180, 7) = 7 [pid 655] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 655] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] exit_group(0 [pid 655] <... futex resumed>) = ? [pid 654] <... exit_group resumed>) = ? [pid 655] +++ exited with 0 +++ [pid 657] <... futex resumed>) = ? [pid 657] +++ exited with 0 +++ [pid 654] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=654, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./86/binderfs") = 0 umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./86/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./86") = 0 mkdir("./87", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 658 ./strace-static-x86_64: Process 658 attached [pid 658] set_robust_list(0x5555574f36a0, 24) = 0 [pid 658] chdir("./87") = 0 [pid 658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 658] setpgid(0, 0) = 0 [pid 658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 658] write(3, "1000", 4) = 4 [pid 658] close(3) = 0 [pid 658] symlink("/dev/binderfs", "./binderfs") = 0 [pid 658] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 658] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 658] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 658] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 658] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 659 attached [pid 659] set_robust_list(0x7f2089ece9a0, 24 [pid 658] <... clone3 resumed> => {parent_tid=[659]}, 88) = 659 [pid 658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 659] <... set_robust_list resumed>) = 0 [pid 659] rt_sigprocmask(SIG_SETMASK, [], [pid 658] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 658] <... futex resumed>) = 0 [pid 659] memfd_create("syzkaller", 0 [pid 658] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 659] <... memfd_create resumed>) = 3 [pid 659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 659] munmap(0x7f2081aae000, 138412032) = 0 [pid 659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 31.165810][ T655] loop0: detected capacity change from 0 to 512 [ 31.173589][ T655] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.187153][ T655] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 659] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 659] close(3) = 0 [pid 659] mkdir("./file0", 0777) = 0 [pid 659] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 659] chdir("./file0") = 0 [pid 659] ioctl(4, LOOP_CLR_FD) = 0 [pid 659] close(4) = 0 [pid 659] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 659] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 659] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 658] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 659] <... futex resumed>) = 1 [pid 658] rt_sigprocmask(SIG_BLOCK, ~[], [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 658] <... rt_sigprocmask resumed>[], 8) = 0 [pid 659] <... write resumed>) = 7 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 658] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 662 attached [pid 659] <... write resumed>) = 7 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 658] <... clone3 resumed> => {parent_tid=[662]}, 88) = 662 [pid 659] <... write resumed>) = 7 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 658] rt_sigprocmask(SIG_SETMASK, [], [pid 659] <... write resumed>) = 7 [pid 658] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 662] set_robust_list(0x7f2089ead9a0, 24 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 658] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 658] <... futex resumed>) = 0 [pid 659] <... write resumed>) = 7 [pid 662] <... set_robust_list resumed>) = 0 [pid 658] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 662] rt_sigprocmask(SIG_SETMASK, [], [pid 659] <... write resumed>) = 7 [pid 662] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 662] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 659] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 659] write(4, 0x20000180, 7 [pid 662] <... mmap resumed>) = 0x20000000 [pid 659] <... write resumed>) = 7 [pid 659] write(4, 0x20000180, 7) = 7 [pid 659] write(4, 0x20000180, 7 [pid 662] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] <... write resumed>) = 7 [pid 659] write(4, 0x20000180, 7) = 7 [pid 659] write(4, 0x20000180, 7) = 7 [pid 659] write(4, 0x20000180, 7) = 7 [pid 658] <... futex resumed>) = 0 [pid 659] write(4, 0x20000180, 7 [pid 658] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... write resumed>) = 7 [pid 659] write(4, 0x20000180, 7) = 7 [pid 662] <... futex resumed>) = 1 [pid 662] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 659] write(4, 0x20000180, 7) = 7 [pid 659] write(4, 0x20000180, 7) = 7 [pid 659] write(4, 0x20000180, 7) = 7 [pid 659] write(4, 0x20000180, 7) = 7 [pid 662] <... socket resumed>) = 6 [pid 659] write(4, 0x20000180, 7) = 7 [pid 662] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] write(4, 0x20000180, 7) = 7 [pid 659] write(4, 0x20000180, 7) = 7 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] write(4, 0x20000180, 7 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... write resumed>) = 7 [pid 659] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 659] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 662] <... futex resumed>) = 1 [pid 662] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 662] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] <... futex resumed>) = 0 [pid 662] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 658] exit_group(0 [pid 662] <... futex resumed>) = ? [pid 658] <... exit_group resumed>) = ? [pid 662] +++ exited with 0 +++ [pid 659] <... futex resumed>) = ? [pid 659] +++ exited with 0 +++ [pid 658] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=658, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./87/binderfs") = 0 umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./87/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./87") = 0 mkdir("./88", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 663 ./strace-static-x86_64: Process 663 attached [pid 663] set_robust_list(0x5555574f36a0, 24) = 0 [pid 663] chdir("./88") = 0 [pid 663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 663] setpgid(0, 0) = 0 [pid 663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 663] write(3, "1000", 4) = 4 [pid 663] close(3) = 0 [pid 663] symlink("/dev/binderfs", "./binderfs") = 0 [pid 663] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 663] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 663] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 663] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 663] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 664 attached => {parent_tid=[664]}, 88) = 664 [pid 664] set_robust_list(0x7f2089ece9a0, 24 [pid 663] rt_sigprocmask(SIG_SETMASK, [], [pid 664] <... set_robust_list resumed>) = 0 [pid 663] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 664] rt_sigprocmask(SIG_SETMASK, [], [pid 663] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 664] memfd_create("syzkaller", 0) = 3 [pid 664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 664] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 664] munmap(0x7f2081aae000, 138412032) = 0 [pid 664] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 31.234593][ T659] loop0: detected capacity change from 0 to 512 [ 31.242913][ T659] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.256201][ T659] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 664] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 664] close(3) = 0 [pid 664] mkdir("./file0", 0777) = 0 [pid 664] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 664] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 664] chdir("./file0") = 0 [pid 664] ioctl(4, LOOP_CLR_FD) = 0 [pid 664] close(4) = 0 [pid 664] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 663] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 0 [pid 664] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 664] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] <... futex resumed>) = 1 [pid 664] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 664] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] <... futex resumed>) = 1 [pid 663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 663] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 663] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 663] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[666]}, 88) = 666 [pid 663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 663] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 664] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 664] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 664] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 664] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 664] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 664] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 666 attached [pid 664] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 666] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 666] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 664] <... write resumed>) = 7 [pid 666] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = 1 [pid 666] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 664] write(4, 0x20000180, 7 [pid 666] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = 1 [pid 666] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 664] <... write resumed>) = 7 [pid 664] write(4, 0x20000180, 7 [pid 666] <... setsockopt resumed>) = 0 [pid 664] <... write resumed>) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 666] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7 [pid 666] <... futex resumed>) = 1 [pid 663] <... futex resumed>) = 0 [pid 666] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] <... write resumed>) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] write(4, 0x20000180, 7) = 7 [pid 664] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] exit_group(0) = ? [pid 666] <... futex resumed>) = ? [pid 664] <... futex resumed>) = ? [pid 666] +++ exited with 0 +++ [pid 664] +++ exited with 0 +++ [pid 663] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=663, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./88/binderfs") = 0 umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./88/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./88") = 0 mkdir("./89", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 667 ./strace-static-x86_64: Process 667 attached [pid 667] set_robust_list(0x5555574f36a0, 24) = 0 [pid 667] chdir("./89") = 0 [pid 667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 667] setpgid(0, 0) = 0 [pid 667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 667] write(3, "1000", 4) = 4 [pid 667] close(3) = 0 [pid 667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 667] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 667] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 667] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 667] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 667] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 668 attached => {parent_tid=[668]}, 88) = 668 [pid 668] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 668] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 668] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 667] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 668] <... futex resumed>) = 0 [pid 668] memfd_create("syzkaller", 0) = 3 [pid 668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 667] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 31.295443][ T664] loop0: detected capacity change from 0 to 512 [ 31.304227][ T664] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.317591][ T664] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 668] munmap(0x7f2081aae000, 138412032) = 0 [pid 668] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 668] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 668] close(3) = 0 [pid 668] mkdir("./file0", 0777) = 0 [pid 668] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 668] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 668] chdir("./file0") = 0 [pid 668] ioctl(4, LOOP_CLR_FD) = 0 [pid 668] close(4) = 0 [pid 668] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 668] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 668] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 668] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 667] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 667] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 667] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 667] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[670]}, 88) = 670 [pid 667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 667] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 0 [pid 668] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 668] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 668] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 668] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 668] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 668] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 668] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 670 attached [pid 670] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 668] <... write resumed>) = 7 [pid 670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 670] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 668] write(4, 0x20000180, 7 [pid 670] <... mmap resumed>) = 0x20000000 [pid 670] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... futex resumed>) = 1 [pid 670] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 668] <... write resumed>) = 7 [pid 670] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... futex resumed>) = 1 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7 [pid 670] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 668] <... write resumed>) = 7 [pid 670] <... setsockopt resumed>) = 0 [pid 668] write(4, 0x20000180, 7) = 7 [pid 670] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 667] <... futex resumed>) = 0 [pid 670] <... futex resumed>) = 1 [pid 670] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] write(4, 0x20000180, 7) = 7 [pid 668] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 668] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 667] exit_group(0) = ? [pid 670] <... futex resumed>) = ? [pid 670] +++ exited with 0 +++ [pid 668] <... futex resumed>) = ? [pid 668] +++ exited with 0 +++ [pid 667] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=667, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./89/binderfs") = 0 umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./89/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./89") = 0 mkdir("./90", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 671 ./strace-static-x86_64: Process 671 attached [pid 671] set_robust_list(0x5555574f36a0, 24) = 0 [pid 671] chdir("./90") = 0 [pid 671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 671] setpgid(0, 0) = 0 [pid 671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 671] write(3, "1000", 4) = 4 [pid 671] close(3) = 0 [pid 671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 671] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 671] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 671] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 671] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 672 attached [pid 672] set_robust_list(0x7f2089ece9a0, 24 [pid 671] <... clone3 resumed> => {parent_tid=[672]}, 88) = 672 [pid 671] rt_sigprocmask(SIG_SETMASK, [], [pid 672] <... set_robust_list resumed>) = 0 [pid 671] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 672] rt_sigprocmask(SIG_SETMASK, [], [pid 671] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 672] memfd_create("syzkaller", 0) = 3 [pid 672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 672] munmap(0x7f2081aae000, 138412032) = 0 [pid 672] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 31.363774][ T668] loop0: detected capacity change from 0 to 512 [ 31.372452][ T668] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.386207][ T668] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 672] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 672] close(3) = 0 [pid 672] mkdir("./file0", 0777) = 0 [pid 672] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 672] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 672] chdir("./file0") = 0 [pid 672] ioctl(4, LOOP_CLR_FD) = 0 [pid 672] close(4) = 0 [pid 672] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... futex resumed>) = 1 [pid 672] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 672] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... futex resumed>) = 1 [pid 672] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 672] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 671] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 671] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 674 attached => {parent_tid=[674]}, 88) = 674 [pid 671] rt_sigprocmask(SIG_SETMASK, [], [pid 674] set_robust_list(0x7f2089ead9a0, 24 [pid 671] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 671] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... futex resumed>) = 1 [pid 672] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 674] <... set_robust_list resumed>) = 0 [pid 672] <... write resumed>) = 7 [pid 672] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 672] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 674] rt_sigprocmask(SIG_SETMASK, [], [pid 672] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 672] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 674] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 672] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 672] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 672] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 672] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 674] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 672] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 674] <... mmap resumed>) = 0x20000000 [pid 672] write(4, 0x20000180, 7) = 7 [pid 674] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] <... futex resumed>) = 1 [pid 674] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 672] write(4, 0x20000180, 7 [pid 674] <... socket resumed>) = 6 [pid 674] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 671] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 671] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 672] <... write resumed>) = 7 [pid 674] <... futex resumed>) = 1 [pid 672] write(4, 0x20000180, 7) = 7 [pid 674] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 672] write(4, 0x20000180, 7 [pid 674] <... setsockopt resumed>) = 0 [pid 674] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 671] <... futex resumed>) = 0 [pid 674] <... futex resumed>) = 1 [pid 672] <... write resumed>) = 7 [pid 674] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] write(4, 0x20000180, 7) = 7 [pid 672] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] exit_group(0) = ? [pid 674] <... futex resumed>) = ? [pid 674] +++ exited with 0 +++ [pid 672] <... futex resumed>) = ? [pid 672] +++ exited with 0 +++ [pid 671] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=671, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./90/binderfs") = 0 umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./90/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./90") = 0 mkdir("./91", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 675 ./strace-static-x86_64: Process 675 attached [pid 675] set_robust_list(0x5555574f36a0, 24) = 0 [pid 675] chdir("./91") = 0 [pid 675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 675] setpgid(0, 0) = 0 [pid 675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 675] write(3, "1000", 4) = 4 [pid 675] close(3) = 0 [pid 675] symlink("/dev/binderfs", "./binderfs") = 0 [pid 675] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 675] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 675] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 675] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 675] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[676]}, 88) = 676 ./strace-static-x86_64: Process 676 attached [pid 676] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 676] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 675] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 676] <... futex resumed>) = 0 [pid 676] memfd_create("syzkaller", 0 [pid 675] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 676] <... memfd_create resumed>) = 3 [pid 676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 676] munmap(0x7f2081aae000, 138412032) = 0 [pid 676] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 31.433745][ T672] loop0: detected capacity change from 0 to 512 [ 31.441739][ T672] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.455056][ T672] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 676] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 676] close(3) = 0 [pid 676] mkdir("./file0", 0777) = 0 [pid 676] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 676] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 676] chdir("./file0") = 0 [pid 676] ioctl(4, LOOP_CLR_FD) = 0 [pid 676] close(4) = 0 [pid 676] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] <... futex resumed>) = 0 [pid 675] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 675] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 676] <... futex resumed>) = 1 [pid 676] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 676] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] <... futex resumed>) = 0 [pid 675] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 675] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 676] <... futex resumed>) = 1 [pid 676] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 676] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] <... futex resumed>) = 0 [pid 675] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 675] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 675] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 675] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 678 attached [pid 678] set_robust_list(0x7f2089ead9a0, 24 [pid 675] <... clone3 resumed> => {parent_tid=[678]}, 88) = 678 [pid 678] <... set_robust_list resumed>) = 0 [pid 675] rt_sigprocmask(SIG_SETMASK, [], [pid 678] rt_sigprocmask(SIG_SETMASK, [], [pid 675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 678] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 675] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 675] <... futex resumed>) = 0 [pid 675] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 678] <... mmap resumed>) = 0x20000000 [pid 676] <... futex resumed>) = 1 [pid 678] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 675] <... futex resumed>) = 0 [pid 678] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 675] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... socket resumed>) = 6 [pid 675] <... futex resumed>) = 0 [pid 678] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 675] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 678] <... futex resumed>) = 0 [pid 675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 675] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 675] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 675] <... futex resumed>) = ? [pid 676] +++ killed by SIGBUS +++ [pid 678] +++ killed by SIGBUS +++ [pid 675] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=675, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./91/binderfs") = 0 umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./91/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./91") = 0 mkdir("./92", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 679 ./strace-static-x86_64: Process 679 attached [pid 679] set_robust_list(0x5555574f36a0, 24) = 0 [pid 679] chdir("./92") = 0 [pid 679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 679] setpgid(0, 0) = 0 [pid 679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 679] write(3, "1000", 4) = 4 [pid 679] close(3) = 0 [pid 679] symlink("/dev/binderfs", "./binderfs") = 0 [pid 679] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 679] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 679] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 679] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 679] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 679] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[680]}, 88) = 680 [pid 679] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 679] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 679] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 680 attached [pid 680] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 680] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 680] memfd_create("syzkaller", 0) = 3 [pid 680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 680] munmap(0x7f2081aae000, 138412032) = 0 [pid 680] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 31.504373][ T676] loop0: detected capacity change from 0 to 512 [ 31.512369][ T676] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.525923][ T676] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 680] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 680] close(3) = 0 [pid 680] mkdir("./file0", 0777) = 0 [pid 680] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 680] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 680] chdir("./file0") = 0 [pid 680] ioctl(4, LOOP_CLR_FD) = 0 [pid 680] close(4) = 0 [pid 680] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 679] <... futex resumed>) = 0 [pid 679] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 679] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... futex resumed>) = 1 [pid 680] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 680] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 679] <... futex resumed>) = 0 [pid 679] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 679] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... futex resumed>) = 1 [pid 680] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 680] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 679] <... futex resumed>) = 0 [pid 679] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 679] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 679] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 679] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 679] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[682]}, 88) = 682 [pid 679] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 679] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 679] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... futex resumed>) = 1 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 682 attached ) = 7 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 682] set_robust_list(0x7f2089ead9a0, 24 [pid 680] <... write resumed>) = 7 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 682] <... set_robust_list resumed>) = 0 [pid 682] rt_sigprocmask(SIG_SETMASK, [], [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 682] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 682] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 680] <... write resumed>) = 7 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 680] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 680] write(4, 0x20000180, 7 [pid 682] <... mmap resumed>) = 0x20000000 [pid 680] <... write resumed>) = 7 [pid 682] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] write(4, 0x20000180, 7) = 7 [pid 680] write(4, 0x20000180, 7) = 7 [pid 680] write(4, 0x20000180, 7 [pid 679] <... futex resumed>) = 0 [pid 679] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 679] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] <... write resumed>) = 7 [pid 680] write(4, 0x20000180, 7 [pid 682] <... futex resumed>) = 1 [pid 680] <... write resumed>) = 7 [pid 680] write(4, 0x20000180, 7) = 7 [pid 680] write(4, 0x20000180, 7) = 7 [pid 682] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 680] write(4, 0x20000180, 7) = 7 [pid 682] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] write(4, 0x20000180, 7) = 7 [pid 680] write(4, 0x20000180, 7 [pid 682] <... futex resumed>) = 1 [pid 679] <... futex resumed>) = 0 [pid 679] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] <... write resumed>) = 7 [pid 679] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 680] write(4, 0x20000180, 7) = 7 [pid 680] write(4, 0x20000180, 7) = 7 [pid 680] write(4, 0x20000180, 7) = 7 [pid 680] write(4, 0x20000180, 7) = 7 [pid 680] write(4, 0x20000180, 7) = 7 [pid 680] write(4, 0x20000180, 7) = 7 [pid 680] write(4, 0x20000180, 7 [pid 682] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 680] <... write resumed>) = 7 [pid 682] <... setsockopt resumed>) = 0 [pid 680] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 682] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 679] <... futex resumed>) = 0 [pid 682] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 679] exit_group(0 [pid 682] <... futex resumed>) = ? [pid 680] <... futex resumed>) = ? [pid 679] <... exit_group resumed>) = ? [pid 680] +++ exited with 0 +++ [pid 682] +++ exited with 0 +++ [pid 679] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=679, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./92/binderfs") = 0 umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./92/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./92/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./92") = 0 mkdir("./93", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 683 ./strace-static-x86_64: Process 683 attached [pid 683] set_robust_list(0x5555574f36a0, 24) = 0 [pid 683] chdir("./93") = 0 [pid 683] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 683] setpgid(0, 0) = 0 [pid 683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 683] write(3, "1000", 4) = 4 [pid 683] close(3) = 0 [pid 683] symlink("/dev/binderfs", "./binderfs") = 0 [pid 683] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 683] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 683] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 683] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 683] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 684 attached [pid 684] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 684] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 683] <... clone3 resumed> => {parent_tid=[684]}, 88) = 684 [pid 683] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 683] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 684] <... futex resumed>) = 0 [pid 684] memfd_create("syzkaller", 0 [pid 683] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 684] <... memfd_create resumed>) = 3 [pid 684] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 684] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 684] munmap(0x7f2081aae000, 138412032) = 0 [pid 684] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 31.576522][ T680] loop0: detected capacity change from 0 to 512 [ 31.584843][ T680] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.598410][ T680] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 684] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 684] close(3) = 0 [pid 684] mkdir("./file0", 0777) = 0 [pid 684] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 684] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 684] chdir("./file0") = 0 [pid 684] ioctl(4, LOOP_CLR_FD) = 0 [pid 684] close(4) = 0 [pid 684] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = 0 [pid 683] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 684] <... futex resumed>) = 1 [pid 684] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 684] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = 0 [pid 683] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] <... futex resumed>) = 1 [pid 683] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 684] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 684] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = 0 [pid 683] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 683] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 683] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 683] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[686]}, 88) = 686 [pid 683] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 683] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 684] <... futex resumed>) = 1 [pid 684] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 684] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 684] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 686 attached ) = 7 [pid 686] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 686] rt_sigprocmask(SIG_SETMASK, [], [pid 684] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 686] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 686] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 684] <... write resumed>) = 7 [pid 684] write(4, 0x20000180, 7 [pid 686] <... mmap resumed>) = 0x20000000 [pid 684] <... write resumed>) = 7 [pid 684] write(4, 0x20000180, 7 [pid 686] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... write resumed>) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7 [pid 686] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 683] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 684] <... write resumed>) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7 [pid 686] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 684] <... write resumed>) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 686] <... socket resumed>) = 6 [pid 684] write(4, 0x20000180, 7) = 7 [pid 686] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 683] <... futex resumed>) = 0 [pid 684] write(4, 0x20000180, 7 [pid 683] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 684] <... write resumed>) = 7 [pid 684] write(4, 0x20000180, 7 [pid 686] <... futex resumed>) = 1 [pid 684] <... write resumed>) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 686] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 684] write(4, 0x20000180, 7 [pid 686] <... setsockopt resumed>) = 0 [pid 684] <... write resumed>) = 7 [pid 684] write(4, 0x20000180, 7 [pid 686] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... write resumed>) = 7 [pid 683] <... futex resumed>) = 0 [pid 686] <... futex resumed>) = 1 [pid 684] write(4, 0x20000180, 7 [pid 686] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 684] <... write resumed>) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] write(4, 0x20000180, 7) = 7 [pid 684] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 683] exit_group(0 [pid 686] <... futex resumed>) = ? [pid 683] <... exit_group resumed>) = ? [pid 686] +++ exited with 0 +++ [pid 684] <... futex resumed>) = ? [pid 684] +++ exited with 0 +++ [pid 683] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=683, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./93/binderfs") = 0 umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./93/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./93") = 0 mkdir("./94", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 687 ./strace-static-x86_64: Process 687 attached [pid 687] set_robust_list(0x5555574f36a0, 24) = 0 [pid 687] chdir("./94") = 0 [pid 687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 687] setpgid(0, 0) = 0 [pid 687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 687] write(3, "1000", 4) = 4 [pid 687] close(3) = 0 [pid 687] symlink("/dev/binderfs", "./binderfs") = 0 [pid 687] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 687] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 687] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 687] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 687] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 688 attached => {parent_tid=[688]}, 88) = 688 [pid 688] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 688] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 688] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 687] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 688] <... futex resumed>) = 0 [pid 688] memfd_create("syzkaller", 0 [pid 687] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 688] <... memfd_create resumed>) = 3 [pid 688] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 688] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 688] munmap(0x7f2081aae000, 138412032) = 0 [pid 688] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 31.645745][ T684] loop0: detected capacity change from 0 to 512 [ 31.654207][ T684] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.667764][ T684] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 688] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 688] close(3) = 0 [pid 688] mkdir("./file0", 0777) = 0 [pid 688] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 688] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 688] chdir("./file0") = 0 [pid 688] ioctl(4, LOOP_CLR_FD) = 0 [pid 688] close(4) = 0 [pid 688] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 687] <... futex resumed>) = 0 [pid 687] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 688] <... futex resumed>) = 1 [pid 688] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 688] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 687] <... futex resumed>) = 0 [pid 687] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 688] <... futex resumed>) = 1 [pid 688] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 688] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 687] <... futex resumed>) = 0 [pid 687] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 687] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 688] <... futex resumed>) = 1 [pid 687] rt_sigprocmask(SIG_BLOCK, ~[], [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 687] <... rt_sigprocmask resumed>[], 8) = 0 [pid 687] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 687] <... clone3 resumed> => {parent_tid=[690]}, 88) = 690 [pid 687] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 687] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... write resumed>) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 690 attached ) = 7 [pid 687] <... futex resumed>) = 0 [pid 687] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] set_robust_list(0x7f2089ead9a0, 24 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 690] <... set_robust_list resumed>) = 0 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 690] rt_sigprocmask(SIG_SETMASK, [], [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 688] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 688] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 690] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 690] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] <... futex resumed>) = 0 [pid 687] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... futex resumed>) = 0 [pid 687] <... futex resumed>) = 1 [pid 688] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 687] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 688] <... socket resumed>) = 6 [pid 688] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 688] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] <... futex resumed>) = 0 [pid 688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 687] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 688] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 688] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 687] <... futex resumed>) = 0 [pid 688] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] exit_group(0) = ? [pid 690] <... futex resumed>) = ? [pid 688] <... futex resumed>) = ? [pid 688] +++ exited with 0 +++ [pid 690] +++ exited with 0 +++ [pid 687] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=687, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./94/binderfs") = 0 umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./94/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./94/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./94") = 0 mkdir("./95", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 691 ./strace-static-x86_64: Process 691 attached [pid 691] set_robust_list(0x5555574f36a0, 24) = 0 [pid 691] chdir("./95") = 0 [pid 691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 691] setpgid(0, 0) = 0 [pid 691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 691] write(3, "1000", 4) = 4 [pid 691] close(3) = 0 [pid 691] symlink("/dev/binderfs", "./binderfs") = 0 [pid 691] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 691] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 691] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 691] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 691] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[692]}, 88) = 692 [pid 691] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 691] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 691] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 692 attached [pid 692] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 692] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 692] memfd_create("syzkaller", 0) = 3 [pid 692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 692] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 692] munmap(0x7f2081aae000, 138412032) = 0 [pid 692] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 31.714946][ T688] loop0: detected capacity change from 0 to 512 [ 31.723099][ T688] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.736419][ T688] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 692] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 692] close(3) = 0 [pid 692] mkdir("./file0", 0777) = 0 [pid 692] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 692] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 692] chdir("./file0") = 0 [pid 692] ioctl(4, LOOP_CLR_FD) = 0 [pid 692] close(4) = 0 [pid 692] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] <... futex resumed>) = 0 [pid 691] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 691] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... futex resumed>) = 1 [pid 692] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 692] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] <... futex resumed>) = 0 [pid 691] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 691] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... futex resumed>) = 1 [pid 692] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 692] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] <... futex resumed>) = 0 [pid 691] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 691] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 691] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 691] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[694]}, 88) = 694 [pid 691] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 691] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 691] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... futex resumed>) = 1 [pid 692] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 694 attached [pid 692] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 694] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 694] rt_sigprocmask(SIG_SETMASK, [], [pid 692] <... write resumed>) = 7 [pid 694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 692] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 694] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 692] <... write resumed>) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7 [pid 694] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] <... write resumed>) = 7 [pid 691] <... futex resumed>) = 0 [pid 694] <... futex resumed>) = 1 [pid 691] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 691] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] write(4, 0x20000180, 7 [pid 694] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 692] <... write resumed>) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 694] <... socket resumed>) = 6 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7 [pid 694] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] <... write resumed>) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 692] write(4, 0x20000180, 7) = 7 [pid 691] <... futex resumed>) = 0 [pid 692] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 692] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] <... futex resumed>) = 1 [pid 694] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 691] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 691] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... futex resumed>) = 0 [pid 692] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 692] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 691] <... futex resumed>) = 0 [pid 692] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 691] exit_group(0) = ? [pid 694] <... futex resumed>) = ? [pid 694] +++ exited with 0 +++ [pid 692] <... futex resumed>) = ? [pid 692] +++ exited with 0 +++ [pid 691] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=691, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./95/binderfs") = 0 umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./95/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./95/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./95") = 0 mkdir("./96", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 695 ./strace-static-x86_64: Process 695 attached [pid 695] set_robust_list(0x5555574f36a0, 24) = 0 [pid 695] chdir("./96") = 0 [pid 695] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 695] setpgid(0, 0) = 0 [pid 695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 695] write(3, "1000", 4) = 4 [pid 695] close(3) = 0 [pid 695] symlink("/dev/binderfs", "./binderfs") = 0 [pid 695] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 695] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 695] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 695] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 695] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 695] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 695] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 696 attached => {parent_tid=[696]}, 88) = 696 [pid 696] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 696] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 696] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 695] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 695] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 696] memfd_create("syzkaller", 0) = 3 [pid 696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 695] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 696] munmap(0x7f2081aae000, 138412032) = 0 [pid 696] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 31.776979][ T692] loop0: detected capacity change from 0 to 512 [ 31.784468][ T692] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.797702][ T692] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 696] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 696] close(3) = 0 [pid 696] mkdir("./file0", 0777) = 0 [pid 696] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 696] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 696] chdir("./file0") = 0 [pid 696] ioctl(4, LOOP_CLR_FD) = 0 [pid 696] close(4) = 0 [pid 696] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... futex resumed>) = 0 [pid 695] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 695] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 696] <... futex resumed>) = 1 [pid 696] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 696] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... futex resumed>) = 0 [pid 695] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 695] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 696] <... futex resumed>) = 1 [pid 696] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 696] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... futex resumed>) = 0 [pid 695] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 695] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 695] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 695] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 695] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 695] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 698 attached [pid 698] set_robust_list(0x7f2089ead9a0, 24 [pid 695] <... clone3 resumed> => {parent_tid=[698]}, 88) = 698 [pid 698] <... set_robust_list resumed>) = 0 [pid 695] rt_sigprocmask(SIG_SETMASK, [], [pid 698] rt_sigprocmask(SIG_SETMASK, [], [pid 695] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 698] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 695] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 695] <... futex resumed>) = 0 [pid 695] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 698] <... mmap resumed>) = 0x20000000 [pid 696] <... futex resumed>) = 1 [pid 698] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 695] <... futex resumed>) = 0 [pid 698] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 695] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 695] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 696] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 695] <... futex resumed>) = ? [pid 698] <... socket resumed>) = ? [pid 698] +++ killed by SIGBUS +++ [pid 696] +++ killed by SIGBUS +++ [pid 695] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=695, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./96/binderfs") = 0 umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./96/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./96/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./96") = 0 mkdir("./97", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 699 ./strace-static-x86_64: Process 699 attached [pid 699] set_robust_list(0x5555574f36a0, 24) = 0 [pid 699] chdir("./97") = 0 [pid 699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 699] setpgid(0, 0) = 0 [pid 699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 699] write(3, "1000", 4) = 4 [pid 699] close(3) = 0 [pid 699] symlink("/dev/binderfs", "./binderfs") = 0 [pid 699] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 699] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 699] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 699] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 699] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[700]}, 88) = 700 ./strace-static-x86_64: Process 700 attached [pid 700] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 699] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 699] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 700] memfd_create("syzkaller", 0) = 3 [pid 700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 700] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 700] munmap(0x7f2081aae000, 138412032) = 0 [pid 700] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 31.839035][ T696] loop0: detected capacity change from 0 to 512 [ 31.847605][ T696] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.860766][ T696] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 700] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 700] close(3) = 0 [pid 700] mkdir("./file0", 0777) = 0 [pid 700] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 700] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 700] chdir("./file0") = 0 [pid 700] ioctl(4, LOOP_CLR_FD) = 0 [pid 700] close(4) = 0 [pid 700] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = 0 [pid 699] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 700] <... futex resumed>) = 1 [pid 700] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 700] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = 0 [pid 699] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 700] <... futex resumed>) = 1 [pid 700] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 700] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = 0 [pid 699] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 699] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 699] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 699] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 702 attached [pid 702] set_robust_list(0x7f2089ead9a0, 24 [pid 699] <... clone3 resumed> => {parent_tid=[702]}, 88) = 702 [pid 702] <... set_robust_list resumed>) = 0 [pid 699] rt_sigprocmask(SIG_SETMASK, [], [pid 702] rt_sigprocmask(SIG_SETMASK, [], [pid 699] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 702] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 699] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 699] <... futex resumed>) = 0 [pid 699] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... mmap resumed>) = 0x20000000 [pid 700] <... futex resumed>) = 1 [pid 702] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 699] <... futex resumed>) = 0 [pid 702] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 699] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 700] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 699] <... futex resumed>) = ? [pid 702] <... socket resumed>) = ? [pid 702] +++ killed by SIGBUS +++ [pid 700] +++ killed by SIGBUS +++ [pid 699] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=699, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./97/binderfs") = 0 umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./97/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./97/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./97") = 0 mkdir("./98", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 703 attached , child_tidptr=0x5555574f3690) = 703 [pid 703] set_robust_list(0x5555574f36a0, 24) = 0 [pid 703] chdir("./98") = 0 [pid 703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 703] setpgid(0, 0) = 0 [pid 703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 703] write(3, "1000", 4) = 4 [pid 703] close(3) = 0 [pid 703] symlink("/dev/binderfs", "./binderfs") = 0 [pid 703] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 703] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 703] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 703] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 703] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 703] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 704 attached => {parent_tid=[704]}, 88) = 704 [pid 704] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 704] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 704] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 703] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 704] <... futex resumed>) = 0 [pid 703] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 704] memfd_create("syzkaller", 0) = 3 [pid 704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 704] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 704] munmap(0x7f2081aae000, 138412032) = 0 [pid 704] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 31.897831][ T700] loop0: detected capacity change from 0 to 512 [ 31.906602][ T700] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.919925][ T700] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 704] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 704] close(3) = 0 [pid 704] mkdir("./file0", 0777) = 0 [pid 704] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 704] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 704] chdir("./file0") = 0 [pid 704] ioctl(4, LOOP_CLR_FD) = 0 [pid 704] close(4) = 0 [pid 704] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... futex resumed>) = 0 [pid 703] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 703] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 704] <... futex resumed>) = 1 [pid 704] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 704] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... futex resumed>) = 0 [pid 703] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 703] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 704] <... futex resumed>) = 1 [pid 704] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 704] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... futex resumed>) = 0 [pid 703] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 703] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 703] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 703] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 703] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[706]}, 88) = 706 [pid 703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 703] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 703] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 704] <... futex resumed>) = 1 [pid 704] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 704] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 704] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 704] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 704] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 704] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 704] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 704] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 704] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 704] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 704] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 706 attached ) = 7 [pid 706] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 706] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 706] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 706] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 706] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 703] <... futex resumed>) = 0 [pid 703] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 703] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 706] <... futex resumed>) = 0 [pid 706] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 706] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... futex resumed>) = 0 [pid 703] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 703] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 706] <... futex resumed>) = 1 [pid 704] write(4, 0x20000180, 7) = 7 [pid 706] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] write(4, 0x20000180, 7) = 7 [pid 704] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 704] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 706] <... setsockopt resumed>) = 0 [pid 706] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 703] <... futex resumed>) = 0 [pid 703] exit_group(0) = ? [pid 704] <... futex resumed>) = ? [pid 704] +++ exited with 0 +++ [pid 706] <... futex resumed>) = ? [pid 706] +++ exited with 0 +++ [pid 703] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=703, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./98/binderfs") = 0 umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./98/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./98") = 0 mkdir("./99", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 707 ./strace-static-x86_64: Process 707 attached [pid 707] set_robust_list(0x5555574f36a0, 24) = 0 [pid 707] chdir("./99") = 0 [pid 707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 707] setpgid(0, 0) = 0 [pid 707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 707] write(3, "1000", 4) = 4 [pid 707] close(3) = 0 [pid 707] symlink("/dev/binderfs", "./binderfs") = 0 [pid 707] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 707] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 707] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 707] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 707] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 707] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 708 attached => {parent_tid=[708]}, 88) = 708 [pid 708] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 708] rt_sigprocmask(SIG_SETMASK, [], [pid 707] rt_sigprocmask(SIG_SETMASK, [], [pid 708] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 708] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 707] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 708] <... futex resumed>) = 0 [pid 708] memfd_create("syzkaller", 0) = 3 [pid 707] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 708] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 708] munmap(0x7f2081aae000, 138412032) = 0 [pid 708] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 31.956661][ T704] loop0: detected capacity change from 0 to 512 [ 31.965182][ T704] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 31.978559][ T704] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 708] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 708] close(3) = 0 [pid 708] mkdir("./file0", 0777) = 0 [pid 708] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 708] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 708] chdir("./file0") = 0 [pid 708] ioctl(4, LOOP_CLR_FD) = 0 [pid 708] close(4) = 0 [pid 708] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 707] <... futex resumed>) = 0 [pid 707] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 707] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 708] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 708] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 707] <... futex resumed>) = 0 [pid 707] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 707] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 708] <... futex resumed>) = 1 [pid 708] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 708] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 707] <... futex resumed>) = 0 [pid 707] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 707] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 708] <... futex resumed>) = 1 [pid 707] <... futex resumed>) = 0 [pid 708] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 707] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 708] <... write resumed>) = 7 [pid 708] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 707] <... mprotect resumed>) = 0 [pid 708] <... write resumed>) = 7 [pid 708] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 708] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 708] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 707] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 707] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 708] <... write resumed>) = 7 [pid 708] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 707] <... clone3 resumed> => {parent_tid=[710]}, 88) = 710 [pid 707] rt_sigprocmask(SIG_SETMASK, [], [pid 708] <... write resumed>) = 7 [pid 707] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 708] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 707] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 710 attached [pid 708] <... write resumed>) = 7 [pid 708] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 707] <... futex resumed>) = 0 [pid 708] <... write resumed>) = 7 [pid 708] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 707] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] set_robust_list(0x7f2089ead9a0, 24 [pid 708] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 710] <... set_robust_list resumed>) = 0 [pid 710] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 710] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 708] <... write resumed>) = 7 [pid 710] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 707] <... futex resumed>) = 0 [pid 707] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 707] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... futex resumed>) = 1 [pid 710] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 708] write(4, 0x20000180, 7 [pid 710] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 707] <... futex resumed>) = 0 [pid 707] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 707] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... futex resumed>) = 1 [pid 708] <... write resumed>) = 7 [pid 708] write(4, 0x20000180, 7 [pid 710] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 708] <... write resumed>) = 7 [pid 710] <... setsockopt resumed>) = 0 [pid 708] write(4, 0x20000180, 7) = 7 [pid 710] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 707] <... futex resumed>) = 0 [pid 710] <... futex resumed>) = 1 [pid 708] write(4, 0x20000180, 7 [pid 710] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 708] <... write resumed>) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] write(4, 0x20000180, 7) = 7 [pid 708] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 707] exit_group(0) = ? [pid 710] <... futex resumed>) = ? [pid 708] <... futex resumed>) = ? [pid 710] +++ exited with 0 +++ [pid 708] +++ exited with 0 +++ [pid 707] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=707, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./99/binderfs") = 0 umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./99/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./99/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./99") = 0 mkdir("./100", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 711 ./strace-static-x86_64: Process 711 attached [pid 711] set_robust_list(0x5555574f36a0, 24) = 0 [pid 711] chdir("./100") = 0 [pid 711] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 711] setpgid(0, 0) = 0 [pid 711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 711] write(3, "1000", 4) = 4 [pid 711] close(3) = 0 [pid 711] symlink("/dev/binderfs", "./binderfs") = 0 [pid 711] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 711] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 711] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 711] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 711] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 711] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 711] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 712 attached => {parent_tid=[712]}, 88) = 712 [pid 711] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 711] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 711] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 712] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 712] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 712] memfd_create("syzkaller", 0) = 3 [pid 712] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 712] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 712] munmap(0x7f2081aae000, 138412032) = 0 [pid 712] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 32.018964][ T708] loop0: detected capacity change from 0 to 512 [ 32.027404][ T708] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 32.040484][ T708] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 712] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 712] close(3) = 0 [pid 712] mkdir("./file0", 0777) = 0 [pid 712] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 712] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 712] chdir("./file0") = 0 [pid 712] ioctl(4, LOOP_CLR_FD) = 0 [pid 712] close(4) = 0 [pid 712] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 711] <... futex resumed>) = 0 [pid 711] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 711] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 712] <... futex resumed>) = 1 [pid 712] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 712] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 711] <... futex resumed>) = 0 [pid 711] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 712] <... futex resumed>) = 1 [pid 711] <... futex resumed>) = 0 [pid 712] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 711] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 712] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 712] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 711] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 711] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 711] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 711] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 711] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 711] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 711] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[714]}, 88) = 714 ./strace-static-x86_64: Process 714 attached [pid 712] <... futex resumed>) = 0 [pid 711] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 711] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 711] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 714] set_robust_list(0x7f2089ead9a0, 24 [pid 712] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 714] <... set_robust_list resumed>) = 0 [pid 714] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 714] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 714] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 712] <... write resumed>) = 7 [pid 711] <... futex resumed>) = 0 [pid 711] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 711] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 714] <... futex resumed>) = 1 [pid 714] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 714] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 711] <... futex resumed>) = 0 [pid 711] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 711] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 712] write(4, 0x20000180, 7 [pid 714] <... futex resumed>) = 1 [pid 714] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 712] <... write resumed>) = 7 [pid 714] <... setsockopt resumed>) = 0 [pid 712] write(4, 0x20000180, 7 [pid 714] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 711] <... futex resumed>) = 0 [pid 714] <... futex resumed>) = 1 [pid 712] <... write resumed>) = 7 [pid 714] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] write(4, 0x20000180, 7) = 7 [pid 712] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 712] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 711] exit_group(0 [pid 714] <... futex resumed>) = ? [pid 712] <... futex resumed>) = ? [pid 711] <... exit_group resumed>) = ? [pid 714] +++ exited with 0 +++ [pid 712] +++ exited with 0 +++ [pid 711] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=711, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./100/binderfs") = 0 umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./100/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./100/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./100") = 0 mkdir("./101", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 715 ./strace-static-x86_64: Process 715 attached [pid 715] set_robust_list(0x5555574f36a0, 24) = 0 [pid 715] chdir("./101") = 0 [pid 715] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 715] setpgid(0, 0) = 0 [pid 715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 715] write(3, "1000", 4) = 4 [pid 715] close(3) = 0 [pid 715] symlink("/dev/binderfs", "./binderfs") = 0 [pid 715] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 715] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 715] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 715] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 715] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 716 attached [pid 716] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 716] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 716] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 715] <... clone3 resumed> => {parent_tid=[716]}, 88) = 716 [pid 715] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 715] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 716] <... futex resumed>) = 0 [pid 715] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 716] memfd_create("syzkaller", 0) = 3 [pid 716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 716] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 716] munmap(0x7f2081aae000, 138412032) = 0 [pid 716] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 32.090202][ T712] loop0: detected capacity change from 0 to 512 [ 32.098557][ T712] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 32.112374][ T712] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 716] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 716] close(3) = 0 [pid 716] mkdir("./file0", 0777) = 0 [pid 716] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 716] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 716] chdir("./file0") = 0 [pid 716] ioctl(4, LOOP_CLR_FD) = 0 [pid 716] close(4) = 0 [pid 716] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 715] <... futex resumed>) = 0 [pid 715] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 715] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 716] <... futex resumed>) = 1 [pid 716] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 716] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 715] <... futex resumed>) = 0 [pid 715] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 715] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 716] <... futex resumed>) = 1 [pid 716] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 716] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 715] <... futex resumed>) = 0 [pid 715] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 715] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 715] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 715] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 718 attached [pid 718] set_robust_list(0x7f2089ead9a0, 24 [pid 715] <... clone3 resumed> => {parent_tid=[718]}, 88) = 718 [pid 718] <... set_robust_list resumed>) = 0 [pid 715] rt_sigprocmask(SIG_SETMASK, [], [pid 718] rt_sigprocmask(SIG_SETMASK, [], [pid 715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 718] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 718] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 715] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 715] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 718] <... mmap resumed>) = 0x20000000 [pid 716] <... futex resumed>) = 1 [pid 718] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 715] <... futex resumed>) = 0 [pid 718] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 715] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] <... socket resumed>) = 6 [pid 715] <... futex resumed>) = 0 [pid 716] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 715] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = ? [pid 718] +++ killed by SIGBUS +++ [pid 716] +++ killed by SIGBUS +++ [pid 715] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=715, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./101/binderfs") = 0 umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./101/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./101/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./101") = 0 mkdir("./102", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 719 attached , child_tidptr=0x5555574f3690) = 719 [pid 719] set_robust_list(0x5555574f36a0, 24) = 0 [pid 719] chdir("./102") = 0 [pid 719] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 719] setpgid(0, 0) = 0 [pid 719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 719] write(3, "1000", 4) = 4 [pid 719] close(3) = 0 [pid 719] symlink("/dev/binderfs", "./binderfs") = 0 [pid 719] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 719] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 719] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 719] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 719] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[720]}, 88) = 720 ./strace-static-x86_64: Process 720 attached [pid 720] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 720] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 720] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 719] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 719] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 720] <... futex resumed>) = 0 [pid 720] memfd_create("syzkaller", 0) = 3 [pid 720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 719] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 720] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 720] munmap(0x7f2081aae000, 138412032) = 0 [ 32.160326][ T716] loop0: detected capacity change from 0 to 512 [ 32.169105][ T716] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 32.182449][ T716] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 720] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 720] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 720] close(3) = 0 [pid 720] mkdir("./file0", 0777) = 0 [pid 720] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 720] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 720] chdir("./file0") = 0 [pid 720] ioctl(4, LOOP_CLR_FD) = 0 [pid 720] close(4) = 0 [pid 720] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 720] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 719] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 0 [pid 720] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 720] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [pid 720] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 720] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 719] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 719] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 719] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[722]}, 88) = 722 [pid 719] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 719] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... futex resumed>) = 1 [pid 720] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 720] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 720] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 720] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 720] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 720] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 720] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 722 attached [pid 720] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 720] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 720] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 722] set_robust_list(0x7f2089ead9a0, 24 [pid 720] <... write resumed>) = 7 [pid 722] <... set_robust_list resumed>) = 0 [pid 720] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 722] rt_sigprocmask(SIG_SETMASK, [], [pid 720] <... write resumed>) = 7 [pid 722] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 722] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 720] write(4, 0x20000180, 7 [pid 722] <... mmap resumed>) = 0x20000000 [pid 720] <... write resumed>) = 7 [pid 722] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 720] write(4, 0x20000180, 7 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... write resumed>) = 7 [pid 722] <... futex resumed>) = 1 [pid 722] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 720] write(4, 0x20000180, 7) = 7 [pid 722] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 720] write(4, 0x20000180, 7 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 720] <... write resumed>) = 7 [pid 722] <... futex resumed>) = 1 [pid 720] write(4, 0x20000180, 7) = 7 [pid 722] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] write(4, 0x20000180, 7 [pid 722] <... setsockopt resumed>) = 0 [pid 720] <... write resumed>) = 7 [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] write(4, 0x20000180, 7 [pid 722] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 719] <... futex resumed>) = 0 [pid 720] <... write resumed>) = 7 [pid 722] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] write(4, 0x20000180, 7) = 7 [pid 720] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 720] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 719] exit_group(0 [pid 722] <... futex resumed>) = ? [pid 719] <... exit_group resumed>) = ? [pid 722] +++ exited with 0 +++ [pid 720] <... futex resumed>) = ? [pid 720] +++ exited with 0 +++ [pid 719] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=719, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./102/binderfs") = 0 umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./102/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./102/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./102") = 0 mkdir("./103", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 724 ./strace-static-x86_64: Process 724 attached [pid 724] set_robust_list(0x5555574f36a0, 24) = 0 [pid 724] chdir("./103") = 0 [pid 724] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 724] setpgid(0, 0) = 0 [pid 724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 724] write(3, "1000", 4) = 4 [pid 724] close(3) = 0 [pid 724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 724] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 724] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 724] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 724] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 724] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 725 attached => {parent_tid=[725]}, 88) = 725 [pid 725] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 725] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 724] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 725] <... futex resumed>) = 0 [pid 725] memfd_create("syzkaller", 0 [pid 724] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 725] <... memfd_create resumed>) = 3 [pid 725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 725] munmap(0x7f2081aae000, 138412032) = 0 [pid 725] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 32.227747][ T720] loop0: detected capacity change from 0 to 512 [ 32.235337][ T720] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 32.248755][ T720] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 725] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 725] close(3) = 0 [pid 725] mkdir("./file0", 0777) = 0 [pid 725] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 725] chdir("./file0") = 0 [pid 725] ioctl(4, LOOP_CLR_FD) = 0 [pid 725] close(4) = 0 [pid 725] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 725] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] <... futex resumed>) = 0 [pid 724] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 724] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] <... futex resumed>) = 0 [pid 725] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 725] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] <... futex resumed>) = 0 [pid 724] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 724] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] <... futex resumed>) = 1 [pid 725] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 725] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 724] <... futex resumed>) = 0 [pid 724] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 724] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 724] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 724] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[727]}, 88) = 727 [pid 724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 724] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 724] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 727 attached [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 727] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 725] <... write resumed>) = 7 [pid 727] rt_sigprocmask(SIG_SETMASK, [], [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 727] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 725] <... write resumed>) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 727] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 725] write(4, 0x20000180, 7) = 7 [pid 725] write(4, 0x20000180, 7) = 7 [pid 725] write(4, 0x20000180, 7) = 7 [pid 725] write(4, 0x20000180, 7) = 7 [pid 725] write(4, 0x20000180, 7) = 7 [pid 725] write(4, 0x20000180, 7) = 7 [pid 725] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 727] <... mmap resumed>) = 0x20000000 [pid 727] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] <... futex resumed>) = 0 [pid 724] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 724] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] <... futex resumed>) = 0 [pid 725] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 727] <... futex resumed>) = 1 [pid 727] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] <... futex resumed>) = 0 [pid 724] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 724] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] <... futex resumed>) = 1 [pid 725] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 725] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] <... futex resumed>) = 0 [pid 724] exit_group(0) = ? [pid 727] <... futex resumed>) = ? [pid 727] +++ exited with 0 +++ [pid 725] <... futex resumed>) = ? [pid 725] +++ exited with 0 +++ [pid 724] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=724, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./103/binderfs") = 0 umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./103/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./103/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./103") = 0 mkdir("./104", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 728 ./strace-static-x86_64: Process 728 attached [pid 728] set_robust_list(0x5555574f36a0, 24) = 0 [pid 728] chdir("./104") = 0 [pid 728] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 728] setpgid(0, 0) = 0 [pid 728] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 728] write(3, "1000", 4) = 4 [pid 728] close(3) = 0 [pid 728] symlink("/dev/binderfs", "./binderfs") = 0 [pid 728] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 728] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 728] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 728] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 728] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 728] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 728] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 729 attached [pid 729] set_robust_list(0x7f2089ece9a0, 24 [pid 728] <... clone3 resumed> => {parent_tid=[729]}, 88) = 729 [pid 729] <... set_robust_list resumed>) = 0 [pid 728] rt_sigprocmask(SIG_SETMASK, [], [pid 729] rt_sigprocmask(SIG_SETMASK, [], [pid 728] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 728] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] memfd_create("syzkaller", 0 [pid 728] <... futex resumed>) = 0 [pid 728] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 729] <... memfd_create resumed>) = 3 [pid 729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 729] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 729] munmap(0x7f2081aae000, 138412032) = 0 [pid 729] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 32.295435][ T725] loop0: detected capacity change from 0 to 512 [ 32.303878][ T725] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 32.317212][ T725] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 729] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 729] close(3) = 0 [pid 729] mkdir("./file0", 0777) = 0 [pid 729] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 729] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 729] chdir("./file0") = 0 [pid 729] ioctl(4, LOOP_CLR_FD) = 0 [pid 729] close(4) = 0 [pid 729] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... futex resumed>) = 0 [pid 728] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 728] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 729] <... futex resumed>) = 1 [pid 729] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 729] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... futex resumed>) = 0 [pid 728] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 728] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 729] <... futex resumed>) = 1 [pid 729] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 729] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 729] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 728] <... futex resumed>) = 0 [pid 728] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 728] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 728] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 728] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 728] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 728] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[731]}, 88) = 731 [pid 728] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 728] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 728] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 729] <... futex resumed>) = 0 [pid 729] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 729] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 729] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 729] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 731 attached ) = 7 [pid 731] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 731] rt_sigprocmask(SIG_SETMASK, [], [pid 729] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 731] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 729] <... write resumed>) = 7 [pid 731] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 729] write(4, 0x20000180, 7 [pid 731] <... mmap resumed>) = 0x20000000 [pid 729] <... write resumed>) = 7 [pid 731] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] write(4, 0x20000180, 7 [pid 731] <... futex resumed>) = 1 [pid 728] <... futex resumed>) = 0 [pid 729] <... write resumed>) = 7 [pid 728] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 728] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 731] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 729] write(4, 0x20000180, 7 [pid 731] <... socket resumed>) = 6 [pid 729] <... write resumed>) = 7 [pid 731] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] write(4, 0x20000180, 7 [pid 731] <... futex resumed>) = 1 [pid 731] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 728] <... futex resumed>) = 0 [pid 728] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 731] <... futex resumed>) = 0 [pid 728] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 729] <... write resumed>) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 731] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 729] write(4, 0x20000180, 7 [pid 731] <... setsockopt resumed>) = 0 [pid 731] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... write resumed>) = 7 [pid 731] <... futex resumed>) = 1 [pid 729] write(4, 0x20000180, 7 [pid 728] <... futex resumed>) = 0 [pid 731] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 729] <... write resumed>) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] write(4, 0x20000180, 7) = 7 [pid 729] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 728] exit_group(0 [pid 729] <... futex resumed>) = ? [pid 731] <... futex resumed>) = ? [pid 728] <... exit_group resumed>) = ? [pid 729] +++ exited with 0 +++ [pid 731] +++ exited with 0 +++ [pid 728] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=728, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./104/binderfs") = 0 umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./104/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./104/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./104") = 0 mkdir("./105", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 732 ./strace-static-x86_64: Process 732 attached [pid 732] set_robust_list(0x5555574f36a0, 24) = 0 [pid 732] chdir("./105") = 0 [pid 732] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 732] setpgid(0, 0) = 0 [pid 732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 732] write(3, "1000", 4) = 4 [pid 732] close(3) = 0 [pid 732] symlink("/dev/binderfs", "./binderfs") = 0 [pid 732] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 732] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 732] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 732] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 733 attached [pid 733] set_robust_list(0x7f2089ece9a0, 24 [pid 732] <... clone3 resumed> => {parent_tid=[733]}, 88) = 733 [pid 733] <... set_robust_list resumed>) = 0 [pid 732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 733] rt_sigprocmask(SIG_SETMASK, [], [pid 732] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 733] memfd_create("syzkaller", 0) = 3 [pid 733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 733] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 733] munmap(0x7f2081aae000, 138412032) = 0 [pid 733] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 32.355226][ T729] loop0: detected capacity change from 0 to 512 [ 32.363531][ T729] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 32.376820][ T729] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 733] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 733] close(3) = 0 [pid 733] mkdir("./file0", 0777) = 0 [pid 733] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 733] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 733] chdir("./file0") = 0 [pid 733] ioctl(4, LOOP_CLR_FD) = 0 [pid 733] close(4) = 0 [pid 733] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 733] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 733] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 732] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 732] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[736]}, 88) = 736 [pid 732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 732] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 733] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 733] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 736 attached [pid 736] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 736] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 736] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 736] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 0 [pid 733] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 733] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 736] <... futex resumed>) = 1 [pid 733] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 736] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 733] <... setsockopt resumed>) = 0 [pid 733] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 733] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 732] <... futex resumed>) = 0 [pid 732] exit_group(0) = ? [pid 733] <... futex resumed>) = ? [pid 733] +++ exited with 0 +++ [pid 736] <... futex resumed>) = ? [pid 736] +++ exited with 0 +++ [pid 732] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=732, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 32.428154][ T733] loop0: detected capacity change from 0 to 512 [ 32.436765][ T733] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 32.449904][ T733] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 32.459790][ T733] EXT4-fs mount: 147 callbacks suppressed [ 32.459800][ T733] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. newfstatat(AT_FDCWD, "./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./105/binderfs") = 0 umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./105/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./105/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./105") = 0 mkdir("./106", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 737 ./strace-static-x86_64: Process 737 attached [pid 737] set_robust_list(0x5555574f36a0, 24) = 0 [pid 737] chdir("./106") = 0 [pid 737] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 737] setpgid(0, 0) = 0 [pid 737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 737] write(3, "1000", 4) = 4 [pid 737] close(3) = 0 [pid 737] symlink("/dev/binderfs", "./binderfs") = 0 [pid 737] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 737] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 737] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 737] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 737] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[738]}, 88) = 738 ./strace-static-x86_64: Process 738 attached [pid 738] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 738] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 737] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 737] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 738] memfd_create("syzkaller", 0) = 3 [pid 738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 738] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 738] munmap(0x7f2081aae000, 138412032) = 0 [pid 738] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 738] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 738] close(3) = 0 [pid 738] mkdir("./file0", 0777) = 0 [ 32.488403][ T298] EXT4-fs (loop0): unmounting filesystem. [ 32.513873][ T738] loop0: detected capacity change from 0 to 512 [ 32.521786][ T738] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 738] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 738] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 738] chdir("./file0") = 0 [pid 738] ioctl(4, LOOP_CLR_FD) = 0 [pid 738] close(4) = 0 [pid 738] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 1 [pid 738] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 738] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 1 [pid 738] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 738] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 737] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 737] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 737] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[740]}, 88) = 740 [pid 737] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 737] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 1 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 738] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 738] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 740 attached [pid 740] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 740] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 740] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 740] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 737] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 0 [pid 738] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 738] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 738] <... futex resumed>) = 1 [pid 738] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 738] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 737] exit_group(0) = ? [pid 738] <... futex resumed>) = ? [pid 740] <... futex resumed>) = ? [pid 738] +++ exited with 0 +++ [pid 740] +++ exited with 0 +++ [pid 737] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=737, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./106/binderfs") = 0 umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./106/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./106") = 0 mkdir("./107", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 741 ./strace-static-x86_64: Process 741 attached [pid 741] set_robust_list(0x5555574f36a0, 24) = 0 [pid 741] chdir("./107") = 0 [pid 741] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 741] setpgid(0, 0) = 0 [pid 741] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 741] write(3, "1000", 4) = 4 [pid 741] close(3) = 0 [pid 741] symlink("/dev/binderfs", "./binderfs") = 0 [pid 741] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 741] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 741] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 741] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 741] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 741] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 742 attached => {parent_tid=[742]}, 88) = 742 [pid 742] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 742] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 742] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 741] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 741] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] <... futex resumed>) = 0 [pid 742] memfd_create("syzkaller", 0 [pid 741] <... futex resumed>) = 1 [pid 741] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 742] <... memfd_create resumed>) = 3 [pid 742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 742] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 742] munmap(0x7f2081aae000, 138412032) = 0 [pid 742] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 32.535251][ T738] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 32.544944][ T738] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.566365][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 742] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 742] close(3) = 0 [pid 742] mkdir("./file0", 0777) = 0 [pid 742] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 742] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 742] chdir("./file0") = 0 [pid 742] ioctl(4, LOOP_CLR_FD) = 0 [pid 742] close(4) = 0 [pid 742] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 1 [pid 742] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 742] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 742] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 741] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 0 [pid 742] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 742] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 741] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 741] rt_sigprocmask(SIG_BLOCK, ~[], [pid 742] <... futex resumed>) = 1 [pid 741] <... rt_sigprocmask resumed>[], 8) = 0 [pid 741] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 742] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 741] <... clone3 resumed> => {parent_tid=[744]}, 88) = 744 [pid 741] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 741] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 744 attached [pid 744] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 744] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 744] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 742] <... write resumed>) = -1 EFAULT (Bad address) [pid 744] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] write(4, 0x20000180, 7 [pid 744] <... futex resumed>) = 1 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 741] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... write resumed>) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 744] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7 [pid 744] <... socket resumed>) = 6 [pid 742] <... write resumed>) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 742] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 742] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 744] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 741] <... futex resumed>) = 0 [pid 741] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 741] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... futex resumed>) = 0 [pid 742] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 744] <... futex resumed>) = ? [pid 741] <... futex resumed>) = ? [pid 744] +++ killed by SIGBUS +++ [pid 742] +++ killed by SIGBUS +++ [pid 741] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=741, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 32.593757][ T742] loop0: detected capacity change from 0 to 512 [ 32.601525][ T742] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 32.614877][ T742] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 32.624462][ T742] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. unlink("./107/binderfs") = 0 umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./107/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./107") = 0 mkdir("./108", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 745 ./strace-static-x86_64: Process 745 attached [pid 745] set_robust_list(0x5555574f36a0, 24) = 0 [pid 745] chdir("./108") = 0 [pid 745] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 745] setpgid(0, 0) = 0 [pid 745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 745] write(3, "1000", 4) = 4 [pid 745] close(3) = 0 [pid 745] symlink("/dev/binderfs", "./binderfs") = 0 [pid 745] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 745] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 745] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 745] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 745] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 745] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[746]}, 88) = 746 [pid 745] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 745] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 745] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 746 attached [pid 746] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 746] memfd_create("syzkaller", 0) = 3 [pid 746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 746] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 746] munmap(0x7f2081aae000, 138412032) = 0 [pid 746] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 746] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 746] close(3) = 0 [pid 746] mkdir("./file0", 0777) = 0 [ 32.648061][ T298] EXT4-fs (loop0): unmounting filesystem. [ 32.663030][ T746] loop0: detected capacity change from 0 to 512 [ 32.670898][ T746] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 32.684510][ T746] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 746] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 746] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 746] chdir("./file0") = 0 [pid 746] ioctl(4, LOOP_CLR_FD) = 0 [pid 746] close(4) = 0 [pid 746] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] <... futex resumed>) = 0 [pid 745] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 745] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 746] <... futex resumed>) = 1 [pid 746] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 746] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] <... futex resumed>) = 0 [pid 745] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 745] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 746] <... futex resumed>) = 1 [pid 746] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 746] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] <... futex resumed>) = 0 [pid 745] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 745] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 745] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 745] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 745] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[748]}, 88) = 748 [pid 745] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 745] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 745] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 746] <... futex resumed>) = 1 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 748 attached [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 746] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 748] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 748] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 748] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 748] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] <... futex resumed>) = 0 [pid 745] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 745] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 746] <... futex resumed>) = 0 [pid 746] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 748] <... futex resumed>) = 1 [pid 746] <... socket resumed>) = 6 [pid 746] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] <... futex resumed>) = 0 [pid 745] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 745] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 746] <... futex resumed>) = 1 [pid 748] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 746] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 746] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 745] <... futex resumed>) = 0 [pid 745] exit_group(0) = ? [pid 746] <... futex resumed>) = ? [pid 748] <... futex resumed>) = ? [pid 746] +++ exited with 0 +++ [pid 748] +++ exited with 0 +++ [pid 745] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=745, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./108/binderfs") = 0 umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./108/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./108") = 0 mkdir("./109", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 749 ./strace-static-x86_64: Process 749 attached [pid 749] set_robust_list(0x5555574f36a0, 24) = 0 [pid 749] chdir("./109") = 0 [pid 749] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 749] setpgid(0, 0) = 0 [pid 749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 749] write(3, "1000", 4) = 4 [pid 749] close(3) = 0 [pid 749] symlink("/dev/binderfs", "./binderfs") = 0 [pid 749] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 749] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 749] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 749] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 749] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 749] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 750 attached => {parent_tid=[750]}, 88) = 750 [pid 749] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 750] set_robust_list(0x7f2089ece9a0, 24 [pid 749] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 749] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 750] <... set_robust_list resumed>) = 0 [pid 750] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 750] memfd_create("syzkaller", 0) = 3 [pid 750] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 750] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 750] munmap(0x7f2081aae000, 138412032) = 0 [pid 750] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 32.694441][ T746] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.716160][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 750] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 750] close(3) = 0 [pid 750] mkdir("./file0", 0777) = 0 [pid 750] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 750] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 750] chdir("./file0") = 0 [pid 750] ioctl(4, LOOP_CLR_FD) = 0 [pid 750] close(4) = 0 [pid 750] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 750] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 749] <... futex resumed>) = 0 [pid 749] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 749] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 750] <... futex resumed>) = 0 [pid 750] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 750] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 749] <... futex resumed>) = 0 [pid 749] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 749] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 750] <... futex resumed>) = 1 [pid 750] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 750] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 749] <... futex resumed>) = 0 [pid 749] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 749] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 749] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 750] <... futex resumed>) = 1 [pid 749] <... mprotect resumed>) = 0 [pid 749] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 749] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 750] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 749] <... clone3 resumed> => {parent_tid=[752]}, 88) = 752 [pid 749] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 749] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 750] <... write resumed>) = 7 [pid 749] <... futex resumed>) = 0 [pid 750] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 749] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 752 attached [pid 750] <... write resumed>) = 7 [pid 752] set_robust_list(0x7f2089ead9a0, 24 [pid 750] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 752] <... set_robust_list resumed>) = 0 [pid 750] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 752] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 752] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 752] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 749] <... futex resumed>) = 0 [pid 749] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 749] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 752] <... futex resumed>) = 1 [pid 750] <... write resumed>) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] write(4, 0x20000180, 7) = 7 [pid 750] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 750] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 752] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 752] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 749] <... futex resumed>) = 0 [pid 749] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 752] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 749] <... futex resumed>) = 1 [pid 750] <... futex resumed>) = 0 [pid 749] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 750] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 750] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 749] <... futex resumed>) = 0 [pid 750] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 749] exit_group(0 [pid 750] <... futex resumed>) = ? [pid 749] <... exit_group resumed>) = ? [pid 752] <... futex resumed>) = ? [pid 750] +++ exited with 0 +++ [pid 752] +++ exited with 0 +++ [pid 749] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=749, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./109/binderfs") = 0 [ 32.739900][ T750] loop0: detected capacity change from 0 to 512 [ 32.747882][ T750] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 32.761420][ T750] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 32.771396][ T750] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./109/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./109") = 0 mkdir("./110", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 753 ./strace-static-x86_64: Process 753 attached [pid 753] set_robust_list(0x5555574f36a0, 24) = 0 [pid 753] chdir("./110") = 0 [pid 753] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 753] setpgid(0, 0) = 0 [pid 753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 753] write(3, "1000", 4) = 4 [pid 753] close(3) = 0 [pid 753] symlink("/dev/binderfs", "./binderfs") = 0 [pid 753] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 753] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 753] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 753] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 753] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 753] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[754]}, 88) = 754 [pid 753] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 753] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 753] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 754 attached [pid 754] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 754] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 754] memfd_create("syzkaller", 0) = 3 [pid 754] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 754] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 754] munmap(0x7f2081aae000, 138412032) = 0 [pid 754] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 754] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 754] close(3) = 0 [pid 754] mkdir("./file0", 0777) = 0 [ 32.796026][ T298] EXT4-fs (loop0): unmounting filesystem. [ 32.812766][ T754] loop0: detected capacity change from 0 to 512 [ 32.821204][ T754] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 32.834528][ T754] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 754] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 754] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 754] chdir("./file0") = 0 [pid 754] ioctl(4, LOOP_CLR_FD) = 0 [pid 754] close(4) = 0 [pid 754] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 753] <... futex resumed>) = 0 [pid 753] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 753] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 754] <... futex resumed>) = 1 [pid 754] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 754] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 753] <... futex resumed>) = 0 [pid 753] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 753] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 754] <... futex resumed>) = 1 [pid 754] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 754] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 753] <... futex resumed>) = 0 [pid 753] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 753] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 753] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 753] rt_sigprocmask(SIG_BLOCK, ~[], [pid 754] <... futex resumed>) = 1 [pid 753] <... rt_sigprocmask resumed>[], 8) = 0 [pid 753] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[756]}, 88) = 756 [pid 753] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 754] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 753] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 753] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 756 attached [pid 756] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 756] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 756] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 754] <... write resumed>) = -1 EFAULT (Bad address) [pid 756] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] write(4, 0x20000180, 7 [pid 753] <... futex resumed>) = 0 [pid 753] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 753] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 754] <... write resumed>) = -1 EFAULT (Bad address) [pid 756] <... futex resumed>) = 1 [pid 756] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 754] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 754] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 756] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] write(4, 0x20000180, 7 [pid 753] <... futex resumed>) = 0 [pid 753] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 753] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 754] <... write resumed>) = -1 EFAULT (Bad address) [pid 756] <... futex resumed>) = 1 [pid 756] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 754] write(4, 0x20000180, 7) = -1 EFAULT (Bad address) [pid 753] <... futex resumed>) = ? [pid 754] +++ killed by SIGBUS +++ [pid 756] +++ killed by SIGBUS +++ [pid 753] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=753, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./110/binderfs") = 0 umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./110/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./110") = 0 mkdir("./111", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 757 ./strace-static-x86_64: Process 757 attached [pid 757] set_robust_list(0x5555574f36a0, 24) = 0 [pid 757] chdir("./111") = 0 [pid 757] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 757] setpgid(0, 0) = 0 [pid 757] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 757] write(3, "1000", 4) = 4 [pid 757] close(3) = 0 [pid 757] symlink("/dev/binderfs", "./binderfs") = 0 [pid 757] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 757] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 757] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 757] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 757] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 757] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 757] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[758]}, 88) = 758 ./strace-static-x86_64: Process 758 attached [pid 758] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 758] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 758] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 757] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 757] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 758] <... futex resumed>) = 0 [pid 758] memfd_create("syzkaller", 0) = 3 [pid 758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 757] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 758] <... mmap resumed>) = 0x7f2081aae000 [pid 758] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 758] munmap(0x7f2081aae000, 138412032) = 0 [pid 758] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 32.844427][ T754] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.863528][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 758] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 758] close(3) = 0 [pid 758] mkdir("./file0", 0777) = 0 [pid 758] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 758] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 758] chdir("./file0") = 0 [pid 758] ioctl(4, LOOP_CLR_FD) = 0 [pid 758] close(4) = 0 [pid 758] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 758] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 757] <... futex resumed>) = 0 [pid 757] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 757] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] <... futex resumed>) = 0 [pid 758] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 758] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] <... futex resumed>) = 0 [pid 757] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 757] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] <... futex resumed>) = 1 [pid 758] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 758] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 757] <... futex resumed>) = 0 [pid 757] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 757] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 757] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 757] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 757] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 757] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[760]}, 88) = 760 [pid 757] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 757] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 757] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 760 attached [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 760] set_robust_list(0x7f2089ead9a0, 24 [pid 758] <... write resumed>) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 760] <... set_robust_list resumed>) = 0 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 760] rt_sigprocmask(SIG_SETMASK, [], [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 760] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 758] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 758] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 760] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 760] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] <... futex resumed>) = 0 [pid 757] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 757] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] <... futex resumed>) = 0 [pid 758] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 760] <... futex resumed>) = 1 [pid 758] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] <... futex resumed>) = 0 [pid 757] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 757] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] <... futex resumed>) = 1 [pid 760] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 758] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 758] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] <... futex resumed>) = 0 [pid 757] exit_group(0) = ? [pid 760] <... futex resumed>) = ? [pid 760] +++ exited with 0 +++ [pid 758] <... futex resumed>) = ? [pid 758] +++ exited with 0 +++ [pid 757] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=757, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./111/binderfs") = 0 [ 32.888770][ T758] loop0: detected capacity change from 0 to 512 [ 32.897122][ T758] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 32.910380][ T758] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 32.920331][ T758] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./111/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./111") = 0 mkdir("./112", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 761 ./strace-static-x86_64: Process 761 attached [pid 761] set_robust_list(0x5555574f36a0, 24) = 0 [pid 761] chdir("./112") = 0 [pid 761] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 761] setpgid(0, 0) = 0 [pid 761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 761] write(3, "1000", 4) = 4 [pid 761] close(3) = 0 [pid 761] symlink("/dev/binderfs", "./binderfs") = 0 [pid 761] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 761] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 761] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 761] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 761] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 761] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 761] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[762]}, 88) = 762 [pid 761] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 762 attached NULL, 8) = 0 [pid 762] set_robust_list(0x7f2089ece9a0, 24 [pid 761] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... set_robust_list resumed>) = 0 [pid 761] <... futex resumed>) = 0 [pid 762] rt_sigprocmask(SIG_SETMASK, [], [pid 761] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 762] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 762] memfd_create("syzkaller", 0) = 3 [pid 762] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 762] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 762] munmap(0x7f2081aae000, 138412032) = 0 [pid 762] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 762] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 762] close(3) = 0 [pid 762] mkdir("./file0", 0777) = 0 [ 32.945088][ T298] EXT4-fs (loop0): unmounting filesystem. [ 32.961966][ T762] loop0: detected capacity change from 0 to 512 [ 32.970144][ T762] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 32.983597][ T762] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 762] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 762] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 762] chdir("./file0") = 0 [pid 762] ioctl(4, LOOP_CLR_FD) = 0 [pid 762] close(4) = 0 [pid 762] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = 0 [pid 761] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 761] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 762] <... futex resumed>) = 1 [pid 762] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 762] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = 0 [pid 761] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 761] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 762] <... futex resumed>) = 1 [pid 762] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 762] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = 0 [pid 761] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 761] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 761] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 761] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 761] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 761] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[764]}, 88) = 764 [pid 761] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 761] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 761] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 762] <... futex resumed>) = 1 [pid 762] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 764 attached [pid 764] set_robust_list(0x7f2089ead9a0, 24 [pid 762] <... write resumed>) = 7 [pid 764] <... set_robust_list resumed>) = 0 [pid 764] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 764] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 762] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7 [pid 764] <... mmap resumed>) = 0x20000000 [pid 762] <... write resumed>) = 7 [pid 764] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] write(4, 0x20000180, 7 [pid 764] <... futex resumed>) = 1 [pid 762] <... write resumed>) = 7 [pid 764] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7 [pid 761] <... futex resumed>) = 0 [pid 762] <... write resumed>) = 7 [pid 761] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] write(4, 0x20000180, 7 [pid 764] <... futex resumed>) = 0 [pid 761] <... futex resumed>) = 1 [pid 764] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 762] <... write resumed>) = 7 [pid 761] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... socket resumed>) = 6 [pid 764] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 764] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 762] write(4, 0x20000180, 7 [pid 761] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... write resumed>) = 7 [pid 762] write(4, 0x20000180, 7 [pid 761] <... futex resumed>) = 1 [pid 761] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... futex resumed>) = 0 [pid 762] <... write resumed>) = 7 [pid 762] write(4, 0x20000180, 7 [pid 764] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 762] <... write resumed>) = 7 [pid 764] <... setsockopt resumed>) = 0 [pid 762] write(4, 0x20000180, 7 [pid 764] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 764] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] <... futex resumed>) = 0 [pid 762] <... write resumed>) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] write(4, 0x20000180, 7) = 7 [pid 762] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 762] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] exit_group(0 [pid 764] <... futex resumed>) = ? [pid 762] <... futex resumed>) = ? [pid 761] <... exit_group resumed>) = ? [pid 764] +++ exited with 0 +++ [pid 762] +++ exited with 0 +++ [pid 761] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=761, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./112/binderfs") = 0 umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./112/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./112") = 0 mkdir("./113", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 765 ./strace-static-x86_64: Process 765 attached [pid 765] set_robust_list(0x5555574f36a0, 24) = 0 [pid 765] chdir("./113") = 0 [pid 765] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 765] setpgid(0, 0) = 0 [pid 765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 765] write(3, "1000", 4) = 4 [pid 765] close(3) = 0 [pid 765] symlink("/dev/binderfs", "./binderfs") = 0 [pid 765] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 765] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 765] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 765] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 765] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 765] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 766 attached => {parent_tid=[766]}, 88) = 766 [pid 766] set_robust_list(0x7f2089ece9a0, 24 [pid 765] rt_sigprocmask(SIG_SETMASK, [], [pid 766] <... set_robust_list resumed>) = 0 [pid 766] rt_sigprocmask(SIG_SETMASK, [], [pid 765] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 765] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 765] <... futex resumed>) = 0 [pid 766] memfd_create("syzkaller", 0 [pid 765] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 766] <... memfd_create resumed>) = 3 [pid 766] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 766] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 766] munmap(0x7f2081aae000, 138412032) = 0 [pid 766] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 32.993293][ T762] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.017742][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 766] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 766] close(3) = 0 [pid 766] mkdir("./file0", 0777) = 0 [pid 766] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 766] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 766] chdir("./file0") = 0 [pid 766] ioctl(4, LOOP_CLR_FD) = 0 [pid 766] close(4) = 0 [pid 766] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 765] <... futex resumed>) = 0 [pid 765] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 765] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] <... futex resumed>) = 1 [pid 766] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 766] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 765] <... futex resumed>) = 0 [pid 765] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 765] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] <... futex resumed>) = 1 [pid 766] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 766] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 765] <... futex resumed>) = 0 [pid 765] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 765] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 765] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 765] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 765] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[768]}, 88) = 768 [pid 765] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 765] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 765] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] <... futex resumed>) = 1 [pid 766] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 766] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 766] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 766] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 766] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 766] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 768 attached ) = 7 [pid 768] set_robust_list(0x7f2089ead9a0, 24 [pid 766] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 768] <... set_robust_list resumed>) = 0 [pid 768] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 768] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 768] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 765] <... futex resumed>) = 0 [pid 765] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 765] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 768] <... futex resumed>) = 1 [pid 766] <... write resumed>) = 7 [pid 768] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 766] write(4, 0x20000180, 7 [pid 768] <... socket resumed>) = 6 [pid 768] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 768] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 766] <... write resumed>) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 765] <... futex resumed>) = 0 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 765] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 765] <... futex resumed>) = 1 [pid 766] write(4, 0x20000180, 7 [pid 765] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 766] <... write resumed>) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7 [pid 768] <... futex resumed>) = 0 [pid 766] <... write resumed>) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7) = 7 [pid 766] write(4, 0x20000180, 7 [pid 768] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 766] <... write resumed>) = 7 [pid 766] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 766] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 768] <... setsockopt resumed>) = 0 [pid 768] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 765] <... futex resumed>) = 0 [pid 768] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 765] exit_group(0 [pid 768] <... futex resumed>) = ? [pid 765] <... exit_group resumed>) = ? [pid 768] +++ exited with 0 +++ [pid 766] <... futex resumed>) = ? [pid 766] +++ exited with 0 +++ [pid 765] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=765, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./113/binderfs") = 0 [ 33.040459][ T766] loop0: detected capacity change from 0 to 512 [ 33.049175][ T766] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 33.062488][ T766] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.072145][ T766] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./113/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./113") = 0 mkdir("./114", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 769 ./strace-static-x86_64: Process 769 attached [pid 769] set_robust_list(0x5555574f36a0, 24) = 0 [pid 769] chdir("./114") = 0 [pid 769] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 769] setpgid(0, 0) = 0 [pid 769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 769] write(3, "1000", 4) = 4 [pid 769] close(3) = 0 [pid 769] symlink("/dev/binderfs", "./binderfs") = 0 [pid 769] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 769] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 769] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 769] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 769] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 770 attached [pid 770] set_robust_list(0x7f2089ece9a0, 24 [pid 769] <... clone3 resumed> => {parent_tid=[770]}, 88) = 770 [pid 770] <... set_robust_list resumed>) = 0 [pid 769] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 770] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 769] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 770] memfd_create("syzkaller", 0) = 3 [pid 770] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 770] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 770] munmap(0x7f2081aae000, 138412032) = 0 [pid 770] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 770] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 770] close(3) = 0 [pid 770] mkdir("./file0", 0777) = 0 [ 33.096465][ T298] EXT4-fs (loop0): unmounting filesystem. [ 33.122301][ T770] loop0: detected capacity change from 0 to 512 [ 33.130162][ T770] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 770] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 770] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 770] chdir("./file0") = 0 [pid 770] ioctl(4, LOOP_CLR_FD) = 0 [pid 770] close(4) = 0 [pid 770] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] <... futex resumed>) = 0 [pid 769] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... futex resumed>) = 1 [pid 770] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 770] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] <... futex resumed>) = 0 [pid 769] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... futex resumed>) = 1 [pid 770] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 770] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 770] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 769] <... futex resumed>) = 0 [pid 769] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 769] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 769] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 769] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 769] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[772]}, 88) = 772 [pid 769] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 769] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... futex resumed>) = 0 [pid 770] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 770] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 770] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 772 attached [pid 770] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 772] set_robust_list(0x7f2089ead9a0, 24 [pid 770] <... write resumed>) = 7 [pid 772] <... set_robust_list resumed>) = 0 [pid 772] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 772] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 770] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 772] <... mmap resumed>) = 0x20000000 [pid 770] <... write resumed>) = 7 [pid 772] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] <... futex resumed>) = 0 [pid 769] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 772] <... futex resumed>) = 1 [pid 772] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 772] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] <... futex resumed>) = 0 [pid 769] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 772] <... futex resumed>) = 1 [pid 770] write(4, 0x20000180, 7 [pid 772] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 770] <... write resumed>) = 7 [pid 772] <... setsockopt resumed>) = 0 [pid 772] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 769] <... futex resumed>) = 0 [pid 772] <... futex resumed>) = 1 [pid 772] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] write(4, 0x20000180, 7) = 7 [pid 770] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 769] exit_group(0) = ? [pid 772] <... futex resumed>) = ? [pid 772] +++ exited with 0 +++ [pid 770] +++ exited with 0 +++ [pid 769] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=769, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./114/binderfs") = 0 umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./114/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./114") = 0 mkdir("./115", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 773 ./strace-static-x86_64: Process 773 attached [pid 773] set_robust_list(0x5555574f36a0, 24) = 0 [pid 773] chdir("./115") = 0 [pid 773] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 773] setpgid(0, 0) = 0 [pid 773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 773] write(3, "1000", 4) = 4 [pid 773] close(3) = 0 [pid 773] symlink("/dev/binderfs", "./binderfs") = 0 [pid 773] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 773] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 773] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 773] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 773] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 773] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 774 attached [pid 774] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 774] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 774] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 773] <... clone3 resumed> => {parent_tid=[774]}, 88) = 774 [pid 773] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 773] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 774] <... futex resumed>) = 0 [pid 774] memfd_create("syzkaller", 0) = 3 [pid 774] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 773] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 774] <... mmap resumed>) = 0x7f2081aae000 [pid 774] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 774] munmap(0x7f2081aae000, 138412032) = 0 [pid 774] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 33.143478][ T770] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.153273][ T770] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.182292][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 774] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 774] close(3) = 0 [pid 774] mkdir("./file0", 0777) = 0 [pid 774] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 774] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 774] chdir("./file0") = 0 [pid 774] ioctl(4, LOOP_CLR_FD) = 0 [pid 774] close(4) = 0 [pid 774] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 774] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 773] <... futex resumed>) = 0 [pid 773] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 773] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 774] <... futex resumed>) = 0 [pid 774] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 774] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 773] <... futex resumed>) = 0 [pid 773] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 773] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 774] <... futex resumed>) = 1 [pid 774] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 774] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 773] <... futex resumed>) = 0 [pid 773] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 773] <... futex resumed>) = 0 [pid 773] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 774] <... write resumed>) = 7 [pid 773] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 774] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 773] <... mmap resumed>) = 0x7f2089e8d000 [pid 773] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 774] <... write resumed>) = 7 [pid 773] rt_sigprocmask(SIG_BLOCK, ~[], [pid 774] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 773] <... rt_sigprocmask resumed>[], 8) = 0 [pid 773] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 776 attached [pid 776] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 776] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 776] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 773] <... clone3 resumed> => {parent_tid=[776]}, 88) = 776 [pid 774] <... write resumed>) = 7 [pid 773] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 773] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 776] <... futex resumed>) = 0 [pid 773] <... futex resumed>) = 1 [pid 776] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 773] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 774] write(4, 0x20000180, 7 [pid 776] <... mmap resumed>) = 0x20000000 [pid 774] <... write resumed>) = 7 [pid 776] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] write(4, 0x20000180, 7 [pid 776] <... futex resumed>) = 1 [pid 774] <... write resumed>) = 7 [pid 773] <... futex resumed>) = 0 [pid 773] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 773] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 776] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 774] write(4, 0x20000180, 7 [pid 776] <... socket resumed>) = 6 [pid 774] <... write resumed>) = 7 [pid 776] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] write(4, 0x20000180, 7 [pid 776] <... futex resumed>) = 1 [pid 774] <... write resumed>) = 7 [pid 773] <... futex resumed>) = 0 [pid 773] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 773] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 774] write(4, 0x20000180, 7 [pid 776] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 774] <... write resumed>) = 7 [pid 774] write(4, 0x20000180, 7 [pid 776] <... setsockopt resumed>) = 0 [pid 776] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 774] <... write resumed>) = 7 [pid 774] write(4, 0x20000180, 7 [pid 776] <... futex resumed>) = 1 [pid 773] <... futex resumed>) = 0 [pid 776] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 774] <... write resumed>) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] write(4, 0x20000180, 7) = 7 [pid 774] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 774] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 773] exit_group(0 [pid 776] <... futex resumed>) = ? [pid 774] <... futex resumed>) = ? [pid 773] <... exit_group resumed>) = ? [pid 776] +++ exited with 0 +++ [pid 774] +++ exited with 0 +++ [pid 773] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=773, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./115/binderfs") = 0 [ 33.206503][ T774] loop0: detected capacity change from 0 to 512 [ 33.214883][ T774] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 33.228047][ T774] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.238030][ T774] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./115/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./115") = 0 mkdir("./116", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 778 ./strace-static-x86_64: Process 778 attached [pid 778] set_robust_list(0x5555574f36a0, 24) = 0 [pid 778] chdir("./116") = 0 [pid 778] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 778] setpgid(0, 0) = 0 [pid 778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 778] write(3, "1000", 4) = 4 [pid 778] close(3) = 0 [pid 778] symlink("/dev/binderfs", "./binderfs") = 0 [pid 778] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 778] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 778] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 778] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 778] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 778] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[779]}, 88) = 779 ./strace-static-x86_64: Process 779 attached [pid 779] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 779] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 779] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 778] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 778] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 778] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 779] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 779] memfd_create("syzkaller", 0) = 3 [pid 779] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 779] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 779] munmap(0x7f2081aae000, 138412032) = 0 [pid 779] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 779] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 779] close(3) = 0 [pid 779] mkdir("./file0", 0777) = 0 [ 33.273584][ T298] EXT4-fs (loop0): unmounting filesystem. [ 33.298452][ T779] loop0: detected capacity change from 0 to 512 [ 33.307137][ T779] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 779] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 779] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 779] chdir("./file0") = 0 [pid 779] ioctl(4, LOOP_CLR_FD) = 0 [pid 779] close(4) = 0 [pid 779] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 778] <... futex resumed>) = 0 [pid 778] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 778] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 779] <... futex resumed>) = 1 [pid 779] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 779] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 778] <... futex resumed>) = 0 [pid 778] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 778] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 779] <... futex resumed>) = 1 [pid 779] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 779] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 778] <... futex resumed>) = 0 [pid 778] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 778] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 778] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 778] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 778] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[781]}, 88) = 781 [pid 778] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 778] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 778] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 779] <... futex resumed>) = 1 [pid 779] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 779] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 779] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 779] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 779] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 779] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 779] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 779] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 781 attached ) = 7 [pid 781] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 779] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 781] rt_sigprocmask(SIG_SETMASK, [], [pid 779] <... write resumed>) = 7 [pid 781] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 781] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 779] write(4, 0x20000180, 7) = 7 [pid 779] write(4, 0x20000180, 7) = 7 [pid 779] write(4, 0x20000180, 7) = 7 [pid 779] write(4, 0x20000180, 7) = 7 [pid 779] write(4, 0x20000180, 7) = 7 [pid 781] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 781] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 779] write(4, 0x20000180, 7 [pid 778] <... futex resumed>) = 0 [pid 779] <... write resumed>) = 7 [pid 779] write(4, 0x20000180, 7) = 7 [pid 779] write(4, 0x20000180, 7) = 7 [pid 779] write(4, 0x20000180, 7) = 7 [pid 778] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] write(4, 0x20000180, 7 [pid 778] <... futex resumed>) = 1 [pid 778] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 779] <... write resumed>) = 7 [pid 779] write(4, 0x20000180, 7) = 7 [pid 781] <... futex resumed>) = 0 [pid 779] write(4, 0x20000180, 7) = 7 [pid 779] write(4, 0x20000180, 7 [pid 781] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 779] <... write resumed>) = 7 [pid 779] write(4, 0x20000180, 7) = 7 [pid 779] write(4, 0x20000180, 7) = 7 [pid 779] write(4, 0x20000180, 7 [pid 781] <... socket resumed>) = 6 [pid 779] <... write resumed>) = 7 [pid 779] write(4, 0x20000180, 7) = 7 [pid 779] write(4, 0x20000180, 7 [pid 781] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] <... write resumed>) = 7 [pid 778] <... futex resumed>) = 0 [pid 778] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 778] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 781] <... futex resumed>) = 1 [pid 779] write(4, 0x20000180, 7 [pid 781] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 779] <... write resumed>) = 7 [pid 779] write(4, 0x20000180, 7 [pid 781] <... setsockopt resumed>) = 0 [pid 779] <... write resumed>) = 7 [pid 781] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] write(4, 0x20000180, 7 [pid 781] <... futex resumed>) = 1 [pid 778] <... futex resumed>) = 0 [pid 779] <... write resumed>) = 7 [pid 779] write(4, 0x20000180, 7) = 7 [pid 779] write(4, 0x20000180, 7) = 7 [pid 779] write(4, 0x20000180, 7 [pid 781] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 779] <... write resumed>) = 7 [pid 779] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 779] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 778] exit_group(0 [pid 781] <... futex resumed>) = ? [pid 779] <... futex resumed>) = ? [pid 778] <... exit_group resumed>) = ? [pid 781] +++ exited with 0 +++ [pid 779] +++ exited with 0 +++ [pid 778] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=778, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./116/binderfs") = 0 umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./116/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./116") = 0 mkdir("./117", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 782 ./strace-static-x86_64: Process 782 attached [pid 782] set_robust_list(0x5555574f36a0, 24) = 0 [pid 782] chdir("./117") = 0 [pid 782] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 782] setpgid(0, 0) = 0 [pid 782] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 782] write(3, "1000", 4) = 4 [pid 782] close(3) = 0 [pid 782] symlink("/dev/binderfs", "./binderfs") = 0 [pid 782] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 782] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 782] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 782] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 782] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 782] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 782] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 783 attached => {parent_tid=[783]}, 88) = 783 [pid 782] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 782] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 782] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 783] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 783] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 783] memfd_create("syzkaller", 0) = 3 [pid 783] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 783] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 783] munmap(0x7f2081aae000, 138412032) = 0 [ 33.320333][ T779] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.330247][ T779] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.353908][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 783] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 783] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 783] close(3) = 0 [pid 783] mkdir("./file0", 0777) = 0 [pid 783] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 783] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 783] chdir("./file0") = 0 [pid 783] ioctl(4, LOOP_CLR_FD) = 0 [pid 783] close(4) = 0 [pid 783] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 782] <... futex resumed>) = 0 [pid 782] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 782] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 783] <... futex resumed>) = 1 [pid 783] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 783] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 782] <... futex resumed>) = 0 [pid 782] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 782] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 783] <... futex resumed>) = 1 [pid 783] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 783] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 782] <... futex resumed>) = 0 [pid 783] <... futex resumed>) = 1 [pid 782] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 782] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 783] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 782] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 782] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 783] <... write resumed>) = 7 [pid 782] <... mprotect resumed>) = 0 [pid 783] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 782] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 782] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 783] <... write resumed>) = 7 ./strace-static-x86_64: Process 785 attached [pid 783] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 782] <... clone3 resumed> => {parent_tid=[785]}, 88) = 785 [pid 782] rt_sigprocmask(SIG_SETMASK, [], [pid 785] set_robust_list(0x7f2089ead9a0, 24 [pid 782] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 785] <... set_robust_list resumed>) = 0 [pid 782] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] rt_sigprocmask(SIG_SETMASK, [], [pid 782] <... futex resumed>) = 0 [pid 785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 782] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 785] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 783] <... write resumed>) = 7 [pid 785] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 782] <... futex resumed>) = 0 [pid 782] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 782] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 785] <... futex resumed>) = 1 [pid 785] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 785] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 782] <... futex resumed>) = 0 [pid 782] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 782] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 785] <... futex resumed>) = 1 [pid 783] write(4, 0x20000180, 7) = 7 [pid 785] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 785] <... setsockopt resumed>) = 0 [pid 783] write(4, 0x20000180, 7) = 7 [pid 785] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7 [pid 785] <... futex resumed>) = 1 [pid 782] <... futex resumed>) = 0 [pid 783] <... write resumed>) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7 [pid 785] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 783] <... write resumed>) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] write(4, 0x20000180, 7) = 7 [pid 783] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 783] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 782] exit_group(0) = ? [pid 783] <... futex resumed>) = ? [pid 785] <... futex resumed>) = ? [pid 783] +++ exited with 0 +++ [pid 785] +++ exited with 0 +++ [pid 782] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=782, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./117/binderfs") = 0 [ 33.376922][ T783] loop0: detected capacity change from 0 to 512 [ 33.386365][ T783] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 33.399640][ T783] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.409478][ T783] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./117/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./117") = 0 mkdir("./118", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 786 ./strace-static-x86_64: Process 786 attached [pid 786] set_robust_list(0x5555574f36a0, 24) = 0 [pid 786] chdir("./118") = 0 [pid 786] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 786] setpgid(0, 0) = 0 [pid 786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 786] write(3, "1000", 4) = 4 [pid 786] close(3) = 0 [pid 786] symlink("/dev/binderfs", "./binderfs") = 0 [pid 786] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 786] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 786] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 786] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 786] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[787]}, 88) = 787 ./strace-static-x86_64: Process 787 attached [pid 787] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 787] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 787] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 786] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 786] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 787] <... futex resumed>) = 0 [pid 786] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 787] memfd_create("syzkaller", 0) = 3 [pid 787] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 787] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 787] munmap(0x7f2081aae000, 138412032) = 0 [pid 787] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 787] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 787] close(3) = 0 [pid 787] mkdir("./file0", 0777) = 0 [ 33.444359][ T298] EXT4-fs (loop0): unmounting filesystem. [ 33.468772][ T787] loop0: detected capacity change from 0 to 512 [ 33.476907][ T787] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 787] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 787] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 787] chdir("./file0") = 0 [pid 787] ioctl(4, LOOP_CLR_FD) = 0 [pid 787] close(4) = 0 [pid 787] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] <... futex resumed>) = 0 [pid 786] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 786] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 1 [pid 787] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 787] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] <... futex resumed>) = 0 [pid 786] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 786] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 1 [pid 787] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 787] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 786] <... futex resumed>) = 0 [pid 786] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 786] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 786] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 786] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 789 attached => {parent_tid=[789]}, 88) = 789 [pid 789] set_robust_list(0x7f2089ead9a0, 24 [pid 787] <... futex resumed>) = 1 [pid 789] <... set_robust_list resumed>) = 0 [pid 789] rt_sigprocmask(SIG_SETMASK, [], [pid 787] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 786] rt_sigprocmask(SIG_SETMASK, [], [pid 789] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 789] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 787] <... write resumed>) = 7 [pid 786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 787] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 786] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = 0 [pid 787] <... write resumed>) = 7 [pid 786] <... futex resumed>) = 1 [pid 789] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 787] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 786] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... mmap resumed>) = 0x20000000 [pid 787] <... write resumed>) = 7 [pid 789] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] write(4, 0x20000180, 7 [pid 789] <... futex resumed>) = 1 [pid 786] <... futex resumed>) = 0 [pid 789] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 787] <... write resumed>) = 7 [pid 786] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 787] write(4, 0x20000180, 7 [pid 786] <... futex resumed>) = 0 [pid 789] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 786] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... write resumed>) = 7 [pid 789] <... socket resumed>) = 6 [pid 787] write(4, 0x20000180, 7 [pid 789] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... write resumed>) = 7 [pid 789] <... futex resumed>) = 1 [pid 787] write(4, 0x20000180, 7 [pid 786] <... futex resumed>) = 0 [pid 789] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 786] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 787] <... write resumed>) = 7 [pid 786] <... futex resumed>) = 0 [pid 787] write(4, 0x20000180, 7 [pid 786] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... write resumed>) = 7 [pid 787] write(4, 0x20000180, 7 [pid 789] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 787] <... write resumed>) = 7 [pid 789] <... setsockopt resumed>) = 0 [pid 787] write(4, 0x20000180, 7 [pid 789] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... write resumed>) = 7 [pid 786] <... futex resumed>) = 0 [pid 789] <... futex resumed>) = 1 [pid 787] write(4, 0x20000180, 7 [pid 789] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 787] <... write resumed>) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] write(4, 0x20000180, 7) = 7 [pid 787] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 787] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 786] exit_group(0 [pid 789] <... futex resumed>) = ? [pid 787] <... futex resumed>) = ? [pid 786] <... exit_group resumed>) = ? [pid 789] +++ exited with 0 +++ [pid 787] +++ exited with 0 +++ [pid 786] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=786, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./118/binderfs") = 0 umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./118/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./118/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./118") = 0 mkdir("./119", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 790 ./strace-static-x86_64: Process 790 attached [pid 790] set_robust_list(0x5555574f36a0, 24) = 0 [pid 790] chdir("./119") = 0 [pid 790] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 790] setpgid(0, 0) = 0 [pid 790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 790] write(3, "1000", 4) = 4 [pid 790] close(3) = 0 [pid 790] symlink("/dev/binderfs", "./binderfs") = 0 [pid 790] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 790] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 790] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 790] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 790] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 791 attached [pid 791] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 791] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 791] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] <... clone3 resumed> => {parent_tid=[791]}, 88) = 791 [pid 790] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 790] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 791] <... futex resumed>) = 0 [pid 791] memfd_create("syzkaller", 0) = 3 [pid 791] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 790] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 791] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 791] munmap(0x7f2081aae000, 138412032) = 0 [pid 791] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 33.490168][ T787] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.499764][ T787] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.528864][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 791] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 791] close(3) = 0 [pid 791] mkdir("./file0", 0777) = 0 [pid 791] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 791] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 791] chdir("./file0") = 0 [pid 791] ioctl(4, LOOP_CLR_FD) = 0 [pid 791] close(4) = 0 [pid 791] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 791] <... futex resumed>) = 1 [pid 790] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 791] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] <... futex resumed>) = 1 [pid 791] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 791] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 790] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 790] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 790] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[793]}, 88) = 793 [pid 790] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 790] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] <... futex resumed>) = 1 [pid 791] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 791] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 791] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 791] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 791] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 793 attached [pid 793] set_robust_list(0x7f2089ead9a0, 24 [pid 791] <... write resumed>) = 7 [pid 793] <... set_robust_list resumed>) = 0 [pid 791] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 793] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 793] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 791] <... write resumed>) = 7 [pid 791] write(4, 0x20000180, 7 [pid 793] <... mmap resumed>) = 0x20000000 [pid 793] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 791] <... write resumed>) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7 [pid 793] <... futex resumed>) = 1 [pid 791] <... write resumed>) = 7 [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] write(4, 0x20000180, 7 [pid 793] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 791] <... write resumed>) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] write(4, 0x20000180, 7) = 7 [pid 791] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 791] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] <... socket resumed>) = 6 [pid 793] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 790] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] <... futex resumed>) = 0 [pid 793] <... futex resumed>) = 1 [pid 793] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 791] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 791] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 790] <... futex resumed>) = 0 [pid 791] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] exit_group(0 [pid 791] <... futex resumed>) = ? [pid 790] <... exit_group resumed>) = ? [pid 791] +++ exited with 0 +++ [pid 793] <... futex resumed>) = ? [pid 793] +++ exited with 0 +++ [pid 790] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=790, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./119/binderfs") = 0 [ 33.552411][ T791] loop0: detected capacity change from 0 to 512 [ 33.560945][ T791] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 33.574527][ T791] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.584241][ T791] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./119/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./119") = 0 mkdir("./120", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 794 ./strace-static-x86_64: Process 794 attached [pid 794] set_robust_list(0x5555574f36a0, 24) = 0 [pid 794] chdir("./120") = 0 [pid 794] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 794] setpgid(0, 0) = 0 [pid 794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 794] write(3, "1000", 4) = 4 [pid 794] close(3) = 0 [pid 794] symlink("/dev/binderfs", "./binderfs") = 0 [pid 794] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 794] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 794] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 794] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 794] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 794] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 795 attached => {parent_tid=[795]}, 88) = 795 [pid 795] set_robust_list(0x7f2089ece9a0, 24 [pid 794] rt_sigprocmask(SIG_SETMASK, [], [pid 795] <... set_robust_list resumed>) = 0 [pid 795] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 795] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 794] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 795] <... futex resumed>) = 0 [pid 795] memfd_create("syzkaller", 0 [pid 794] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 795] <... memfd_create resumed>) = 3 [pid 795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 795] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 795] munmap(0x7f2081aae000, 138412032) = 0 [pid 795] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 795] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 795] close(3) = 0 [pid 795] mkdir("./file0", 0777) = 0 [ 33.608497][ T298] EXT4-fs (loop0): unmounting filesystem. [ 33.632160][ T795] loop0: detected capacity change from 0 to 512 [ 33.640652][ T795] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 795] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 795] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 795] chdir("./file0") = 0 [pid 795] ioctl(4, LOOP_CLR_FD) = 0 [pid 795] close(4) = 0 [pid 795] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 795] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] <... futex resumed>) = 0 [pid 794] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 794] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] <... futex resumed>) = 0 [pid 795] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 795] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... futex resumed>) = 0 [pid 794] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 794] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] <... futex resumed>) = 1 [pid 795] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 795] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 794] <... futex resumed>) = 0 [pid 794] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 794] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 794] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 794] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 794] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[797]}, 88) = 797 [pid 794] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 794] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 794] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 797 attached [pid 797] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 795] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 797] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 797] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 795] <... write resumed>) = -1 EFAULT (Bad address) [pid 797] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] write(4, 0x20000180, 7 [pid 794] <... futex resumed>) = 0 [pid 794] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 794] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 797] <... futex resumed>) = 1 [pid 797] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 795] <... write resumed>) = -1 EFAULT (Bad address) [pid 797] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... futex resumed>) = 0 [pid 794] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 794] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 797] <... futex resumed>) = 1 [pid 797] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 794] <... futex resumed>) = ? [pid 795] +++ killed by SIGBUS +++ [pid 797] +++ killed by SIGBUS +++ [pid 794] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=794, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./120/binderfs") = 0 umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./120/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./120") = 0 mkdir("./121", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 798 ./strace-static-x86_64: Process 798 attached [pid 798] set_robust_list(0x5555574f36a0, 24) = 0 [pid 798] chdir("./121") = 0 [pid 798] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 798] setpgid(0, 0) = 0 [pid 798] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 798] write(3, "1000", 4) = 4 [pid 798] close(3) = 0 [pid 798] symlink("/dev/binderfs", "./binderfs") = 0 [pid 798] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 798] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 798] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 798] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 798] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 798] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 798] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 799 attached => {parent_tid=[799]}, 88) = 799 [pid 799] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 799] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 799] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 798] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 798] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 799] <... futex resumed>) = 0 [pid 799] memfd_create("syzkaller", 0) = 3 [pid 799] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 798] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 799] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 799] munmap(0x7f2081aae000, 138412032) = 0 [pid 799] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 33.653855][ T795] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.663394][ T795] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.683636][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 799] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 799] close(3) = 0 [pid 799] mkdir("./file0", 0777) = 0 [pid 799] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 799] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 799] chdir("./file0") = 0 [pid 799] ioctl(4, LOOP_CLR_FD) = 0 [pid 799] close(4) = 0 [pid 799] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 798] <... futex resumed>) = 0 [pid 798] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 798] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 799] <... futex resumed>) = 1 [pid 799] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 799] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 798] <... futex resumed>) = 0 [pid 798] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 798] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 799] <... futex resumed>) = 1 [pid 799] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 799] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 798] <... futex resumed>) = 0 [pid 798] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 798] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 798] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 798] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 798] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 798] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[801]}, 88) = 801 [pid 798] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 798] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 798] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 799] <... futex resumed>) = 1 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 799] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 799] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 801 attached [pid 801] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 801] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 801] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 801] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 798] <... futex resumed>) = 0 [pid 801] <... futex resumed>) = 1 [pid 798] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 798] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 799] <... futex resumed>) = 0 [pid 799] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 801] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 799] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 798] <... futex resumed>) = 0 [pid 798] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 798] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 799] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 799] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 798] <... futex resumed>) = 0 [pid 798] exit_group(0) = ? [pid 801] <... futex resumed>) = ? [pid 799] +++ exited with 0 +++ [pid 801] +++ exited with 0 +++ [pid 798] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=798, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./121/binderfs") = 0 [ 33.712773][ T799] loop0: detected capacity change from 0 to 512 [ 33.720993][ T799] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 33.734301][ T799] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.743924][ T799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./121/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./121") = 0 mkdir("./122", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 802 ./strace-static-x86_64: Process 802 attached [pid 802] set_robust_list(0x5555574f36a0, 24) = 0 [pid 802] chdir("./122") = 0 [pid 802] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 802] setpgid(0, 0) = 0 [pid 802] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 802] write(3, "1000", 4) = 4 [pid 802] close(3) = 0 [pid 802] symlink("/dev/binderfs", "./binderfs") = 0 [pid 802] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 802] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 802] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 802] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 802] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 802] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 802] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 803 attached => {parent_tid=[803]}, 88) = 803 [pid 803] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 803] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 803] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 802] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 802] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 803] <... futex resumed>) = 0 [pid 803] memfd_create("syzkaller", 0) = 3 [pid 803] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 802] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 803] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 803] munmap(0x7f2081aae000, 138412032) = 0 [pid 803] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 803] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 803] close(3) = 0 [pid 803] mkdir("./file0", 0777) = 0 [ 33.767024][ T298] EXT4-fs (loop0): unmounting filesystem. [ 33.792669][ T803] loop0: detected capacity change from 0 to 512 [ 33.800349][ T803] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 803] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 803] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 803] chdir("./file0") = 0 [pid 803] ioctl(4, LOOP_CLR_FD) = 0 [pid 803] close(4) = 0 [pid 803] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] <... futex resumed>) = 0 [pid 802] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 802] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 803] <... futex resumed>) = 1 [pid 803] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 803] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] <... futex resumed>) = 0 [pid 802] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 802] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 803] <... futex resumed>) = 1 [pid 803] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 803] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] <... futex resumed>) = 0 [pid 802] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 802] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 802] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 802] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 802] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 802] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[805]}, 88) = 805 [pid 802] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 802] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 802] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 803] <... futex resumed>) = 1 [pid 803] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 803] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 803] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 803] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 803] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 803] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 805 attached ) = 7 [pid 805] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 805] rt_sigprocmask(SIG_SETMASK, [], [pid 803] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 805] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 803] <... write resumed>) = 7 [pid 805] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 805] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 803] write(4, 0x20000180, 7 [pid 805] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 803] <... write resumed>) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7 [pid 802] <... futex resumed>) = 0 [pid 803] <... write resumed>) = 7 [pid 802] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 802] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 805] <... futex resumed>) = 0 [pid 805] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 805] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] <... futex resumed>) = 0 [pid 802] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 802] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 805] <... futex resumed>) = 1 [pid 803] write(4, 0x20000180, 7 [pid 805] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 803] <... write resumed>) = 7 [pid 805] <... setsockopt resumed>) = 0 [pid 805] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 802] <... futex resumed>) = 0 [pid 803] write(4, 0x20000180, 7 [pid 805] <... futex resumed>) = 1 [pid 803] <... write resumed>) = 7 [pid 805] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] write(4, 0x20000180, 7) = 7 [pid 803] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 803] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 802] exit_group(0) = ? [pid 805] <... futex resumed>) = ? [pid 805] +++ exited with 0 +++ [pid 803] <... futex resumed>) = ? [pid 803] +++ exited with 0 +++ [pid 802] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=802, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./122/binderfs") = 0 [ 33.813732][ T803] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.823482][ T803] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./122/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./122/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./122") = 0 mkdir("./123", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 806 ./strace-static-x86_64: Process 806 attached [pid 806] set_robust_list(0x5555574f36a0, 24) = 0 [pid 806] chdir("./123") = 0 [pid 806] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 806] setpgid(0, 0) = 0 [pid 806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 806] write(3, "1000", 4) = 4 [pid 806] close(3) = 0 [pid 806] symlink("/dev/binderfs", "./binderfs") = 0 [pid 806] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 806] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 806] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 806] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[807]}, 88) = 807 ./strace-static-x86_64: Process 807 attached [pid 806] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 806] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 807] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 807] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 807] memfd_create("syzkaller", 0) = 3 [pid 807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 807] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 807] munmap(0x7f2081aae000, 138412032) = 0 [pid 807] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 807] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 807] close(3) = 0 [pid 807] mkdir("./file0", 0777) = 0 [ 33.858378][ T298] EXT4-fs (loop0): unmounting filesystem. [ 33.877054][ T807] loop0: detected capacity change from 0 to 512 [ 33.884939][ T807] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 33.898335][ T807] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 807] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 807] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 807] chdir("./file0") = 0 [pid 807] ioctl(4, LOOP_CLR_FD) = 0 [pid 807] close(4) = 0 [pid 807] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = 0 [pid 806] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 807] <... futex resumed>) = 1 [pid 807] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 807] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = 0 [pid 806] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 807] <... futex resumed>) = 1 [pid 807] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 807] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 806] <... futex resumed>) = 0 [pid 806] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 806] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 806] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[809]}, 88) = 809 [pid 806] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 806] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 809 attached ) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 809] set_robust_list(0x7f2089ead9a0, 24 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 809] <... set_robust_list resumed>) = 0 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 809] rt_sigprocmask(SIG_SETMASK, [], [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 809] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 807] <... write resumed>) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 809] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 807] <... write resumed>) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 807] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 807] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 809] <... mmap resumed>) = 0x20000000 [pid 809] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = 0 [pid 806] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 806] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 807] <... futex resumed>) = 0 [pid 807] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 807] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = 0 [pid 806] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 806] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 807] <... futex resumed>) = 1 [pid 809] <... futex resumed>) = 1 [pid 809] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 807] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 807] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = 0 [pid 806] exit_group(0) = ? [pid 807] <... futex resumed>) = ? [pid 807] +++ exited with 0 +++ [pid 809] <... futex resumed>) = ? [pid 809] +++ exited with 0 +++ [pid 806] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=806, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./123/binderfs") = 0 umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./123/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./123") = 0 mkdir("./124", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 810 ./strace-static-x86_64: Process 810 attached [pid 810] set_robust_list(0x5555574f36a0, 24) = 0 [pid 810] chdir("./124") = 0 [pid 810] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 810] setpgid(0, 0) = 0 [pid 810] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 810] write(3, "1000", 4) = 4 [pid 810] close(3) = 0 [pid 810] symlink("/dev/binderfs", "./binderfs") = 0 [pid 810] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 810] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 810] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 810] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 810] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 810] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 811 attached => {parent_tid=[811]}, 88) = 811 [pid 811] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 811] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 811] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 810] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 810] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 811] <... futex resumed>) = 0 [pid 811] memfd_create("syzkaller", 0) = 3 [pid 811] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 810] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 811] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 811] munmap(0x7f2081aae000, 138412032) = 0 [pid 811] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 33.908209][ T807] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.930174][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 811] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 811] close(3) = 0 [pid 811] mkdir("./file0", 0777) = 0 [pid 811] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 811] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 811] chdir("./file0") = 0 [pid 811] ioctl(4, LOOP_CLR_FD) = 0 [pid 811] close(4) = 0 [pid 811] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] <... futex resumed>) = 0 [pid 810] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] <... futex resumed>) = 1 [pid 811] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 811] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 810] <... futex resumed>) = 0 [pid 811] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 810] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 810] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] <... futex resumed>) = 0 [pid 811] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 811] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] <... futex resumed>) = 0 [pid 810] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 810] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 810] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 810] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[813]}, 88) = 813 [pid 810] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 810] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] <... futex resumed>) = 1 [pid 811] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 811] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 813 attached ) = 7 [pid 813] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 813] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 811] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 813] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 811] <... write resumed>) = 7 [pid 813] <... mmap resumed>) = 0x20000000 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 813] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] <... futex resumed>) = 0 [pid 810] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] write(4, 0x20000180, 7 [pid 813] <... futex resumed>) = 1 [pid 811] <... write resumed>) = 7 [pid 813] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 813] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 810] <... futex resumed>) = 0 [pid 810] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 810] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 813] <... futex resumed>) = 1 [pid 811] write(4, 0x20000180, 7 [pid 813] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 811] <... write resumed>) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 813] <... setsockopt resumed>) = 0 [pid 811] write(4, 0x20000180, 7) = 7 [pid 813] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] write(4, 0x20000180, 7 [pid 810] <... futex resumed>) = 0 [pid 811] <... write resumed>) = 7 [pid 813] <... futex resumed>) = 1 [pid 813] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] write(4, 0x20000180, 7) = 7 [pid 811] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 811] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 810] exit_group(0) = ? [pid 813] <... futex resumed>) = ? [pid 813] +++ exited with 0 +++ [pid 811] <... futex resumed>) = ? [pid 811] +++ exited with 0 +++ [pid 810] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=810, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./124/binderfs") = 0 [ 33.958973][ T811] loop0: detected capacity change from 0 to 512 [ 33.966909][ T811] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 33.980067][ T811] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.989730][ T811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./124/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./124") = 0 mkdir("./125", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 814 ./strace-static-x86_64: Process 814 attached [pid 814] set_robust_list(0x5555574f36a0, 24) = 0 [pid 814] chdir("./125") = 0 [pid 814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 814] setpgid(0, 0) = 0 [pid 814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 814] write(3, "1000", 4) = 4 [pid 814] close(3) = 0 [pid 814] symlink("/dev/binderfs", "./binderfs") = 0 [pid 814] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 814] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 814] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 814] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 815 attached [pid 815] set_robust_list(0x7f2089ece9a0, 24 [pid 814] <... clone3 resumed> => {parent_tid=[815]}, 88) = 815 [pid 815] <... set_robust_list resumed>) = 0 [pid 814] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 815] rt_sigprocmask(SIG_SETMASK, [], [pid 814] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 815] memfd_create("syzkaller", 0) = 3 [pid 815] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 815] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 815] munmap(0x7f2081aae000, 138412032) = 0 [pid 815] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 815] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 815] close(3) = 0 [pid 815] mkdir("./file0", 0777) = 0 [ 34.015364][ T298] EXT4-fs (loop0): unmounting filesystem. [ 34.039317][ T815] loop0: detected capacity change from 0 to 512 [ 34.047628][ T815] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 815] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 815] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 815] chdir("./file0") = 0 [pid 815] ioctl(4, LOOP_CLR_FD) = 0 [pid 815] close(4) = 0 [pid 815] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 815] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 815] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 814] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 814] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[817]}, 88) = 817 [pid 814] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 814] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 817 attached [pid 815] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 817] set_robust_list(0x7f2089ead9a0, 24 [pid 815] <... write resumed>) = 7 [pid 817] <... set_robust_list resumed>) = 0 [pid 817] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 817] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 815] write(4, 0x20000180, 7) = 7 [pid 815] write(4, 0x20000180, 7) = 7 [pid 815] write(4, 0x20000180, 7) = 7 [pid 815] write(4, 0x20000180, 7) = 7 [pid 817] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 815] write(4, 0x20000180, 7 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... write resumed>) = 7 [pid 815] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 815] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 817] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 817] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 817] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 814] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 0 [pid 815] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 815] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] exit_group(0) = ? [pid 817] <... futex resumed>) = ? [pid 817] +++ exited with 0 +++ [pid 815] <... futex resumed>) = ? [pid 815] +++ exited with 0 +++ [pid 814] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=814, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./125/binderfs") = 0 umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./125/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./125") = 0 mkdir("./126", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 818 ./strace-static-x86_64: Process 818 attached [pid 818] set_robust_list(0x5555574f36a0, 24) = 0 [pid 818] chdir("./126") = 0 [pid 818] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 818] setpgid(0, 0) = 0 [pid 818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 818] write(3, "1000", 4) = 4 [pid 818] close(3) = 0 [pid 818] symlink("/dev/binderfs", "./binderfs") = 0 [pid 818] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 818] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 818] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 818] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 818] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 818] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[819]}, 88) = 819 [pid 818] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 818] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 819 attached [pid 819] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 819] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 818] <... futex resumed>) = 0 [pid 819] memfd_create("syzkaller", 0) = 3 [pid 818] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 819] munmap(0x7f2081aae000, 138412032) = 0 [pid 819] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 34.060771][ T815] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.070543][ T815] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.096564][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 819] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 819] close(3) = 0 [pid 819] mkdir("./file0", 0777) = 0 [pid 819] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 819] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 819] chdir("./file0") = 0 [pid 819] ioctl(4, LOOP_CLR_FD) = 0 [pid 819] close(4) = 0 [pid 819] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 818] <... futex resumed>) = 0 [pid 818] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 818] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 819] <... futex resumed>) = 1 [pid 819] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 819] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 818] <... futex resumed>) = 0 [pid 818] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 818] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 819] <... futex resumed>) = 1 [pid 819] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 819] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 818] <... futex resumed>) = 0 [pid 818] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 818] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 818] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 819] <... futex resumed>) = 1 [pid 818] <... mprotect resumed>) = 0 [pid 818] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 818] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 818] <... clone3 resumed> => {parent_tid=[821]}, 88) = 821 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 821 attached [pid 818] rt_sigprocmask(SIG_SETMASK, [], [pid 819] <... write resumed>) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 818] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 821] set_robust_list(0x7f2089ead9a0, 24 [pid 818] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 818] <... futex resumed>) = 0 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 818] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 821] <... set_robust_list resumed>) = 0 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 821] rt_sigprocmask(SIG_SETMASK, [], [pid 819] <... write resumed>) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 821] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 819] <... write resumed>) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 821] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 819] <... write resumed>) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 819] write(4, 0x20000180, 7) = 7 [pid 819] write(4, 0x20000180, 7) = 7 [pid 819] write(4, 0x20000180, 7) = 7 [pid 819] write(4, 0x20000180, 7) = 7 [pid 821] <... mmap resumed>) = 0x20000000 [pid 819] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 819] <... futex resumed>) = 0 [pid 818] <... futex resumed>) = 0 [pid 818] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 818] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 821] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 819] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 819] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 818] <... futex resumed>) = 0 [pid 818] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 818] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 819] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 819] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 818] <... futex resumed>) = 0 [pid 818] exit_group(0 [pid 821] <... futex resumed>) = ? [pid 818] <... exit_group resumed>) = ? [pid 821] +++ exited with 0 +++ [pid 819] +++ exited with 0 +++ [pid 818] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=818, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./126/binderfs") = 0 [ 34.119137][ T819] loop0: detected capacity change from 0 to 512 [ 34.127604][ T819] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 34.140973][ T819] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.150601][ T819] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./126/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./126") = 0 mkdir("./127", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 822 ./strace-static-x86_64: Process 822 attached [pid 822] set_robust_list(0x5555574f36a0, 24) = 0 [pid 822] chdir("./127") = 0 [pid 822] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 822] setpgid(0, 0) = 0 [pid 822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 822] write(3, "1000", 4) = 4 [pid 822] close(3) = 0 [pid 822] symlink("/dev/binderfs", "./binderfs") = 0 [pid 822] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 822] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 822] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 822] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 822] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 823 attached => {parent_tid=[823]}, 88) = 823 [pid 823] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 823] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 823] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 822] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] <... futex resumed>) = 0 [pid 822] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 823] memfd_create("syzkaller", 0) = 3 [pid 823] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 823] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 823] munmap(0x7f2081aae000, 138412032) = 0 [pid 823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 823] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 823] close(3) = 0 [pid 823] mkdir("./file0", 0777) = 0 [ 34.178897][ T298] EXT4-fs (loop0): unmounting filesystem. [ 34.201302][ T823] loop0: detected capacity change from 0 to 512 [ 34.209234][ T823] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 823] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 823] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 823] chdir("./file0") = 0 [pid 823] ioctl(4, LOOP_CLR_FD) = 0 [pid 823] close(4) = 0 [pid 823] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = 0 [pid 822] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 822] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 823] <... futex resumed>) = 1 [pid 823] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 823] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = 0 [pid 822] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 822] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 823] <... futex resumed>) = 1 [pid 823] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 823] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 822] <... futex resumed>) = 0 [pid 822] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 822] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 822] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 822] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[825]}, 88) = 825 [pid 822] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 822] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 822] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 825 attached ) = 7 [pid 825] set_robust_list(0x7f2089ead9a0, 24 [pid 823] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 825] <... set_robust_list resumed>) = 0 [pid 825] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 825] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 825] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = 0 [pid 822] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 822] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 825] <... futex resumed>) = 1 [pid 825] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 823] <... write resumed>) = 7 [pid 825] <... socket resumed>) = 6 [pid 823] write(4, 0x20000180, 7) = 7 [pid 823] write(4, 0x20000180, 7) = 7 [pid 823] write(4, 0x20000180, 7) = 7 [pid 825] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 825] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 823] write(4, 0x20000180, 7) = 7 [pid 822] <... futex resumed>) = 0 [pid 823] write(4, 0x20000180, 7) = 7 [pid 822] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] write(4, 0x20000180, 7) = 7 [pid 823] write(4, 0x20000180, 7 [pid 825] <... futex resumed>) = 0 [pid 822] <... futex resumed>) = 1 [pid 823] <... write resumed>) = 7 [pid 823] write(4, 0x20000180, 7) = 7 [pid 823] write(4, 0x20000180, 7 [pid 822] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 823] <... write resumed>) = 7 [pid 823] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 825] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 825] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 822] <... futex resumed>) = 0 [pid 825] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] exit_group(0 [pid 825] <... futex resumed>) = ? [pid 823] <... futex resumed>) = ? [pid 822] <... exit_group resumed>) = ? [pid 823] +++ exited with 0 +++ [pid 825] +++ exited with 0 +++ [pid 822] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=822, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./127/binderfs") = 0 umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./127/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./127/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./127") = 0 mkdir("./128", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 827 ./strace-static-x86_64: Process 827 attached [pid 827] set_robust_list(0x5555574f36a0, 24) = 0 [pid 827] chdir("./128") = 0 [pid 827] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 827] setpgid(0, 0) = 0 [pid 827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 827] write(3, "1000", 4) = 4 [pid 827] close(3) = 0 [pid 827] symlink("/dev/binderfs", "./binderfs") = 0 [pid 827] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 827] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 827] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 827] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 827] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 828 attached => {parent_tid=[828]}, 88) = 828 [pid 828] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 827] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 827] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 828] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 828] memfd_create("syzkaller", 0) = 3 [pid 828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [ 34.222879][ T823] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.232764][ T823] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.256915][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 828] munmap(0x7f2081aae000, 138412032) = 0 [pid 828] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 828] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 828] close(3) = 0 [pid 828] mkdir("./file0", 0777) = 0 [pid 828] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 828] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 828] chdir("./file0") = 0 [pid 828] ioctl(4, LOOP_CLR_FD) = 0 [pid 828] close(4) = 0 [pid 828] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 828] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] <... futex resumed>) = 0 [pid 827] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 827] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... futex resumed>) = 0 [pid 828] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 828] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] <... futex resumed>) = 0 [pid 827] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] <... futex resumed>) = 1 [pid 828] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 828] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] <... futex resumed>) = 0 [pid 828] <... futex resumed>) = 1 [pid 827] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 827] <... futex resumed>) = 0 [pid 828] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 827] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] <... write resumed>) = 7 [pid 828] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 828] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 828] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 828] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 828] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 827] <... futex resumed>) = 0 [pid 827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 828] <... write resumed>) = 7 [pid 827] <... mmap resumed>) = 0x7f2089e8d000 [pid 828] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 827] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 828] <... write resumed>) = 7 [pid 828] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 827] <... mprotect resumed>) = 0 [pid 827] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 827] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 830 attached [pid 828] <... write resumed>) = 7 [pid 827] <... clone3 resumed> => {parent_tid=[830]}, 88) = 830 [pid 827] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 827] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 827] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 830] set_robust_list(0x7f2089ead9a0, 24 [pid 828] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 830] <... set_robust_list resumed>) = 0 [pid 830] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 830] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 828] <... write resumed>) = 7 [pid 830] <... mmap resumed>) = 0x20000000 [pid 828] write(4, 0x20000180, 7 [pid 830] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 830] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 828] <... write resumed>) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 827] <... futex resumed>) = 0 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 827] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 827] <... futex resumed>) = 1 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 827] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] write(4, 0x20000180, 7) = 7 [pid 828] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 828] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 830] <... futex resumed>) = 0 [pid 830] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 830] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] <... futex resumed>) = 0 [pid 827] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 828] <... futex resumed>) = 0 [pid 827] <... futex resumed>) = 1 [pid 830] <... futex resumed>) = 1 [pid 827] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 830] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 828] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 828] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 827] <... futex resumed>) = 0 [pid 828] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] exit_group(0 [pid 828] <... futex resumed>) = ? [pid 827] <... exit_group resumed>) = ? [pid 830] <... futex resumed>) = ? [pid 828] +++ exited with 0 +++ [pid 830] +++ exited with 0 +++ [pid 827] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=827, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./128/binderfs") = 0 [ 34.291514][ T828] loop0: detected capacity change from 0 to 512 [ 34.299517][ T828] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 34.312740][ T828] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.322347][ T828] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./128/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./128") = 0 mkdir("./129", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 831 ./strace-static-x86_64: Process 831 attached [pid 831] set_robust_list(0x5555574f36a0, 24) = 0 [pid 831] chdir("./129") = 0 [pid 831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 831] setpgid(0, 0) = 0 [pid 831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 831] write(3, "1000", 4) = 4 [pid 831] close(3) = 0 [pid 831] symlink("/dev/binderfs", "./binderfs") = 0 [pid 831] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 831] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 831] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 831] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 832 attached [pid 832] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 832] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 832] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 831] <... clone3 resumed> => {parent_tid=[832]}, 88) = 832 [pid 831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 831] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 832] <... futex resumed>) = 0 [pid 832] memfd_create("syzkaller", 0) = 3 [pid 832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 831] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 832] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 832] munmap(0x7f2081aae000, 138412032) = 0 [pid 832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 832] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 832] close(3) = 0 [pid 832] mkdir("./file0", 0777) = 0 [ 34.355887][ T298] EXT4-fs (loop0): unmounting filesystem. [ 34.375854][ T832] loop0: detected capacity change from 0 to 512 [ 34.384307][ T832] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 832] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 832] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 832] chdir("./file0") = 0 [pid 832] ioctl(4, LOOP_CLR_FD) = 0 [pid 832] close(4) = 0 [pid 832] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... futex resumed>) = 1 [pid 832] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 832] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 832] <... futex resumed>) = 1 [pid 831] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 832] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 832] <... futex resumed>) = 0 [pid 832] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 831] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 831] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 831] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 831] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[834]}, 88) = 834 [pid 831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 831] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 832] <... futex resumed>) = 0 ./strace-static-x86_64: Process 834 attached [pid 832] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 834] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 832] <... write resumed>) = 7 [pid 832] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 834] rt_sigprocmask(SIG_SETMASK, [], [pid 832] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 832] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 832] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 834] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 832] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 834] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 832] <... write resumed>) = 7 [pid 834] <... mmap resumed>) = 0x20000000 [pid 832] write(4, 0x20000180, 7 [pid 834] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 834] <... futex resumed>) = 1 [pid 834] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 834] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 831] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 831] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 834] <... futex resumed>) = 1 [pid 832] <... write resumed>) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 834] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 834] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 831] <... futex resumed>) = 0 [pid 834] <... futex resumed>) = 1 [pid 834] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] write(4, 0x20000180, 7) = 7 [pid 832] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 832] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 831] exit_group(0) = ? [pid 834] <... futex resumed>) = ? [pid 834] +++ exited with 0 +++ [pid 832] <... futex resumed>) = ? [pid 832] +++ exited with 0 +++ [pid 831] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=831, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./129/binderfs") = 0 umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./129/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./129/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./129") = 0 mkdir("./130", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 835 ./strace-static-x86_64: Process 835 attached [pid 835] set_robust_list(0x5555574f36a0, 24) = 0 [pid 835] chdir("./130") = 0 [pid 835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 835] setpgid(0, 0) = 0 [pid 835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 835] write(3, "1000", 4) = 4 [pid 835] close(3) = 0 [pid 835] symlink("/dev/binderfs", "./binderfs") = 0 [pid 835] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 835] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 835] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 835] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 835] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 836 attached => {parent_tid=[836]}, 88) = 836 [pid 836] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 836] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 836] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 835] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 835] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 836] <... futex resumed>) = 0 [pid 836] memfd_create("syzkaller", 0 [pid 835] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 836] <... memfd_create resumed>) = 3 [pid 836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 836] munmap(0x7f2081aae000, 138412032) = 0 [pid 836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 34.397674][ T832] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.407412][ T832] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.435625][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 836] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 836] close(3) = 0 [pid 836] mkdir("./file0", 0777) = 0 [pid 836] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 836] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 836] chdir("./file0") = 0 [pid 836] ioctl(4, LOOP_CLR_FD) = 0 [pid 836] close(4) = 0 [pid 836] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] <... futex resumed>) = 0 [pid 835] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 835] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 836] <... futex resumed>) = 1 [pid 836] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 836] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] <... futex resumed>) = 0 [pid 835] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 835] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 836] <... futex resumed>) = 1 [pid 836] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 836] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] <... futex resumed>) = 0 [pid 835] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 835] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 835] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 835] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[838]}, 88) = 838 [pid 835] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 835] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 835] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 836] <... futex resumed>) = 1 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 838 attached ) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 838] set_robust_list(0x7f2089ead9a0, 24 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 836] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 836] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 838] <... set_robust_list resumed>) = 0 [pid 838] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 838] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 838] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] <... futex resumed>) = 0 [pid 835] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 835] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 836] <... futex resumed>) = 0 [pid 836] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 836] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] <... futex resumed>) = 0 [pid 835] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 835] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 836] <... futex resumed>) = 1 [pid 836] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 836] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 835] <... futex resumed>) = 0 [pid 835] exit_group(0) = ? [pid 838] <... futex resumed>) = ? [pid 836] <... futex resumed>) = ? [pid 836] +++ exited with 0 +++ [pid 838] +++ exited with 0 +++ [pid 835] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=835, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./130/binderfs") = 0 [ 34.459076][ T836] loop0: detected capacity change from 0 to 512 [ 34.467188][ T836] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 34.480356][ T836] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.490152][ T836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./130/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./130") = 0 mkdir("./131", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 839 ./strace-static-x86_64: Process 839 attached [pid 839] set_robust_list(0x5555574f36a0, 24) = 0 [pid 839] chdir("./131") = 0 [pid 839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 839] setpgid(0, 0) = 0 [pid 839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 839] write(3, "1000", 4) = 4 [pid 839] close(3) = 0 [pid 839] symlink("/dev/binderfs", "./binderfs") = 0 [pid 839] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 839] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 839] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 839] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 839] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[840]}, 88) = 840 ./strace-static-x86_64: Process 840 attached [pid 840] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 840] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 840] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 839] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 839] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 839] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 840] <... futex resumed>) = 0 [pid 840] memfd_create("syzkaller", 0) = 3 [pid 840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 840] munmap(0x7f2081aae000, 138412032) = 0 [pid 840] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 840] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 840] close(3) = 0 [pid 840] mkdir("./file0", 0777) = 0 [ 34.514006][ T298] EXT4-fs (loop0): unmounting filesystem. [ 34.539509][ T840] loop0: detected capacity change from 0 to 512 [ 34.547684][ T840] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 840] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 840] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 840] chdir("./file0") = 0 [pid 840] ioctl(4, LOOP_CLR_FD) = 0 [pid 840] close(4) = 0 [pid 840] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... futex resumed>) = 0 [pid 839] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] <... futex resumed>) = 1 [pid 840] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 840] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... futex resumed>) = 0 [pid 839] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] <... futex resumed>) = 1 [pid 840] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 840] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... futex resumed>) = 0 [pid 839] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 839] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 839] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 839] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[842]}, 88) = 842 [pid 839] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 839] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] <... futex resumed>) = 1 [pid 840] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 840] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 840] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 840] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 840] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 840] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 842 attached ) = 7 [pid 842] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 842] rt_sigprocmask(SIG_SETMASK, [], [pid 840] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 842] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 840] <... write resumed>) = 7 [pid 842] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7 [pid 842] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... write resumed>) = 7 [pid 839] <... futex resumed>) = 0 [pid 839] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 842] <... futex resumed>) = 1 [pid 840] write(4, 0x20000180, 7 [pid 842] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 842] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... futex resumed>) = 0 [pid 839] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 842] <... futex resumed>) = 1 [pid 840] <... write resumed>) = 7 [pid 842] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] write(4, 0x20000180, 7) = 7 [pid 840] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 840] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 842] <... setsockopt resumed>) = 0 [pid 842] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... futex resumed>) = 0 [pid 839] exit_group(0) = ? [pid 842] <... futex resumed>) = ? [pid 840] <... futex resumed>) = ? [pid 842] +++ exited with 0 +++ [pid 840] +++ exited with 0 +++ [pid 839] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=839, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./131/binderfs") = 0 umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./131/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./131") = 0 mkdir("./132", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 843 ./strace-static-x86_64: Process 843 attached [pid 843] set_robust_list(0x5555574f36a0, 24) = 0 [pid 843] chdir("./132") = 0 [pid 843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 843] setpgid(0, 0) = 0 [pid 843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 843] write(3, "1000", 4) = 4 [pid 843] close(3) = 0 [pid 843] symlink("/dev/binderfs", "./binderfs") = 0 [pid 843] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 843] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 843] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 843] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 843] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[844]}, 88) = 844 ./strace-static-x86_64: Process 844 attached [pid 844] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 844] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 843] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 843] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 843] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 844] memfd_create("syzkaller", 0) = 3 [pid 844] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 844] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 844] munmap(0x7f2081aae000, 138412032) = 0 [ 34.561186][ T840] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.571043][ T840] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.592712][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 844] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 844] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 844] close(3) = 0 [pid 844] mkdir("./file0", 0777) = 0 [pid 844] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 844] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 844] chdir("./file0") = 0 [pid 844] ioctl(4, LOOP_CLR_FD) = 0 [pid 844] close(4) = 0 [pid 844] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 844] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 843] <... futex resumed>) = 0 [pid 843] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 843] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 844] <... futex resumed>) = 0 [pid 844] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 844] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 843] <... futex resumed>) = 0 [pid 843] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 843] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 844] <... futex resumed>) = 1 [pid 844] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 844] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 844] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 843] <... futex resumed>) = 0 [pid 843] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 843] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 844] <... futex resumed>) = 0 [pid 844] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 844] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 844] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 844] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 844] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 844] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 844] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 843] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 844] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 843] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 844] <... write resumed>) = 7 ./strace-static-x86_64: Process 846 attached [pid 843] <... clone3 resumed> => {parent_tid=[846]}, 88) = 846 [pid 844] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 843] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 843] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 843] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 846] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 846] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 846] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 844] <... write resumed>) = 7 [pid 844] write(4, 0x20000180, 7 [pid 846] <... mmap resumed>) = 0x20000000 [pid 844] <... write resumed>) = 7 [pid 844] write(4, 0x20000180, 7) = 7 [pid 844] write(4, 0x20000180, 7) = 7 [pid 844] write(4, 0x20000180, 7) = 7 [pid 846] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 844] write(4, 0x20000180, 7) = 7 [pid 844] write(4, 0x20000180, 7 [pid 846] <... futex resumed>) = 1 [pid 844] <... write resumed>) = 7 [pid 843] <... futex resumed>) = 0 [pid 844] write(4, 0x20000180, 7 [pid 846] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 844] <... write resumed>) = 7 [pid 843] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 844] write(4, 0x20000180, 7) = 7 [pid 844] write(4, 0x20000180, 7) = 7 [pid 843] <... futex resumed>) = 0 [pid 844] write(4, 0x20000180, 7) = 7 [pid 844] write(4, 0x20000180, 7 [pid 843] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 844] <... write resumed>) = 7 [pid 844] write(4, 0x20000180, 7) = 7 [pid 844] write(4, 0x20000180, 7) = 7 [pid 846] <... socket resumed>) = 6 [pid 844] write(4, 0x20000180, 7) = 7 [pid 844] write(4, 0x20000180, 7) = 7 [pid 844] write(4, 0x20000180, 7) = 7 [pid 844] write(4, 0x20000180, 7 [pid 846] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 844] <... write resumed>) = 7 [pid 846] <... futex resumed>) = 1 [pid 844] write(4, 0x20000180, 7 [pid 843] <... futex resumed>) = 0 [pid 844] <... write resumed>) = 7 [pid 843] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 844] write(4, 0x20000180, 7 [pid 843] <... futex resumed>) = 0 [pid 843] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 846] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 844] <... write resumed>) = 7 [pid 846] <... setsockopt resumed>) = 0 [pid 844] write(4, 0x20000180, 7 [pid 846] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 844] <... write resumed>) = 7 [pid 844] write(4, 0x20000180, 7 [pid 843] <... futex resumed>) = 0 [pid 844] <... write resumed>) = 7 [pid 844] write(4, 0x20000180, 7 [pid 846] <... futex resumed>) = 1 [pid 844] <... write resumed>) = 7 [pid 846] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 844] write(4, 0x20000180, 7) = 7 [pid 844] write(4, 0x20000180, 7) = 7 [pid 844] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 844] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 843] exit_group(0 [pid 844] <... futex resumed>) = ? [pid 843] <... exit_group resumed>) = ? [pid 846] <... futex resumed>) = ? [pid 844] +++ exited with 0 +++ [pid 846] +++ exited with 0 +++ [pid 843] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=843, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./132/binderfs") = 0 [ 34.616983][ T844] loop0: detected capacity change from 0 to 512 [ 34.624723][ T844] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 34.637894][ T844] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.647830][ T844] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./132/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./132/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./132") = 0 mkdir("./133", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 847 ./strace-static-x86_64: Process 847 attached [pid 847] set_robust_list(0x5555574f36a0, 24) = 0 [pid 847] chdir("./133") = 0 [pid 847] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 847] setpgid(0, 0) = 0 [pid 847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 847] write(3, "1000", 4) = 4 [pid 847] close(3) = 0 [pid 847] symlink("/dev/binderfs", "./binderfs") = 0 [pid 847] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 847] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 847] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 847] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 847] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 847] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 847] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 848 attached [pid 848] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 848] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 848] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 847] <... clone3 resumed> => {parent_tid=[848]}, 88) = 848 [pid 847] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 847] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 848] <... futex resumed>) = 0 [pid 848] memfd_create("syzkaller", 0) = 3 [pid 848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 847] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 848] <... mmap resumed>) = 0x7f2081aae000 [pid 848] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 848] munmap(0x7f2081aae000, 138412032) = 0 [pid 848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 848] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 848] close(3) = 0 [pid 848] mkdir("./file0", 0777) = 0 [ 34.675038][ T298] EXT4-fs (loop0): unmounting filesystem. [ 34.696531][ T848] loop0: detected capacity change from 0 to 512 [ 34.704105][ T848] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 848] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 848] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 848] chdir("./file0") = 0 [pid 848] ioctl(4, LOOP_CLR_FD) = 0 [pid 848] close(4) = 0 [pid 848] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 847] <... futex resumed>) = 0 [pid 847] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 847] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 848] <... futex resumed>) = 1 [pid 848] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 848] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 847] <... futex resumed>) = 0 [pid 847] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 847] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 848] <... futex resumed>) = 1 [pid 848] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 848] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 847] <... futex resumed>) = 0 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 847] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 847] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 848] <... write resumed>) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 847] <... futex resumed>) = 0 [pid 847] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 848] <... write resumed>) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 847] <... mmap resumed>) = 0x7f2089e8d000 [pid 847] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 847] rt_sigprocmask(SIG_BLOCK, ~[], [pid 848] <... write resumed>) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 847] <... rt_sigprocmask resumed>[], 8) = 0 [pid 847] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 848] <... write resumed>) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 850 attached [pid 847] <... clone3 resumed> => {parent_tid=[850]}, 88) = 850 [pid 848] <... write resumed>) = 7 [pid 850] set_robust_list(0x7f2089ead9a0, 24 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 847] rt_sigprocmask(SIG_SETMASK, [], [pid 850] <... set_robust_list resumed>) = 0 [pid 848] <... write resumed>) = 7 [pid 847] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 847] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 847] <... futex resumed>) = 0 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 847] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 848] <... write resumed>) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 850] rt_sigprocmask(SIG_SETMASK, [], [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 850] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 848] <... write resumed>) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 850] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 848] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 848] write(4, 0x20000180, 7 [pid 850] <... mmap resumed>) = 0x20000000 [pid 848] <... write resumed>) = 7 [pid 848] write(4, 0x20000180, 7) = 7 [pid 848] write(4, 0x20000180, 7) = 7 [pid 848] write(4, 0x20000180, 7) = 7 [pid 850] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 848] write(4, 0x20000180, 7) = 7 [pid 848] write(4, 0x20000180, 7) = 7 [pid 848] write(4, 0x20000180, 7) = 7 [pid 848] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 848] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 847] <... futex resumed>) = 0 [pid 847] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 848] <... futex resumed>) = 0 [pid 847] <... futex resumed>) = 1 [pid 848] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 847] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 848] <... socket resumed>) = 6 [pid 848] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 847] <... futex resumed>) = 0 [pid 850] <... futex resumed>) = 1 [pid 847] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 848] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 847] <... futex resumed>) = 0 [pid 848] <... setsockopt resumed>) = 0 [pid 847] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 848] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 848] <... futex resumed>) = 0 [pid 847] exit_group(0) = ? [pid 848] +++ exited with 0 +++ [pid 850] +++ exited with 0 +++ [pid 847] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=847, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./133/binderfs") = 0 umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./133/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./133") = 0 mkdir("./134", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 851 ./strace-static-x86_64: Process 851 attached [pid 851] set_robust_list(0x5555574f36a0, 24) = 0 [pid 851] chdir("./134") = 0 [pid 851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 851] setpgid(0, 0) = 0 [pid 851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 851] write(3, "1000", 4) = 4 [pid 851] close(3) = 0 [pid 851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 851] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 851] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 851] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 851] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 851] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 852 attached [pid 852] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 852] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 852] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 851] <... clone3 resumed> => {parent_tid=[852]}, 88) = 852 [pid 851] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 851] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 852] <... futex resumed>) = 0 [pid 852] memfd_create("syzkaller", 0) = 3 [pid 852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 851] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 852] munmap(0x7f2081aae000, 138412032) = 0 [pid 852] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 34.717591][ T848] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.727411][ T848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.755482][ T298] EXT4-fs (loop0): unmounting filesystem. [pid 852] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 852] close(3) = 0 [pid 852] mkdir("./file0", 0777) = 0 [pid 852] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 852] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 852] chdir("./file0") = 0 [pid 852] ioctl(4, LOOP_CLR_FD) = 0 [pid 852] close(4) = 0 [pid 852] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] <... futex resumed>) = 0 [pid 851] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 852] <... futex resumed>) = 1 [pid 852] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 852] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] <... futex resumed>) = 0 [pid 851] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 852] <... futex resumed>) = 1 [pid 852] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 852] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 851] <... futex resumed>) = 0 [pid 852] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 851] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 852] <... write resumed>) = 7 [pid 851] <... mmap resumed>) = 0x7f2089e8d000 [pid 851] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 852] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 852] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 852] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 852] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 852] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 852] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 852] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 851] <... mprotect resumed>) = 0 [pid 851] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 851] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 852] <... write resumed>) = 7 ./strace-static-x86_64: Process 854 attached [pid 852] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 851] <... clone3 resumed> => {parent_tid=[854]}, 88) = 854 [pid 851] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 851] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 854] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 852] <... write resumed>) = 7 [pid 854] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 854] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 852] write(4, 0x20000180, 7 [pid 854] <... mmap resumed>) = 0x20000000 [pid 852] <... write resumed>) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7 [pid 854] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 852] <... write resumed>) = 7 [pid 851] <... futex resumed>) = 0 [pid 851] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 854] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 852] write(4, 0x20000180, 7 [pid 854] <... socket resumed>) = 6 [pid 852] <... write resumed>) = 7 [pid 854] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] write(4, 0x20000180, 7 [pid 854] <... futex resumed>) = 1 [pid 851] <... futex resumed>) = 0 [pid 852] <... write resumed>) = 7 [pid 851] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 854] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 852] write(4, 0x20000180, 7) = 7 [pid 854] <... setsockopt resumed>) = 0 [pid 854] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] write(4, 0x20000180, 7 [pid 854] <... futex resumed>) = 1 [pid 852] <... write resumed>) = 7 [pid 851] <... futex resumed>) = 0 [pid 854] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] write(4, 0x20000180, 7) = 7 [pid 852] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 851] exit_group(0) = ? [pid 854] <... futex resumed>) = ? [pid 852] <... futex resumed>) = ? [pid 854] +++ exited with 0 +++ [pid 852] +++ exited with 0 +++ [pid 851] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=851, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./134/binderfs") = 0 [ 34.784296][ T852] loop0: detected capacity change from 0 to 512 [ 34.792941][ T852] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 34.806239][ T852] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.815828][ T852] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./134/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./134/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./134") = 0 mkdir("./135", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 855 ./strace-static-x86_64: Process 855 attached [pid 855] set_robust_list(0x5555574f36a0, 24) = 0 [pid 855] chdir("./135") = 0 [pid 855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 855] setpgid(0, 0) = 0 [pid 855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 855] write(3, "1000", 4) = 4 [pid 855] close(3) = 0 [pid 855] symlink("/dev/binderfs", "./binderfs") = 0 [pid 855] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 855] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 855] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 855] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 855] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 856 attached [pid 856] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 856] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 856] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] <... clone3 resumed> => {parent_tid=[856]}, 88) = 856 [pid 855] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 855] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 856] <... futex resumed>) = 0 [pid 856] memfd_create("syzkaller", 0) = 3 [pid 855] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 856] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 856] munmap(0x7f2081aae000, 138412032) = 0 [pid 856] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 856] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 856] close(3) = 0 [pid 856] mkdir("./file0", 0777) = 0 [ 34.853269][ T298] EXT4-fs (loop0): unmounting filesystem. [ 34.881122][ T856] loop0: detected capacity change from 0 to 512 [ 34.889496][ T856] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 856] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 856] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 856] chdir("./file0") = 0 [pid 856] ioctl(4, LOOP_CLR_FD) = 0 [pid 856] close(4) = 0 [pid 856] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = 0 [pid 855] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 856] <... futex resumed>) = 1 [pid 856] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 856] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = 0 [pid 855] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 856] <... futex resumed>) = 1 [pid 856] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 856] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = 0 [pid 855] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] <... futex resumed>) = 1 [pid 856] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 856] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 856] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 856] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 856] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 856] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 855] <... mmap resumed>) = 0x7f2089e8d000 [pid 856] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 855] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 856] <... write resumed>) = 7 [pid 856] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 855] <... mprotect resumed>) = 0 [pid 855] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 855] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 858 attached => {parent_tid=[858]}, 88) = 858 [pid 855] rt_sigprocmask(SIG_SETMASK, [], [pid 856] <... write resumed>) = 7 [pid 855] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 858] set_robust_list(0x7f2089ead9a0, 24 [pid 856] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 855] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... set_robust_list resumed>) = 0 [pid 856] <... write resumed>) = 7 [pid 858] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 858] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 856] write(4, 0x20000180, 7 [pid 858] <... mmap resumed>) = 0x20000000 [pid 856] <... write resumed>) = 7 [pid 858] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 858] <... futex resumed>) = 1 [pid 856] write(4, 0x20000180, 7 [pid 855] <... futex resumed>) = 0 [pid 855] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 858] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = 0 [pid 856] <... write resumed>) = 7 [pid 855] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... futex resumed>) = 1 [pid 856] write(4, 0x20000180, 7) = 7 [pid 858] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] write(4, 0x20000180, 7) = 7 [pid 856] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 858] <... setsockopt resumed>) = 0 [pid 858] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = 0 [pid 855] exit_group(0) = ? [pid 858] <... futex resumed>) = ? [pid 856] <... futex resumed>) = ? [pid 856] +++ exited with 0 +++ [pid 858] +++ exited with 0 +++ [pid 855] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=855, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./135/binderfs") = 0 [ 34.902637][ T856] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 34.912282][ T856] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./135/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./135/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./135") = 0 mkdir("./136", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 859 ./strace-static-x86_64: Process 859 attached [pid 859] set_robust_list(0x5555574f36a0, 24) = 0 [pid 859] chdir("./136") = 0 [pid 859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 859] setpgid(0, 0) = 0 [pid 859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 859] write(3, "1000", 4) = 4 [pid 859] close(3) = 0 [pid 859] symlink("/dev/binderfs", "./binderfs") = 0 [pid 859] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 859] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 859] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 859] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 859] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 859] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 860 attached => {parent_tid=[860]}, 88) = 860 [pid 860] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 860] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 860] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 859] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 859] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 860] <... futex resumed>) = 0 [pid 860] memfd_create("syzkaller", 0) = 3 [pid 860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 859] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 860] munmap(0x7f2081aae000, 138412032) = 0 [pid 860] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 860] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 860] close(3) = 0 [pid 860] mkdir("./file0", 0777) = 0 [ 34.947480][ T298] EXT4-fs (loop0): unmounting filesystem. [ 34.973865][ T860] loop0: detected capacity change from 0 to 512 [ 34.982237][ T860] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 860] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 860] chdir("./file0") = 0 [pid 860] ioctl(4, LOOP_CLR_FD) = 0 [pid 860] close(4) = 0 [pid 860] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 859] <... futex resumed>) = 0 [pid 859] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 859] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 860] <... futex resumed>) = 1 [pid 860] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 860] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 859] <... futex resumed>) = 0 [pid 860] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 859] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 860] <... open resumed>) = 5 [pid 859] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 860] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 859] <... futex resumed>) = 0 [pid 860] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 859] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 859] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... write resumed>) = 7 [pid 859] <... futex resumed>) = 0 [pid 860] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 860] <... write resumed>) = 7 [pid 859] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 860] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 859] <... mprotect resumed>) = 0 [pid 859] rt_sigprocmask(SIG_BLOCK, ~[], [pid 860] <... write resumed>) = 7 [pid 859] <... rt_sigprocmask resumed>[], 8) = 0 [pid 859] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 862 attached [pid 862] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 862] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 862] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 860] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 859] <... clone3 resumed> => {parent_tid=[862]}, 88) = 862 [pid 859] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 859] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 859] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 862] <... futex resumed>) = 0 [pid 862] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 860] <... write resumed>) = 7 [pid 862] <... mmap resumed>) = 0x20000000 [pid 862] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 859] <... futex resumed>) = 0 [pid 862] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 859] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 859] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 862] <... socket resumed>) = 6 [pid 862] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 862] <... futex resumed>) = 0 [pid 859] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 859] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 860] write(4, 0x20000180, 7 [pid 862] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 860] <... write resumed>) = 7 [pid 862] <... setsockopt resumed>) = 0 [pid 862] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 859] <... futex resumed>) = 0 [pid 862] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] write(4, 0x20000180, 7) = 7 [pid 860] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 860] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 859] exit_group(0 [pid 862] <... futex resumed>) = ? [pid 860] <... futex resumed>) = ? [pid 859] <... exit_group resumed>) = ? [pid 862] +++ exited with 0 +++ [pid 860] +++ exited with 0 +++ [pid 859] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=859, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./136/binderfs") = 0 [ 34.995463][ T860] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 35.005027][ T860] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./136/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./136/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./136") = 0 mkdir("./137", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 863 ./strace-static-x86_64: Process 863 attached [pid 863] set_robust_list(0x5555574f36a0, 24) = 0 [pid 863] chdir("./137") = 0 [pid 863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 863] setpgid(0, 0) = 0 [pid 863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 863] write(3, "1000", 4) = 4 [pid 863] close(3) = 0 [pid 863] symlink("/dev/binderfs", "./binderfs") = 0 [pid 863] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 863] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 863] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 863] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 863] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 863] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 864 attached => {parent_tid=[864]}, 88) = 864 [pid 863] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 863] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 863] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 864] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 864] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 864] memfd_create("syzkaller", 0) = 3 [pid 864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 864] munmap(0x7f2081aae000, 138412032) = 0 [pid 864] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 864] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 864] close(3) = 0 [pid 864] mkdir("./file0", 0777) = 0 [ 35.047489][ T298] EXT4-fs (loop0): unmounting filesystem. [ 35.072379][ T864] loop0: detected capacity change from 0 to 512 [ 35.080741][ T864] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [pid 864] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 864] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 864] chdir("./file0") = 0 [pid 864] ioctl(4, LOOP_CLR_FD) = 0 [pid 864] close(4) = 0 [pid 864] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 863] <... futex resumed>) = 0 [pid 863] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 863] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 864] <... futex resumed>) = 1 [pid 864] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 864] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 863] <... futex resumed>) = 0 [pid 863] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 863] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 864] <... futex resumed>) = 1 [pid 864] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 864] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 863] <... futex resumed>) = 0 [pid 863] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 863] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 863] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 863] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 863] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[866]}, 88) = 866 [pid 863] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 863] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 863] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 864] <... futex resumed>) = 1 [pid 864] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 864] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 864] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 864] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 864] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 866 attached ) = 7 [pid 866] set_robust_list(0x7f2089ead9a0, 24 [pid 864] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 866] <... set_robust_list resumed>) = 0 [pid 866] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 866] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 864] <... write resumed>) = 7 [pid 866] <... mmap resumed>) = 0x20000000 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7 [pid 866] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 863] <... futex resumed>) = 0 [pid 863] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 863] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 866] <... futex resumed>) = 1 [pid 866] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 864] <... write resumed>) = 7 [pid 866] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 863] <... futex resumed>) = 0 [pid 863] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 863] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 866] <... futex resumed>) = 1 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7 [pid 866] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 864] <... write resumed>) = 7 [pid 866] <... setsockopt resumed>) = 0 [pid 864] write(4, 0x20000180, 7) = 7 [pid 866] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 863] <... futex resumed>) = 0 [pid 866] <... futex resumed>) = 1 [pid 864] write(4, 0x20000180, 7 [pid 866] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 864] <... write resumed>) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] write(4, 0x20000180, 7) = 7 [pid 864] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 864] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 863] exit_group(0) = ? [pid 866] <... futex resumed>) = ? [pid 866] +++ exited with 0 +++ [pid 864] <... futex resumed>) = ? [pid 864] +++ exited with 0 +++ [pid 863] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=863, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./137/binderfs") = 0 umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./137/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./137/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./137") = 0 mkdir("./138", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 867 ./strace-static-x86_64: Process 867 attached [pid 867] set_robust_list(0x5555574f36a0, 24) = 0 [pid 867] chdir("./138") = 0 [pid 867] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 867] setpgid(0, 0) = 0 [pid 867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 867] write(3, "1000", 4) = 4 [pid 867] close(3) = 0 [pid 867] symlink("/dev/binderfs", "./binderfs") = 0 [pid 867] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 867] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 867] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 867] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 867] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 867] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 867] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 868 attached [pid 868] set_robust_list(0x7f2089ece9a0, 24 [pid 867] <... clone3 resumed> => {parent_tid=[868]}, 88) = 868 [pid 868] <... set_robust_list resumed>) = 0 [pid 867] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 868] rt_sigprocmask(SIG_SETMASK, [], [pid 867] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 867] <... futex resumed>) = 0 [pid 867] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 868] memfd_create("syzkaller", 0) = 3 [pid 868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 868] munmap(0x7f2081aae000, 138412032) = 0 [pid 868] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 35.094049][ T864] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 868] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 868] close(3) = 0 [pid 868] mkdir("./file0", 0777) = 0 [pid 868] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 868] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 868] chdir("./file0") = 0 [pid 868] ioctl(4, LOOP_CLR_FD) = 0 [pid 868] close(4) = 0 [pid 868] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 867] <... futex resumed>) = 0 [pid 867] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 867] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 868] <... futex resumed>) = 1 [pid 868] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 868] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 867] <... futex resumed>) = 0 [pid 867] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 867] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 868] <... futex resumed>) = 1 [pid 868] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 868] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 867] <... futex resumed>) = 0 [pid 867] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 867] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 867] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 867] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 867] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 867] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[870]}, 88) = 870 [pid 867] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 867] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 867] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 868] <... futex resumed>) = 1 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 868] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 870 attached [pid 870] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 870] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 870] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 870] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 867] <... futex resumed>) = 0 [pid 867] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] <... futex resumed>) = 0 [pid 867] <... futex resumed>) = 1 [pid 868] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 867] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 868] <... socket resumed>) = 6 [pid 868] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 867] <... futex resumed>) = 0 [pid 867] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 867] <... futex resumed>) = 0 [pid 868] <... setsockopt resumed>) = 0 [pid 867] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 868] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 867] exit_group(0) = ? [pid 868] <... futex resumed>) = ? [pid 868] +++ exited with 0 +++ [pid 870] <... futex resumed>) = ? [pid 870] +++ exited with 0 +++ [pid 867] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=867, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./138/binderfs") = 0 umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./138/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./138/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./138") = 0 mkdir("./139", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 871 ./strace-static-x86_64: Process 871 attached [pid 871] set_robust_list(0x5555574f36a0, 24) = 0 [pid 871] chdir("./139") = 0 [pid 871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 871] setpgid(0, 0) = 0 [pid 871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 871] write(3, "1000", 4) = 4 [pid 871] close(3) = 0 [pid 871] symlink("/dev/binderfs", "./binderfs") = 0 [pid 871] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 871] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 871] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 871] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 871] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[872]}, 88) = 872 [pid 871] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 871] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 871] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 872 attached [pid 872] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 872] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 872] memfd_create("syzkaller", 0) = 3 [pid 872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 872] munmap(0x7f2081aae000, 138412032) = 0 [pid 872] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 35.143935][ T868] loop0: detected capacity change from 0 to 512 [ 35.152471][ T868] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 35.165725][ T868] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 872] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 872] close(3) = 0 [pid 872] mkdir("./file0", 0777) = 0 [pid 872] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 872] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 872] chdir("./file0") = 0 [pid 872] ioctl(4, LOOP_CLR_FD) = 0 [pid 872] close(4) = 0 [pid 872] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] <... futex resumed>) = 0 [pid 871] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 871] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] <... futex resumed>) = 1 [pid 872] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 872] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] <... futex resumed>) = 0 [pid 871] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 871] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] <... futex resumed>) = 1 [pid 872] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 872] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 871] <... futex resumed>) = 0 [pid 871] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 871] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 871] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 871] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[874]}, 88) = 874 [pid 871] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 871] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 871] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 872] <... futex resumed>) = 1 [pid 872] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 872] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 872] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 872] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 872] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 872] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 872] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 872] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 874 attached [pid 874] set_robust_list(0x7f2089ead9a0, 24 [pid 872] <... write resumed>) = 7 [pid 874] <... set_robust_list resumed>) = 0 [pid 872] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 874] rt_sigprocmask(SIG_SETMASK, [], [pid 872] <... write resumed>) = 7 [pid 874] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 874] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 872] write(4, 0x20000180, 7 [pid 874] <... mmap resumed>) = 0x20000000 [pid 872] <... write resumed>) = 7 [pid 874] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] write(4, 0x20000180, 7 [pid 874] <... futex resumed>) = 1 [pid 872] <... write resumed>) = 7 [pid 871] <... futex resumed>) = 0 [pid 874] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 872] write(4, 0x20000180, 7 [pid 871] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 871] <... futex resumed>) = 0 [pid 874] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 872] <... write resumed>) = 7 [pid 871] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 874] <... socket resumed>) = 6 [pid 872] write(4, 0x20000180, 7 [pid 874] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] <... write resumed>) = 7 [pid 871] <... futex resumed>) = 0 [pid 871] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 871] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 874] <... futex resumed>) = 1 [pid 872] write(4, 0x20000180, 7) = 7 [pid 874] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 872] write(4, 0x20000180, 7) = 7 [pid 874] <... setsockopt resumed>) = 0 [pid 872] write(4, 0x20000180, 7) = 7 [pid 874] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 872] write(4, 0x20000180, 7 [pid 871] <... futex resumed>) = 0 [pid 874] <... futex resumed>) = 1 [pid 872] <... write resumed>) = 7 [pid 874] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] write(4, 0x20000180, 7) = 7 [pid 872] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 872] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 871] exit_group(0) = ? [pid 874] <... futex resumed>) = ? [pid 874] +++ exited with 0 +++ [pid 872] <... futex resumed>) = ? [pid 872] +++ exited with 0 +++ [pid 871] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=871, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./139/binderfs") = 0 umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./139/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./139/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./139") = 0 mkdir("./140", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 876 ./strace-static-x86_64: Process 876 attached [pid 876] set_robust_list(0x5555574f36a0, 24) = 0 [pid 876] chdir("./140") = 0 [pid 876] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 876] setpgid(0, 0) = 0 [pid 876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 876] write(3, "1000", 4) = 4 [pid 876] close(3) = 0 [pid 876] symlink("/dev/binderfs", "./binderfs") = 0 [pid 876] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 876] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 876] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 876] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 876] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 876] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 876] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 877 attached => {parent_tid=[877]}, 88) = 877 [pid 876] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 876] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 876] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 877] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 877] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 877] memfd_create("syzkaller", 0) = 3 [pid 877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 877] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 877] munmap(0x7f2081aae000, 138412032) = 0 [pid 877] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 35.213688][ T872] loop0: detected capacity change from 0 to 512 [ 35.221834][ T872] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 35.235054][ T872] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 877] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 877] close(3) = 0 [pid 877] mkdir("./file0", 0777) = 0 [pid 877] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 877] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 877] chdir("./file0") = 0 [pid 877] ioctl(4, LOOP_CLR_FD) = 0 [pid 877] close(4) = 0 [pid 877] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 876] <... futex resumed>) = 0 [pid 876] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 876] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 877] <... futex resumed>) = 1 [pid 877] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 877] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 876] <... futex resumed>) = 0 [pid 876] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 876] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 877] <... futex resumed>) = 1 [pid 877] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 877] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 876] <... futex resumed>) = 0 [pid 876] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 876] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 876] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 876] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 876] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 876] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[879]}, 88) = 879 [pid 876] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 876] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 876] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 877] <... futex resumed>) = 1 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 877] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 877] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 879 attached [pid 879] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 879] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 879] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 879] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 876] <... futex resumed>) = 0 [pid 876] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 876] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 877] <... futex resumed>) = 0 [pid 877] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 877] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 876] <... futex resumed>) = 0 [pid 876] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 876] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 877] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 877] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 876] <... futex resumed>) = 0 [pid 876] exit_group(0) = ? [pid 877] <... futex resumed>) = ? [pid 877] +++ exited with 0 +++ [pid 879] <... futex resumed>) = ? [pid 879] +++ exited with 0 +++ [pid 876] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=876, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./140/binderfs") = 0 umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./140/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./140/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./140") = 0 mkdir("./141", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 880 ./strace-static-x86_64: Process 880 attached [pid 880] set_robust_list(0x5555574f36a0, 24) = 0 [pid 880] chdir("./141") = 0 [pid 880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 880] setpgid(0, 0) = 0 [pid 880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 880] write(3, "1000", 4) = 4 [pid 880] close(3) = 0 [pid 880] symlink("/dev/binderfs", "./binderfs") = 0 [pid 880] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 880] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 880] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 880] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 880] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 880] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 880] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 881 attached => {parent_tid=[881]}, 88) = 881 [pid 880] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 880] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] set_robust_list(0x7f2089ece9a0, 24 [pid 880] <... futex resumed>) = 0 [pid 880] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 881] <... set_robust_list resumed>) = 0 [pid 881] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 881] memfd_create("syzkaller", 0) = 3 [pid 881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 881] munmap(0x7f2081aae000, 138412032) = 0 [pid 881] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 35.283708][ T877] loop0: detected capacity change from 0 to 512 [ 35.292279][ T877] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 35.305552][ T877] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 881] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 881] close(3) = 0 [pid 881] mkdir("./file0", 0777) = 0 [pid 881] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 881] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 881] chdir("./file0") = 0 [pid 881] ioctl(4, LOOP_CLR_FD) = 0 [pid 881] close(4) = 0 [pid 881] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 880] <... futex resumed>) = 0 [pid 880] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 880] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 881] <... futex resumed>) = 1 [pid 881] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 881] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 880] <... futex resumed>) = 0 [pid 880] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 880] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 881] <... futex resumed>) = 1 [pid 881] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 881] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 880] <... futex resumed>) = 0 [pid 880] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 880] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 880] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 880] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 880] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 880] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[883]}, 88) = 883 [pid 880] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 880] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 880] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 881] <... futex resumed>) = 1 [pid 881] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 881] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 881] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 881] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 881] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 881] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 881] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 881] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 883 attached ) = 7 [pid 883] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 881] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 883] rt_sigprocmask(SIG_SETMASK, [], [pid 881] <... write resumed>) = 7 [pid 883] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 883] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7 [pid 883] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... write resumed>) = 7 [pid 880] <... futex resumed>) = 0 [pid 880] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 880] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 883] <... futex resumed>) = 1 [pid 883] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 881] write(4, 0x20000180, 7 [pid 883] <... socket resumed>) = 6 [pid 883] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... write resumed>) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7 [pid 880] <... futex resumed>) = 0 [pid 883] <... futex resumed>) = 1 [pid 880] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 880] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 881] <... write resumed>) = 7 [pid 881] write(4, 0x20000180, 7 [pid 883] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 881] <... write resumed>) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 883] <... setsockopt resumed>) = 0 [pid 881] write(4, 0x20000180, 7) = 7 [pid 883] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] write(4, 0x20000180, 7 [pid 883] <... futex resumed>) = 1 [pid 880] <... futex resumed>) = 0 [pid 881] <... write resumed>) = 7 [pid 883] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] write(4, 0x20000180, 7) = 7 [pid 881] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 880] exit_group(0) = ? [pid 881] +++ exited with 0 +++ [pid 883] <... futex resumed>) = ? [pid 883] +++ exited with 0 +++ [pid 880] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=880, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./141/binderfs") = 0 umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./141/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./141/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./141") = 0 mkdir("./142", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 884 ./strace-static-x86_64: Process 884 attached [pid 884] set_robust_list(0x5555574f36a0, 24) = 0 [pid 884] chdir("./142") = 0 [pid 884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 884] setpgid(0, 0) = 0 [pid 884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 884] write(3, "1000", 4) = 4 [pid 884] close(3) = 0 [pid 884] symlink("/dev/binderfs", "./binderfs") = 0 [pid 884] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 884] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 884] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 884] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 884] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 884] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[885]}, 88) = 885 ./strace-static-x86_64: Process 885 attached [pid 885] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 885] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 885] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 884] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 884] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 885] <... futex resumed>) = 0 [pid 885] memfd_create("syzkaller", 0) = 3 [pid 885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 884] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 885] munmap(0x7f2081aae000, 138412032) = 0 [pid 885] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 35.346160][ T881] loop0: detected capacity change from 0 to 512 [ 35.353759][ T881] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 35.366937][ T881] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 885] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 885] close(3) = 0 [pid 885] mkdir("./file0", 0777) = 0 [pid 885] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 885] chdir("./file0") = 0 [pid 885] ioctl(4, LOOP_CLR_FD) = 0 [pid 885] close(4) = 0 [pid 885] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 884] <... futex resumed>) = 0 [pid 884] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 884] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 885] <... futex resumed>) = 1 [pid 885] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 885] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 884] <... futex resumed>) = 0 [pid 884] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 884] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 885] <... futex resumed>) = 1 [pid 885] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 885] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 884] <... futex resumed>) = 0 [pid 884] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 884] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 884] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 884] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 884] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 887 attached => {parent_tid=[887]}, 88) = 887 [pid 887] set_robust_list(0x7f2089ead9a0, 24 [pid 884] rt_sigprocmask(SIG_SETMASK, [], [pid 887] <... set_robust_list resumed>) = 0 [pid 884] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 887] rt_sigprocmask(SIG_SETMASK, [], [pid 884] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 887] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 884] <... futex resumed>) = 0 [pid 887] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 884] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 885] <... futex resumed>) = 1 [pid 887] <... mmap resumed>) = 0x20000000 [pid 887] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 884] <... futex resumed>) = 0 [pid 887] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 885] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 884] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 887] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 884] <... futex resumed>) = 0 [pid 884] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = ? [pid 887] +++ killed by SIGBUS +++ [pid 885] +++ killed by SIGBUS +++ [pid 884] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=884, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./142/binderfs") = 0 umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./142/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./142/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./142") = 0 mkdir("./143", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 888 ./strace-static-x86_64: Process 888 attached [pid 888] set_robust_list(0x5555574f36a0, 24) = 0 [pid 888] chdir("./143") = 0 [pid 888] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 888] setpgid(0, 0) = 0 [pid 888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 888] write(3, "1000", 4) = 4 [pid 888] close(3) = 0 [pid 888] symlink("/dev/binderfs", "./binderfs") = 0 [pid 888] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 888] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 888] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 888] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 888] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 888] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[889]}, 88) = 889 ./strace-static-x86_64: Process 889 attached [pid 889] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 889] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 889] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 888] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 888] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... futex resumed>) = 0 [pid 888] <... futex resumed>) = 1 [pid 888] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 889] memfd_create("syzkaller", 0) = 3 [pid 889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 889] munmap(0x7f2081aae000, 138412032) = 0 [pid 889] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 35.408008][ T885] loop0: detected capacity change from 0 to 512 [ 35.416380][ T885] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 35.429534][ T885] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 889] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 889] close(3) = 0 [pid 889] mkdir("./file0", 0777) = 0 [pid 889] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 889] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 889] chdir("./file0") = 0 [pid 889] ioctl(4, LOOP_CLR_FD) = 0 [pid 889] close(4) = 0 [pid 889] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] <... futex resumed>) = 0 [pid 888] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 888] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 889] <... futex resumed>) = 1 [pid 889] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 889] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] <... futex resumed>) = 0 [pid 888] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 888] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 889] <... futex resumed>) = 1 [pid 889] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 889] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] <... futex resumed>) = 0 [pid 888] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 888] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 888] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 888] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 888] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[891]}, 88) = 891 [pid 888] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 888] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 888] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 889] <... futex resumed>) = 1 [pid 889] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 889] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 889] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 889] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 891 attached [pid 891] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 891] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 891] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 889] write(4, 0x20000180, 7 [pid 891] <... mmap resumed>) = 0x20000000 [pid 891] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 888] <... futex resumed>) = 0 [pid 891] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 888] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 888] <... futex resumed>) = 0 [pid 891] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 888] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 891] <... socket resumed>) = 6 [pid 891] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 888] <... futex resumed>) = 0 [pid 888] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 888] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 891] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 891] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 888] <... futex resumed>) = 0 [pid 891] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 889] <... write resumed>) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] write(4, 0x20000180, 7) = 7 [pid 889] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 889] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 888] exit_group(0 [pid 891] <... futex resumed>) = ? [pid 889] <... futex resumed>) = ? [pid 888] <... exit_group resumed>) = ? [pid 891] +++ exited with 0 +++ [pid 889] +++ exited with 0 +++ [pid 888] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=888, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./143/binderfs") = 0 umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./143/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./143/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./143") = 0 mkdir("./144", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 892 ./strace-static-x86_64: Process 892 attached [pid 892] set_robust_list(0x5555574f36a0, 24) = 0 [pid 892] chdir("./144") = 0 [pid 892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 892] setpgid(0, 0) = 0 [pid 892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 892] write(3, "1000", 4) = 4 [pid 892] close(3) = 0 [pid 892] symlink("/dev/binderfs", "./binderfs") = 0 [pid 892] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 892] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 892] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 892] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 892] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 892] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 892] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[893]}, 88) = 893 ./strace-static-x86_64: Process 893 attached [pid 893] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 893] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 893] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 892] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 892] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 893] <... futex resumed>) = 0 [pid 893] memfd_create("syzkaller", 0) = 3 [pid 893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 892] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 893] <... mmap resumed>) = 0x7f2081aae000 [pid 893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 893] munmap(0x7f2081aae000, 138412032) = 0 [pid 893] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 35.479295][ T889] loop0: detected capacity change from 0 to 512 [ 35.487207][ T889] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 35.500673][ T889] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 893] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 893] close(3) = 0 [pid 893] mkdir("./file0", 0777) = 0 [pid 893] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 893] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 893] chdir("./file0") = 0 [pid 893] ioctl(4, LOOP_CLR_FD) = 0 [pid 893] close(4) = 0 [pid 893] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 892] <... futex resumed>) = 0 [pid 892] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 892] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 893] <... futex resumed>) = 1 [pid 893] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 893] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 892] <... futex resumed>) = 0 [pid 892] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 892] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 893] <... futex resumed>) = 1 [pid 893] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 893] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 892] <... futex resumed>) = 0 [pid 892] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 892] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 892] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 892] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 892] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 892] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[895]}, 88) = 895 [pid 892] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 892] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 892] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 893] <... futex resumed>) = 1 [pid 893] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 893] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 895 attached [pid 895] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 895] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 895] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 893] write(4, 0x20000180, 7 [pid 895] <... mmap resumed>) = 0x20000000 [pid 895] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 892] <... futex resumed>) = 0 [pid 895] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 892] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 895] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 892] <... futex resumed>) = 0 [pid 895] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 892] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 895] <... socket resumed>) = 6 [pid 895] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 892] <... futex resumed>) = 0 [pid 895] <... futex resumed>) = 1 [pid 892] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 892] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 895] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 895] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 892] <... futex resumed>) = 0 [pid 895] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 893] <... write resumed>) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] write(4, 0x20000180, 7) = 7 [pid 893] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 893] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 892] exit_group(0) = ? [pid 895] <... futex resumed>) = ? [pid 893] <... futex resumed>) = ? [pid 893] +++ exited with 0 +++ [pid 895] +++ exited with 0 +++ [pid 892] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=892, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./144/binderfs") = 0 umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./144/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./144/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./144") = 0 mkdir("./145", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 896 ./strace-static-x86_64: Process 896 attached [pid 896] set_robust_list(0x5555574f36a0, 24) = 0 [pid 896] chdir("./145") = 0 [pid 896] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 896] setpgid(0, 0) = 0 [pid 896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 896] write(3, "1000", 4) = 4 [pid 896] close(3) = 0 [pid 896] symlink("/dev/binderfs", "./binderfs") = 0 [pid 896] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 896] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 896] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 896] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 896] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 896] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 896] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 897 attached => {parent_tid=[897]}, 88) = 897 [pid 897] set_robust_list(0x7f2089ece9a0, 24 [pid 896] rt_sigprocmask(SIG_SETMASK, [], [pid 897] <... set_robust_list resumed>) = 0 [pid 896] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 897] rt_sigprocmask(SIG_SETMASK, [], [pid 896] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 897] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 896] <... futex resumed>) = 0 [pid 897] memfd_create("syzkaller", 0 [pid 896] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 897] <... memfd_create resumed>) = 3 [pid 897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 897] munmap(0x7f2081aae000, 138412032) = 0 [pid 897] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 35.543258][ T893] loop0: detected capacity change from 0 to 512 [ 35.551323][ T893] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 35.564583][ T893] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 897] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 897] close(3) = 0 [pid 897] mkdir("./file0", 0777) = 0 [pid 897] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 897] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 897] chdir("./file0") = 0 [pid 897] ioctl(4, LOOP_CLR_FD) = 0 [pid 897] close(4) = 0 [pid 897] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 897] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 896] <... futex resumed>) = 0 [pid 896] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 896] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 897] <... futex resumed>) = 0 [pid 897] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 897] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 896] <... futex resumed>) = 0 [pid 897] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 896] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 896] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 897] <... futex resumed>) = 0 [pid 897] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 897] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 897] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 896] <... futex resumed>) = 0 [pid 896] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 896] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 896] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 896] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 897] <... futex resumed>) = 0 [pid 896] <... mprotect resumed>) = 0 [pid 896] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 896] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[899]}, 88) = 899 [pid 896] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 896] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 896] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 899 attached [pid 899] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 899] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 899] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 899] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 896] <... futex resumed>) = 0 [pid 896] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 896] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 899] <... futex resumed>) = 1 [pid 899] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 899] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 896] <... futex resumed>) = 0 [pid 896] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 896] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 899] <... futex resumed>) = 1 [pid 899] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 896] <... futex resumed>) = ? [pid 897] +++ killed by SIGBUS +++ [pid 899] +++ killed by SIGBUS +++ [pid 896] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=896, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./145/binderfs") = 0 umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./145/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./145/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./145") = 0 mkdir("./146", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 900 ./strace-static-x86_64: Process 900 attached [pid 900] set_robust_list(0x5555574f36a0, 24) = 0 [pid 900] chdir("./146") = 0 [pid 900] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 900] setpgid(0, 0) = 0 [pid 900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 900] write(3, "1000", 4) = 4 [pid 900] close(3) = 0 [pid 900] symlink("/dev/binderfs", "./binderfs") = 0 [pid 900] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 900] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 900] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 900] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 900] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 900] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 900] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[901]}, 88) = 901 [pid 900] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 900] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 901 attached [pid 900] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 901] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 901] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 901] memfd_create("syzkaller", 0) = 3 [pid 901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 901] munmap(0x7f2081aae000, 138412032) = 0 [ 35.612070][ T897] loop0: detected capacity change from 0 to 512 [ 35.620426][ T897] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 35.633782][ T897] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 901] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 901] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 901] close(3) = 0 [pid 901] mkdir("./file0", 0777) = 0 [pid 901] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 901] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 901] chdir("./file0") = 0 [pid 901] ioctl(4, LOOP_CLR_FD) = 0 [pid 901] close(4) = 0 [pid 901] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] <... futex resumed>) = 0 [pid 900] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 900] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 901] <... futex resumed>) = 1 [pid 901] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 901] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] <... futex resumed>) = 0 [pid 900] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 900] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 901] <... futex resumed>) = 1 [pid 901] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 901] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] <... futex resumed>) = 0 [pid 900] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 900] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 900] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 900] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 901] <... futex resumed>) = 1 [pid 900] rt_sigprocmask(SIG_BLOCK, ~[], [pid 901] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 900] <... rt_sigprocmask resumed>[], 8) = 0 [pid 900] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[903]}, 88) = 903 [pid 900] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 900] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 900] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 903 attached [pid 903] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 903] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 903] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 901] <... write resumed>) = -1 EFAULT (Bad address) [pid 903] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] <... futex resumed>) = 0 [pid 900] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 900] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 903] <... futex resumed>) = 1 [pid 903] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 903] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] <... futex resumed>) = 0 [pid 900] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 900] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 903] <... futex resumed>) = 1 [pid 903] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 900] <... futex resumed>) = ? [pid 901] +++ killed by SIGBUS +++ [pid 903] +++ killed by SIGBUS +++ [pid 900] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=900, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./146/binderfs") = 0 umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./146/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./146/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./146/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./146") = 0 mkdir("./147", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 904 ./strace-static-x86_64: Process 904 attached [pid 904] set_robust_list(0x5555574f36a0, 24) = 0 [pid 904] chdir("./147") = 0 [pid 904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 904] setpgid(0, 0) = 0 [pid 904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 904] write(3, "1000", 4) = 4 [pid 904] close(3) = 0 [pid 904] symlink("/dev/binderfs", "./binderfs") = 0 [pid 904] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 904] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 904] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 904] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 904] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 904] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[905]}, 88) = 905 [pid 904] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 904] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 904] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 905 attached [pid 905] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 905] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 905] memfd_create("syzkaller", 0) = 3 [pid 905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 905] munmap(0x7f2081aae000, 138412032) = 0 [pid 905] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 35.672930][ T901] loop0: detected capacity change from 0 to 512 [ 35.680755][ T901] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 35.693832][ T901] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 905] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 905] close(3) = 0 [pid 905] mkdir("./file0", 0777) = 0 [pid 905] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 905] chdir("./file0") = 0 [pid 905] ioctl(4, LOOP_CLR_FD) = 0 [pid 905] close(4) = 0 [pid 905] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] <... futex resumed>) = 0 [pid 904] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 904] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 905] <... futex resumed>) = 1 [pid 905] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 905] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 905] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 904] <... futex resumed>) = 0 [pid 904] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 904] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 905] <... futex resumed>) = 0 [pid 905] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 905] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] <... futex resumed>) = 0 [pid 904] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 904] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 904] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 905] <... futex resumed>) = 1 [pid 904] <... mprotect resumed>) = 0 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 904] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 904] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 904] <... clone3 resumed> => {parent_tid=[907]}, 88) = 907 [pid 904] rt_sigprocmask(SIG_SETMASK, [], [pid 905] <... write resumed>) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 907 attached [pid 904] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 904] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 904] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 905] <... write resumed>) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 907] set_robust_list(0x7f2089ead9a0, 24 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 907] <... set_robust_list resumed>) = 0 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 905] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 905] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 907] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 907] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 907] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] <... futex resumed>) = 0 [pid 904] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 904] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 905] <... futex resumed>) = 0 [pid 905] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 905] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] <... futex resumed>) = 0 [pid 904] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 904] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 905] <... futex resumed>) = 1 [pid 907] <... futex resumed>) = 1 [pid 907] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 905] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 905] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] <... futex resumed>) = 0 [pid 904] exit_group(0) = ? [pid 907] <... futex resumed>) = ? [pid 907] +++ exited with 0 +++ [pid 905] <... futex resumed>) = ? [pid 905] +++ exited with 0 +++ [pid 904] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=904, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./147/binderfs") = 0 umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./147/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./147/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./147/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./147") = 0 mkdir("./148", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 908 ./strace-static-x86_64: Process 908 attached [pid 908] set_robust_list(0x5555574f36a0, 24) = 0 [pid 908] chdir("./148") = 0 [pid 908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 908] setpgid(0, 0) = 0 [pid 908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 908] write(3, "1000", 4) = 4 [pid 908] close(3) = 0 [pid 908] symlink("/dev/binderfs", "./binderfs") = 0 [pid 908] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 908] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 908] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 908] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 908] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 908] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 909 attached => {parent_tid=[909]}, 88) = 909 [pid 909] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 909] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 909] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 908] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 908] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 909] <... futex resumed>) = 0 [pid 909] memfd_create("syzkaller", 0) = 3 [pid 909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 908] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 909] munmap(0x7f2081aae000, 138412032) = 0 [pid 909] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 35.734390][ T905] loop0: detected capacity change from 0 to 512 [ 35.742473][ T905] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 35.755845][ T905] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 909] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 909] close(3) = 0 [pid 909] mkdir("./file0", 0777) = 0 [pid 909] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 909] chdir("./file0") = 0 [pid 909] ioctl(4, LOOP_CLR_FD) = 0 [pid 909] close(4) = 0 [pid 909] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 908] <... futex resumed>) = 0 [pid 908] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 908] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 909] <... futex resumed>) = 1 [pid 909] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 909] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 908] <... futex resumed>) = 0 [pid 909] <... futex resumed>) = 1 [pid 908] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 908] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 909] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 909] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 908] <... futex resumed>) = 0 [pid 908] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 908] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 908] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 908] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 908] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 908] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[911]}, 88) = 911 [pid 908] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 908] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 908] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 909] <... futex resumed>) = 1 [pid 909] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 909] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 909] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 909] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 909] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 911 attached [pid 909] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 911] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 911] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 911] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 909] <... write resumed>) = 7 [pid 911] <... mmap resumed>) = 0x20000000 [pid 909] write(4, 0x20000180, 7 [pid 911] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 908] <... futex resumed>) = 0 [pid 908] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 908] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 911] <... futex resumed>) = 1 [pid 911] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 909] <... write resumed>) = 7 [pid 911] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 908] <... futex resumed>) = 0 [pid 908] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 909] write(4, 0x20000180, 7 [pid 908] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 911] <... futex resumed>) = 1 [pid 909] <... write resumed>) = 7 [pid 909] write(4, 0x20000180, 7 [pid 911] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 909] <... write resumed>) = 7 [pid 911] <... setsockopt resumed>) = 0 [pid 909] write(4, 0x20000180, 7 [pid 911] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 909] <... write resumed>) = 7 [pid 908] <... futex resumed>) = 0 [pid 911] <... futex resumed>) = 1 [pid 911] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] write(4, 0x20000180, 7) = 7 [pid 909] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 909] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 908] exit_group(0) = ? [pid 911] <... futex resumed>) = ? [pid 909] <... futex resumed>) = ? [pid 909] +++ exited with 0 +++ [pid 911] +++ exited with 0 +++ [pid 908] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=908, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./148/binderfs") = 0 umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./148/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./148/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./148/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./148") = 0 mkdir("./149", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 912 ./strace-static-x86_64: Process 912 attached [pid 912] set_robust_list(0x5555574f36a0, 24) = 0 [pid 912] chdir("./149") = 0 [pid 912] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 912] setpgid(0, 0) = 0 [pid 912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 912] write(3, "1000", 4) = 4 [pid 912] close(3) = 0 [pid 912] symlink("/dev/binderfs", "./binderfs") = 0 [pid 912] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 912] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 912] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 912] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 912] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 912] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 912] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 913 attached => {parent_tid=[913]}, 88) = 913 [pid 913] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 912] rt_sigprocmask(SIG_SETMASK, [], [pid 913] rt_sigprocmask(SIG_SETMASK, [], [pid 912] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 913] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 912] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 912] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 913] memfd_create("syzkaller", 0) = 3 [pid 913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 913] munmap(0x7f2081aae000, 138412032) = 0 [pid 913] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 35.801924][ T909] loop0: detected capacity change from 0 to 512 [ 35.809612][ T909] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 35.822879][ T909] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 913] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 913] close(3) = 0 [pid 913] mkdir("./file0", 0777) = 0 [pid 913] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 913] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 913] chdir("./file0") = 0 [pid 913] ioctl(4, LOOP_CLR_FD) = 0 [pid 913] close(4) = 0 [pid 913] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 912] <... futex resumed>) = 0 [pid 912] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 912] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 913] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 913] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 912] <... futex resumed>) = 0 [pid 912] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 912] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 913] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 913] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 912] <... futex resumed>) = 0 [pid 912] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 912] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 912] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 912] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 912] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 912] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 915 attached [pid 915] set_robust_list(0x7f2089ead9a0, 24 [pid 912] <... clone3 resumed> => {parent_tid=[915]}, 88) = 915 [pid 915] <... set_robust_list resumed>) = 0 [pid 913] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 915] rt_sigprocmask(SIG_SETMASK, [], [pid 912] rt_sigprocmask(SIG_SETMASK, [], [pid 915] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 913] <... write resumed>) = 7 [pid 915] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 913] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 912] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 912] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 913] <... write resumed>) = 7 [pid 912] <... futex resumed>) = 1 [pid 915] <... futex resumed>) = 0 [pid 913] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 915] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 912] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 915] <... mmap resumed>) = 0x20000000 [pid 913] <... write resumed>) = 7 [pid 915] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 913] write(4, 0x20000180, 7 [pid 915] <... futex resumed>) = 1 [pid 912] <... futex resumed>) = 0 [pid 913] <... write resumed>) = 7 [pid 915] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 912] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 913] write(4, 0x20000180, 7 [pid 912] <... futex resumed>) = 0 [pid 915] <... socket resumed>) = 6 [pid 913] <... write resumed>) = 7 [pid 912] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 915] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 913] write(4, 0x20000180, 7 [pid 915] <... futex resumed>) = 0 [pid 912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 915] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 913] <... write resumed>) = 7 [pid 915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 912] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 913] write(4, 0x20000180, 7 [pid 912] <... futex resumed>) = 0 [pid 912] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 915] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 913] <... write resumed>) = 7 [pid 915] <... setsockopt resumed>) = 0 [pid 913] write(4, 0x20000180, 7 [pid 915] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 913] <... write resumed>) = 7 [pid 915] <... futex resumed>) = 1 [pid 913] write(4, 0x20000180, 7 [pid 912] <... futex resumed>) = 0 [pid 915] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 913] <... write resumed>) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] write(4, 0x20000180, 7) = 7 [pid 913] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 913] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 912] exit_group(0 [pid 915] <... futex resumed>) = ? [pid 913] <... futex resumed>) = ? [pid 912] <... exit_group resumed>) = ? [pid 915] +++ exited with 0 +++ [pid 913] +++ exited with 0 +++ [pid 912] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=912, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./149/binderfs") = 0 umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./149/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./149/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./149/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./149") = 0 mkdir("./150", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 916 ./strace-static-x86_64: Process 916 attached [pid 916] set_robust_list(0x5555574f36a0, 24) = 0 [pid 916] chdir("./150") = 0 [pid 916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 916] setpgid(0, 0) = 0 [pid 916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 916] write(3, "1000", 4) = 4 [pid 916] close(3) = 0 [pid 916] symlink("/dev/binderfs", "./binderfs") = 0 [pid 916] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 916] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 916] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 916] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 916] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 916] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 917 attached => {parent_tid=[917]}, 88) = 917 [pid 917] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 916] rt_sigprocmask(SIG_SETMASK, [], [pid 917] rt_sigprocmask(SIG_SETMASK, [], [pid 916] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 917] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 916] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 916] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 917] memfd_create("syzkaller", 0) = 3 [pid 917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 917] munmap(0x7f2081aae000, 138412032) = 0 [pid 917] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 35.864711][ T913] loop0: detected capacity change from 0 to 512 [ 35.872703][ T913] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 35.886076][ T913] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 917] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 917] close(3) = 0 [pid 917] mkdir("./file0", 0777) = 0 [pid 917] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 917] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 917] chdir("./file0") = 0 [pid 917] ioctl(4, LOOP_CLR_FD) = 0 [pid 917] close(4) = 0 [pid 917] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 916] <... futex resumed>) = 0 [pid 916] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 916] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 917] <... futex resumed>) = 1 [pid 917] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 917] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 916] <... futex resumed>) = 0 [pid 916] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 916] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 917] <... futex resumed>) = 1 [pid 917] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 917] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 916] <... futex resumed>) = 0 [pid 916] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 916] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 916] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 916] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 916] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[919]}, 88) = 919 [pid 916] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 916] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 916] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 917] <... futex resumed>) = 1 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 919 attached [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 919] set_robust_list(0x7f2089ead9a0, 24 [pid 917] <... write resumed>) = 7 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 919] <... set_robust_list resumed>) = 0 [pid 919] rt_sigprocmask(SIG_SETMASK, [], [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 919] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 919] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 917] <... write resumed>) = 7 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 917] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 917] write(4, 0x20000180, 7) = 7 [pid 917] write(4, 0x20000180, 7) = 7 [pid 917] write(4, 0x20000180, 7) = 7 [pid 919] <... mmap resumed>) = 0x20000000 [pid 919] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 916] <... futex resumed>) = 0 [pid 916] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 916] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 917] write(4, 0x20000180, 7 [pid 919] <... futex resumed>) = 1 [pid 917] <... write resumed>) = 7 [pid 919] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 917] write(4, 0x20000180, 7) = 7 [pid 919] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 916] <... futex resumed>) = 0 [pid 916] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 916] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 919] <... futex resumed>) = 1 [pid 919] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 917] write(4, 0x20000180, 7) = 7 [pid 917] write(4, 0x20000180, 7) = 7 [pid 917] write(4, 0x20000180, 7) = 7 [pid 917] write(4, 0x20000180, 7) = 7 [pid 917] write(4, 0x20000180, 7) = 7 [pid 917] write(4, 0x20000180, 7 [pid 919] <... setsockopt resumed>) = 0 [pid 917] <... write resumed>) = 7 [pid 917] write(4, 0x20000180, 7) = 7 [pid 919] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 916] <... futex resumed>) = 0 [pid 919] <... futex resumed>) = 1 [pid 917] write(4, 0x20000180, 7 [pid 919] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 917] <... write resumed>) = 7 [pid 917] write(4, 0x20000180, 7) = 7 [pid 917] write(4, 0x20000180, 7) = 7 [pid 917] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 916] exit_group(0) = ? [pid 919] <... futex resumed>) = ? [pid 919] +++ exited with 0 +++ [pid 917] <... futex resumed>) = ? [pid 917] +++ exited with 0 +++ [pid 916] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=916, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./150/binderfs") = 0 umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./150/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./150/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./150/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./150") = 0 mkdir("./151", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 920 ./strace-static-x86_64: Process 920 attached [pid 920] set_robust_list(0x5555574f36a0, 24) = 0 [pid 920] chdir("./151") = 0 [pid 920] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 920] setpgid(0, 0) = 0 [pid 920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 920] write(3, "1000", 4) = 4 [pid 920] close(3) = 0 [pid 920] symlink("/dev/binderfs", "./binderfs") = 0 [pid 920] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 920] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 920] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 920] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 920] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 920] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 921 attached => {parent_tid=[921]}, 88) = 921 [pid 921] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 921] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 921] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 920] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 920] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 921] <... futex resumed>) = 0 [pid 920] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 921] memfd_create("syzkaller", 0) = 3 [pid 921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 921] munmap(0x7f2081aae000, 138412032) = 0 [pid 921] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 35.939265][ T917] loop0: detected capacity change from 0 to 512 [ 35.947007][ T917] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 35.960165][ T917] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 921] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 921] close(3) = 0 [pid 921] mkdir("./file0", 0777) = 0 [pid 921] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 921] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 921] chdir("./file0") = 0 [pid 921] ioctl(4, LOOP_CLR_FD) = 0 [pid 921] close(4) = 0 [pid 921] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 920] <... futex resumed>) = 0 [pid 920] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 920] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] <... futex resumed>) = 1 [pid 921] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 921] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 920] <... futex resumed>) = 0 [pid 920] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 920] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] <... futex resumed>) = 1 [pid 921] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 921] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 920] <... futex resumed>) = 0 [pid 920] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 920] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 920] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 920] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 920] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[923]}, 88) = 923 [pid 920] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 920] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 920] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] <... futex resumed>) = 1 [pid 921] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 923 attached ) = 7 [pid 923] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 921] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 921] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 923] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 921] <... write resumed>) = 7 [pid 921] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 921] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 921] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 921] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 921] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 923] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 921] <... write resumed>) = 7 [pid 921] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 921] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 921] write(4, 0x20000180, 7 [pid 923] <... mmap resumed>) = 0x20000000 [pid 921] <... write resumed>) = 7 [pid 921] write(4, 0x20000180, 7) = 7 [pid 921] write(4, 0x20000180, 7 [pid 923] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... write resumed>) = 7 [pid 921] write(4, 0x20000180, 7) = 7 [pid 921] write(4, 0x20000180, 7) = 7 [pid 923] <... futex resumed>) = 1 [pid 920] <... futex resumed>) = 0 [pid 921] write(4, 0x20000180, 7) = 7 [pid 923] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 920] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] write(4, 0x20000180, 7) = 7 [pid 920] <... futex resumed>) = 0 [pid 921] write(4, 0x20000180, 7) = 7 [pid 920] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] write(4, 0x20000180, 7) = 7 [pid 921] write(4, 0x20000180, 7) = 7 [pid 921] write(4, 0x20000180, 7) = 7 [pid 921] write(4, 0x20000180, 7 [pid 923] <... socket resumed>) = 6 [pid 921] <... write resumed>) = 7 [pid 921] write(4, 0x20000180, 7) = 7 [pid 923] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] write(4, 0x20000180, 7 [pid 920] <... futex resumed>) = 0 [pid 923] <... futex resumed>) = 1 [pid 920] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... write resumed>) = 7 [pid 920] <... futex resumed>) = 0 [pid 921] write(4, 0x20000180, 7 [pid 920] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] <... write resumed>) = 7 [pid 921] write(4, 0x20000180, 7) = 7 [pid 921] write(4, 0x20000180, 7) = 7 [pid 921] write(4, 0x20000180, 7 [pid 923] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 921] <... write resumed>) = 7 [pid 921] write(4, 0x20000180, 7 [pid 923] <... setsockopt resumed>) = 0 [pid 923] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 920] <... futex resumed>) = 0 [pid 923] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 921] <... write resumed>) = 7 [pid 921] write(4, 0x20000180, 7) = 7 [pid 921] write(4, 0x20000180, 7) = 7 [pid 921] write(4, 0x20000180, 7) = 7 [pid 921] write(4, 0x20000180, 7) = 7 [pid 921] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 921] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 920] exit_group(0 [pid 923] <... futex resumed>) = ? [pid 921] <... futex resumed>) = ? [pid 920] <... exit_group resumed>) = ? [pid 923] +++ exited with 0 +++ [pid 921] +++ exited with 0 +++ [pid 920] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=920, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./151/binderfs") = 0 umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./151/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./151/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./151/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./151") = 0 mkdir("./152", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 924 ./strace-static-x86_64: Process 924 attached [pid 924] set_robust_list(0x5555574f36a0, 24) = 0 [pid 924] chdir("./152") = 0 [pid 924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 924] setpgid(0, 0) = 0 [pid 924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 924] write(3, "1000", 4) = 4 [pid 924] close(3) = 0 [pid 924] symlink("/dev/binderfs", "./binderfs") = 0 [pid 924] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 924] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 924] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 924] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 924] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 924] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 925 attached => {parent_tid=[925]}, 88) = 925 [pid 925] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 925] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 925] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 924] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 924] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 925] <... futex resumed>) = 0 [pid 925] memfd_create("syzkaller", 0) = 3 [pid 925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 924] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 925] munmap(0x7f2081aae000, 138412032) = 0 [pid 925] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.001557][ T921] loop0: detected capacity change from 0 to 512 [ 36.010069][ T921] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.023552][ T921] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 925] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 925] close(3) = 0 [pid 925] mkdir("./file0", 0777) = 0 [pid 925] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 925] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 925] chdir("./file0") = 0 [pid 925] ioctl(4, LOOP_CLR_FD) = 0 [pid 925] close(4) = 0 [pid 925] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 924] <... futex resumed>) = 0 [pid 924] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 924] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 925] <... futex resumed>) = 1 [pid 925] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 925] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 924] <... futex resumed>) = 0 [pid 924] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 924] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 925] <... futex resumed>) = 1 [pid 925] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 925] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 924] <... futex resumed>) = 0 [pid 924] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 924] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 924] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 924] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 924] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 927 attached => {parent_tid=[927]}, 88) = 927 [pid 927] set_robust_list(0x7f2089ead9a0, 24 [pid 924] rt_sigprocmask(SIG_SETMASK, [], [pid 927] <... set_robust_list resumed>) = 0 [pid 927] rt_sigprocmask(SIG_SETMASK, [], [pid 924] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 927] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 924] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 927] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 924] <... futex resumed>) = 0 [pid 924] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 927] <... mmap resumed>) = 0x20000000 [pid 925] <... futex resumed>) = 1 [pid 927] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 924] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 927] <... futex resumed>) = 0 [pid 927] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 924] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 927] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 924] <... futex resumed>) = 0 [pid 927] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 924] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 927] <... socket resumed>) = 6 [pid 927] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 924] <... futex resumed>) = 0 [pid 927] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 924] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = ? [pid 927] +++ killed by SIGBUS +++ [pid 925] +++ killed by SIGBUS +++ [pid 924] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=924, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./152/binderfs") = 0 umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./152/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./152/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./152/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./152") = 0 mkdir("./153", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 928 attached [pid 928] set_robust_list(0x5555574f36a0, 24) = 0 [pid 928] chdir("./153") = 0 [pid 928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 928] setpgid(0, 0) = 0 [pid 928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 928] write(3, "1000", 4) = 4 [pid 928] close(3) = 0 [pid 928] symlink("/dev/binderfs", "./binderfs") = 0 [pid 928] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] <... clone resumed>, child_tidptr=0x5555574f3690) = 928 [pid 928] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 928] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 928] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 928] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 928] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[929]}, 88) = 929 [pid 928] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 928] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 929 attached [pid 929] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 929] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 929] memfd_create("syzkaller", 0) = 3 [pid 929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 929] munmap(0x7f2081aae000, 138412032) = 0 [pid 929] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.068534][ T925] loop0: detected capacity change from 0 to 512 [ 36.076901][ T925] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.090157][ T925] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 929] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 929] close(3) = 0 [pid 929] mkdir("./file0", 0777) = 0 [pid 929] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 929] chdir("./file0") = 0 [pid 929] ioctl(4, LOOP_CLR_FD) = 0 [pid 929] close(4) = 0 [pid 929] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... futex resumed>) = 0 [pid 928] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 929] <... futex resumed>) = 1 [pid 929] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 929] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... futex resumed>) = 0 [pid 928] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 929] <... futex resumed>) = 1 [pid 929] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 929] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... futex resumed>) = 0 [pid 928] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 928] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 928] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 928] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[931]}, 88) = 931 ./strace-static-x86_64: Process 931 attached [pid 928] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 928] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 929] <... futex resumed>) = 1 [pid 929] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 931] set_robust_list(0x7f2089ead9a0, 24 [pid 929] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 929] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 929] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 929] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 929] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 929] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 929] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 931] <... set_robust_list resumed>) = 0 [pid 929] <... write resumed>) = 7 [pid 931] rt_sigprocmask(SIG_SETMASK, [], [pid 929] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 931] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 931] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 929] <... write resumed>) = 7 [pid 931] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... futex resumed>) = 0 [pid 928] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 931] <... futex resumed>) = 1 [pid 931] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 931] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... futex resumed>) = 0 [pid 928] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 928] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 931] <... futex resumed>) = 1 [pid 929] write(4, 0x20000180, 7 [pid 931] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 929] <... write resumed>) = 7 [pid 931] <... setsockopt resumed>) = 0 [pid 929] write(4, 0x20000180, 7 [pid 931] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 928] <... futex resumed>) = 0 [pid 931] <... futex resumed>) = 1 [pid 929] <... write resumed>) = 7 [pid 931] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] write(4, 0x20000180, 7) = 7 [pid 929] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 929] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 928] exit_group(0) = ? [pid 931] <... futex resumed>) = ? [pid 931] +++ exited with 0 +++ [pid 929] <... futex resumed>) = ? [pid 929] +++ exited with 0 +++ [pid 928] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=928, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./153/binderfs") = 0 umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./153/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./153/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./153/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./153") = 0 mkdir("./154", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 932 ./strace-static-x86_64: Process 932 attached [pid 932] set_robust_list(0x5555574f36a0, 24) = 0 [pid 932] chdir("./154") = 0 [pid 932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 932] setpgid(0, 0) = 0 [pid 932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 932] write(3, "1000", 4) = 4 [pid 932] close(3) = 0 [pid 932] symlink("/dev/binderfs", "./binderfs") = 0 [pid 932] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 932] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 932] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 932] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 932] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[933]}, 88) = 933 ./strace-static-x86_64: Process 933 attached [pid 933] set_robust_list(0x7f2089ece9a0, 24 [pid 932] rt_sigprocmask(SIG_SETMASK, [], [pid 933] <... set_robust_list resumed>) = 0 [pid 932] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 933] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 933] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 932] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 933] <... futex resumed>) = 0 [pid 933] memfd_create("syzkaller", 0 [pid 932] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 933] <... memfd_create resumed>) = 3 [pid 933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 933] munmap(0x7f2081aae000, 138412032) = 0 [pid 933] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.128634][ T929] loop0: detected capacity change from 0 to 512 [ 36.136720][ T929] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.149828][ T929] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 933] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 933] close(3) = 0 [pid 933] mkdir("./file0", 0777) = 0 [pid 933] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 933] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 933] chdir("./file0") = 0 [pid 933] ioctl(4, LOOP_CLR_FD) = 0 [pid 933] close(4) = 0 [pid 933] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 933] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 932] <... futex resumed>) = 0 [pid 932] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 932] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 933] <... futex resumed>) = 0 [pid 933] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 933] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = 0 [pid 932] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 933] <... futex resumed>) = 1 [pid 933] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 933] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = 0 [pid 932] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 932] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 932] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 932] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[935]}, 88) = 935 [pid 932] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 935 attached [pid 933] <... futex resumed>) = 1 [pid 932] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 935] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 935] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 935] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 933] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 935] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = 0 [pid 932] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 932] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = ? [pid 935] <... futex resumed>) = ? [pid 935] +++ killed by SIGBUS +++ [pid 933] +++ killed by SIGBUS +++ [pid 932] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=932, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./154/binderfs") = 0 umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./154/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./154/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./154/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./154") = 0 mkdir("./155", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 936 ./strace-static-x86_64: Process 936 attached [pid 936] set_robust_list(0x5555574f36a0, 24) = 0 [pid 936] chdir("./155") = 0 [pid 936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 936] setpgid(0, 0) = 0 [pid 936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 936] write(3, "1000", 4) = 4 [pid 936] close(3) = 0 [pid 936] symlink("/dev/binderfs", "./binderfs") = 0 [pid 936] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 936] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 936] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 936] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 936] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 936] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 937 attached [pid 937] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 937] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 937] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 936] <... clone3 resumed> => {parent_tid=[937]}, 88) = 937 [pid 936] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 936] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 937] <... futex resumed>) = 0 [pid 937] memfd_create("syzkaller", 0 [pid 936] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 937] <... memfd_create resumed>) = 3 [pid 937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 937] munmap(0x7f2081aae000, 138412032) = 0 [pid 937] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.196110][ T933] loop0: detected capacity change from 0 to 512 [ 36.203868][ T933] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.217215][ T933] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 937] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 937] close(3) = 0 [pid 937] mkdir("./file0", 0777) = 0 [pid 937] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 937] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 937] chdir("./file0") = 0 [pid 937] ioctl(4, LOOP_CLR_FD) = 0 [pid 937] close(4) = 0 [pid 937] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 936] <... futex resumed>) = 0 [pid 936] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 937] <... futex resumed>) = 1 [pid 937] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 937] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 936] <... futex resumed>) = 0 [pid 936] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 937] <... futex resumed>) = 1 [pid 937] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 937] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 936] <... futex resumed>) = 0 [pid 936] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 936] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 936] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 936] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[940]}, 88) = 940 [pid 936] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 936] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 937] <... futex resumed>) = 1 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 940 attached ) = 7 [pid 940] set_robust_list(0x7f2089ead9a0, 24 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 940] <... set_robust_list resumed>) = 0 [pid 937] <... write resumed>) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 940] rt_sigprocmask(SIG_SETMASK, [], [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 940] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 937] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 940] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 937] <... write resumed>) = 7 [pid 937] write(4, 0x20000180, 7) = 7 [pid 937] write(4, 0x20000180, 7) = 7 [pid 937] write(4, 0x20000180, 7) = 7 [pid 940] <... mmap resumed>) = 0x20000000 [pid 937] write(4, 0x20000180, 7) = 7 [pid 940] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 936] <... futex resumed>) = 0 [pid 936] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 940] <... futex resumed>) = 1 [pid 940] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 937] write(4, 0x20000180, 7) = 7 [pid 937] write(4, 0x20000180, 7 [pid 940] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 937] <... write resumed>) = 7 [pid 936] <... futex resumed>) = 0 [pid 936] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 940] <... futex resumed>) = 1 [pid 940] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 937] write(4, 0x20000180, 7) = 7 [pid 937] write(4, 0x20000180, 7) = 7 [pid 937] write(4, 0x20000180, 7) = 7 [pid 940] <... setsockopt resumed>) = 0 [pid 940] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 936] <... futex resumed>) = 0 [pid 940] <... futex resumed>) = 1 [pid 937] write(4, 0x20000180, 7 [pid 940] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 937] <... write resumed>) = 7 [pid 937] write(4, 0x20000180, 7) = 7 [pid 937] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 936] exit_group(0 [pid 940] <... futex resumed>) = ? [pid 936] <... exit_group resumed>) = ? [pid 940] +++ exited with 0 +++ [pid 937] +++ exited with 0 +++ [pid 936] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=936, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./155/binderfs") = 0 umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./155/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./155/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./155/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./155") = 0 mkdir("./156", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 941 ./strace-static-x86_64: Process 941 attached [pid 941] set_robust_list(0x5555574f36a0, 24) = 0 [pid 941] chdir("./156") = 0 [pid 941] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 941] setpgid(0, 0) = 0 [pid 941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 941] write(3, "1000", 4) = 4 [pid 941] close(3) = 0 [pid 941] symlink("/dev/binderfs", "./binderfs") = 0 [pid 941] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 941] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 941] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 941] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 941] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 942 attached [pid 942] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 942] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 942] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 941] <... clone3 resumed> => {parent_tid=[942]}, 88) = 942 [pid 941] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 941] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 942] <... futex resumed>) = 0 [pid 941] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 942] memfd_create("syzkaller", 0) = 3 [pid 942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 942] munmap(0x7f2081aae000, 138412032) = 0 [pid 942] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.250209][ T937] loop0: detected capacity change from 0 to 512 [ 36.258365][ T937] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.271751][ T937] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 942] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 942] close(3) = 0 [pid 942] mkdir("./file0", 0777) = 0 [pid 942] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 942] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 942] chdir("./file0") = 0 [pid 942] ioctl(4, LOOP_CLR_FD) = 0 [pid 942] close(4) = 0 [pid 942] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] <... futex resumed>) = 0 [pid 941] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 942] <... futex resumed>) = 1 [pid 942] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 942] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] <... futex resumed>) = 0 [pid 941] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 942] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 942] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] <... futex resumed>) = 0 [pid 941] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 941] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 941] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 941] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 942] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 944 attached [pid 941] <... clone3 resumed> => {parent_tid=[944]}, 88) = 944 [pid 944] set_robust_list(0x7f2089ead9a0, 24 [pid 942] <... write resumed>) = 7 [pid 941] rt_sigprocmask(SIG_SETMASK, [], [pid 942] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 941] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 944] <... set_robust_list resumed>) = 0 [pid 942] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 941] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 944] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 942] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 941] <... futex resumed>) = 0 [pid 944] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 942] <... write resumed>) = 7 [pid 941] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 942] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 942] write(4, 0x20000180, 7 [pid 944] <... mmap resumed>) = 0x20000000 [pid 944] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] <... write resumed>) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 944] <... futex resumed>) = 1 [pid 942] write(4, 0x20000180, 7 [pid 941] <... futex resumed>) = 0 [pid 944] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 942] <... write resumed>) = 7 [pid 941] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] write(4, 0x20000180, 7 [pid 941] <... futex resumed>) = 0 [pid 942] <... write resumed>) = 7 [pid 941] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 944] <... socket resumed>) = 6 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] write(4, 0x20000180, 7) = 7 [pid 942] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 942] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 944] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] <... futex resumed>) = 0 [pid 941] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] <... futex resumed>) = 0 [pid 941] <... futex resumed>) = 1 [pid 944] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 941] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 942] <... setsockopt resumed>) = 0 [pid 942] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] <... futex resumed>) = 0 [pid 942] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 941] exit_group(0 [pid 942] <... futex resumed>) = ? [pid 941] <... exit_group resumed>) = ? [pid 944] <... futex resumed>) = ? [pid 942] +++ exited with 0 +++ [pid 944] +++ exited with 0 +++ [pid 941] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=941, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./156/binderfs") = 0 umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./156/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./156/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./156/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./156") = 0 mkdir("./157", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 945 ./strace-static-x86_64: Process 945 attached [pid 945] set_robust_list(0x5555574f36a0, 24) = 0 [pid 945] chdir("./157") = 0 [pid 945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 945] setpgid(0, 0) = 0 [pid 945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 945] write(3, "1000", 4) = 4 [pid 945] close(3) = 0 [pid 945] symlink("/dev/binderfs", "./binderfs") = 0 [pid 945] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 945] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 945] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 945] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 945] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[946]}, 88) = 946 [pid 945] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 945] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 946 attached [pid 946] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 946] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 946] memfd_create("syzkaller", 0) = 3 [pid 946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 946] munmap(0x7f2081aae000, 138412032) = 0 [pid 946] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.323089][ T942] loop0: detected capacity change from 0 to 512 [ 36.331321][ T942] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.344532][ T942] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 946] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 946] close(3) = 0 [pid 946] mkdir("./file0", 0777) = 0 [pid 946] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 946] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 946] chdir("./file0") = 0 [pid 946] ioctl(4, LOOP_CLR_FD) = 0 [pid 946] close(4) = 0 [pid 946] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 946] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 945] <... futex resumed>) = 0 [pid 945] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 945] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 946] <... futex resumed>) = 0 [pid 946] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 946] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 945] <... futex resumed>) = 0 [pid 945] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 946] <... futex resumed>) = 1 [pid 946] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 946] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 945] <... futex resumed>) = 0 [pid 945] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 945] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 946] <... futex resumed>) = 1 [pid 945] <... mprotect resumed>) = 0 [pid 945] rt_sigprocmask(SIG_BLOCK, ~[], [pid 946] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 945] <... rt_sigprocmask resumed>[], 8) = 0 [pid 945] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[948]}, 88) = 948 ./strace-static-x86_64: Process 948 attached [pid 946] <... write resumed>) = 7 [pid 945] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 945] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 946] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 948] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 946] <... write resumed>) = 7 [pid 946] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 946] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 948] rt_sigprocmask(SIG_SETMASK, [], [pid 946] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 946] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 948] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 946] <... write resumed>) = 7 [pid 948] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 946] write(4, 0x20000180, 7) = 7 [pid 948] <... mmap resumed>) = 0x20000000 [pid 948] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 945] <... futex resumed>) = 0 [pid 945] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 948] <... futex resumed>) = 1 [pid 948] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 948] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 945] <... futex resumed>) = 0 [pid 945] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 945] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 948] <... futex resumed>) = 1 [pid 946] write(4, 0x20000180, 7 [pid 948] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 946] <... write resumed>) = 7 [pid 948] <... setsockopt resumed>) = 0 [pid 948] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 945] <... futex resumed>) = 0 [pid 948] <... futex resumed>) = 1 [pid 948] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] write(4, 0x20000180, 7) = 7 [pid 946] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 946] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 945] exit_group(0 [pid 946] <... futex resumed>) = ? [pid 945] <... exit_group resumed>) = ? [pid 946] +++ exited with 0 +++ [pid 948] <... futex resumed>) = ? [pid 948] +++ exited with 0 +++ [pid 945] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=945, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./157/binderfs") = 0 umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./157/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./157/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./157/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./157") = 0 mkdir("./158", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 949 ./strace-static-x86_64: Process 949 attached [pid 949] set_robust_list(0x5555574f36a0, 24) = 0 [pid 949] chdir("./158") = 0 [pid 949] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 949] setpgid(0, 0) = 0 [pid 949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 949] write(3, "1000", 4) = 4 [pid 949] close(3) = 0 [pid 949] symlink("/dev/binderfs", "./binderfs") = 0 [pid 949] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 949] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 949] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 949] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 949] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[950]}, 88) = 950 [pid 949] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 949] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 950 attached [pid 950] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 950] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 950] memfd_create("syzkaller", 0) = 3 [pid 950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 950] munmap(0x7f2081aae000, 138412032) = 0 [pid 950] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.383498][ T946] loop0: detected capacity change from 0 to 512 [ 36.391252][ T946] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.404626][ T946] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 950] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 950] close(3) = 0 [pid 950] mkdir("./file0", 0777) = 0 [pid 950] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 950] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 950] chdir("./file0") = 0 [pid 950] ioctl(4, LOOP_CLR_FD) = 0 [pid 950] close(4) = 0 [pid 950] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 949] <... futex resumed>) = 0 [pid 949] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 950] <... futex resumed>) = 1 [pid 950] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 950] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 949] <... futex resumed>) = 0 [pid 949] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 950] <... futex resumed>) = 1 [pid 950] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 950] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 949] <... futex resumed>) = 0 [pid 949] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 949] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 949] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 949] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[952]}, 88) = 952 [pid 949] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 949] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 950] <... futex resumed>) = 1 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 950] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 950] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 952 attached [pid 952] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 952] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 952] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 952] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 949] <... futex resumed>) = 0 [pid 949] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 949] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 950] <... futex resumed>) = 0 [pid 950] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 950] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 949] <... futex resumed>) = 0 [pid 949] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 949] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 952] <... futex resumed>) = 1 [pid 952] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 950] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 950] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 949] <... futex resumed>) = 0 [pid 949] exit_group(0) = ? [pid 950] <... futex resumed>) = ? [pid 950] +++ exited with 0 +++ [pid 952] <... futex resumed>) = ? [pid 952] +++ exited with 0 +++ [pid 949] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=949, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./158/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./158/binderfs") = 0 umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./158/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./158/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./158/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./158") = 0 mkdir("./159", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 953 ./strace-static-x86_64: Process 953 attached [pid 953] set_robust_list(0x5555574f36a0, 24) = 0 [pid 953] chdir("./159") = 0 [pid 953] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 953] setpgid(0, 0) = 0 [pid 953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 953] write(3, "1000", 4) = 4 [pid 953] close(3) = 0 [pid 953] symlink("/dev/binderfs", "./binderfs") = 0 [pid 953] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 953] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 953] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 953] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 953] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 953] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 953] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 954 attached [pid 954] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 954] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 954] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 953] <... clone3 resumed> => {parent_tid=[954]}, 88) = 954 [pid 953] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 953] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 954] <... futex resumed>) = 0 [pid 954] memfd_create("syzkaller", 0 [pid 953] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 954] <... memfd_create resumed>) = 3 [pid 954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 954] munmap(0x7f2081aae000, 138412032) = 0 [pid 954] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.450744][ T950] loop0: detected capacity change from 0 to 512 [ 36.459103][ T950] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.472553][ T950] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 954] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 954] close(3) = 0 [pid 954] mkdir("./file0", 0777) = 0 [pid 954] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 954] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 954] chdir("./file0") = 0 [pid 954] ioctl(4, LOOP_CLR_FD) = 0 [pid 954] close(4) = 0 [pid 954] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 953] <... futex resumed>) = 0 [pid 953] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 953] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 954] <... futex resumed>) = 1 [pid 954] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 954] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 953] <... futex resumed>) = 0 [pid 953] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 953] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 954] <... futex resumed>) = 1 [pid 954] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 954] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 954] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 953] <... futex resumed>) = 0 [pid 953] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 953] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 953] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 953] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 953] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 953] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[956]}, 88) = 956 [pid 953] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 953] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 953] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 954] <... futex resumed>) = 0 [pid 954] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 954] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 954] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 954] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 956 attached ) = 7 [pid 956] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 954] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 956] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 956] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 954] <... write resumed>) = 7 [pid 954] write(4, 0x20000180, 7 [pid 956] <... mmap resumed>) = 0x20000000 [pid 956] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 953] <... futex resumed>) = 0 [pid 953] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 953] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 956] <... futex resumed>) = 1 [pid 956] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 956] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 953] <... futex resumed>) = 0 [pid 953] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 953] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 956] <... futex resumed>) = 1 [pid 956] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 954] <... write resumed>) = 7 [pid 954] write(4, 0x20000180, 7 [pid 956] <... setsockopt resumed>) = 0 [pid 954] <... write resumed>) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7 [pid 956] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 954] <... write resumed>) = 7 [pid 953] <... futex resumed>) = 0 [pid 956] <... futex resumed>) = 1 [pid 954] write(4, 0x20000180, 7 [pid 956] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 954] <... write resumed>) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] write(4, 0x20000180, 7) = 7 [pid 954] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 953] exit_group(0) = ? [pid 956] <... futex resumed>) = ? [pid 954] +++ exited with 0 +++ [pid 956] +++ exited with 0 +++ [pid 953] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=953, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./159/binderfs") = 0 umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./159/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./159/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./159/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./159") = 0 mkdir("./160", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 957 ./strace-static-x86_64: Process 957 attached [pid 957] set_robust_list(0x5555574f36a0, 24) = 0 [pid 957] chdir("./160") = 0 [pid 957] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 957] setpgid(0, 0) = 0 [pid 957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 957] write(3, "1000", 4) = 4 [pid 957] close(3) = 0 [pid 957] symlink("/dev/binderfs", "./binderfs") = 0 [pid 957] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 957] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 957] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 957] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 957] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 957] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 957] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 958 attached [pid 958] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 958] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 958] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 957] <... clone3 resumed> => {parent_tid=[958]}, 88) = 958 [pid 957] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 957] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 958] <... futex resumed>) = 0 [pid 957] <... futex resumed>) = 1 [pid 958] memfd_create("syzkaller", 0) = 3 [pid 958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 957] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 958] munmap(0x7f2081aae000, 138412032) = 0 [pid 958] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.512732][ T954] loop0: detected capacity change from 0 to 512 [ 36.521081][ T954] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.534774][ T954] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 958] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 958] close(3) = 0 [pid 958] mkdir("./file0", 0777) = 0 [pid 958] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 958] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 958] chdir("./file0") = 0 [pid 958] ioctl(4, LOOP_CLR_FD) = 0 [pid 958] close(4) = 0 [pid 958] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 957] <... futex resumed>) = 0 [pid 957] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 957] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 958] <... futex resumed>) = 1 [pid 958] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 958] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 957] <... futex resumed>) = 0 [pid 957] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 957] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 958] <... futex resumed>) = 1 [pid 958] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 958] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 957] <... futex resumed>) = 0 [pid 957] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 957] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 957] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 957] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 958] <... futex resumed>) = 1 [pid 957] <... mprotect resumed>) = 0 [pid 958] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 957] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 957] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 960 attached => {parent_tid=[960]}, 88) = 960 [pid 957] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 957] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 957] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 960] set_robust_list(0x7f2089ead9a0, 24 [pid 958] <... write resumed>) = 7 [pid 960] <... set_robust_list resumed>) = 0 [pid 958] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 958] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 960] rt_sigprocmask(SIG_SETMASK, [], [pid 958] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 958] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 958] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 960] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 958] <... write resumed>) = 7 [pid 958] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 958] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 958] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 960] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 958] <... write resumed>) = 7 [pid 958] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 958] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 958] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 958] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 958] write(4, 0x20000180, 7 [pid 960] <... mmap resumed>) = 0x20000000 [pid 960] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 958] <... write resumed>) = 7 [pid 958] write(4, 0x20000180, 7) = 7 [pid 958] write(4, 0x20000180, 7) = 7 [pid 957] <... futex resumed>) = 0 [pid 957] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 957] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 960] <... futex resumed>) = 1 [pid 960] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 958] write(4, 0x20000180, 7) = 7 [pid 960] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 958] write(4, 0x20000180, 7 [pid 957] <... futex resumed>) = 0 [pid 957] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 957] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 958] <... write resumed>) = 7 [pid 960] <... futex resumed>) = 1 [pid 960] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 958] write(4, 0x20000180, 7) = 7 [pid 958] write(4, 0x20000180, 7) = 7 [pid 958] write(4, 0x20000180, 7) = 7 [pid 958] write(4, 0x20000180, 7) = 7 [pid 958] write(4, 0x20000180, 7) = 7 [pid 958] write(4, 0x20000180, 7) = 7 [pid 958] write(4, 0x20000180, 7) = 7 [pid 958] write(4, 0x20000180, 7) = 7 [pid 958] write(4, 0x20000180, 7) = 7 [pid 960] <... setsockopt resumed>) = 0 [pid 958] write(4, 0x20000180, 7) = 7 [pid 960] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 958] write(4, 0x20000180, 7) = 7 [pid 958] write(4, 0x20000180, 7) = 7 [pid 958] write(4, 0x20000180, 7) = 7 [pid 958] write(4, 0x20000180, 7) = 7 [pid 957] <... futex resumed>) = 0 [pid 958] write(4, 0x20000180, 7 [pid 960] <... futex resumed>) = 1 [pid 958] <... write resumed>) = 7 [pid 960] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 958] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 958] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 957] exit_group(0 [pid 960] <... futex resumed>) = ? [pid 958] <... futex resumed>) = ? [pid 957] <... exit_group resumed>) = ? [pid 960] +++ exited with 0 +++ [pid 958] +++ exited with 0 +++ [pid 957] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=957, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./160/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./160/binderfs") = 0 umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./160/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./160/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./160/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./160") = 0 mkdir("./161", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 961 ./strace-static-x86_64: Process 961 attached [pid 961] set_robust_list(0x5555574f36a0, 24) = 0 [pid 961] chdir("./161") = 0 [pid 961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 961] setpgid(0, 0) = 0 [pid 961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 961] write(3, "1000", 4) = 4 [pid 961] close(3) = 0 [pid 961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 961] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 961] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 961] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 961] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 961] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 961] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 962 attached [pid 962] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 962] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 962] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 961] <... clone3 resumed> => {parent_tid=[962]}, 88) = 962 [pid 961] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 961] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 962] <... futex resumed>) = 0 [pid 962] memfd_create("syzkaller", 0) = 3 [pid 962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 961] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 962] munmap(0x7f2081aae000, 138412032) = 0 [pid 962] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.589107][ T958] loop0: detected capacity change from 0 to 512 [ 36.597025][ T958] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.610198][ T958] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 962] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 962] close(3) = 0 [pid 962] mkdir("./file0", 0777) = 0 [pid 962] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 962] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 962] chdir("./file0") = 0 [pid 962] ioctl(4, LOOP_CLR_FD) = 0 [pid 962] close(4) = 0 [pid 962] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 961] <... futex resumed>) = 0 [pid 961] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] <... futex resumed>) = 1 [pid 961] <... futex resumed>) = 0 [pid 961] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 962] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 962] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 961] <... futex resumed>) = 0 [pid 961] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 961] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 962] <... futex resumed>) = 1 [pid 962] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 962] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 961] <... futex resumed>) = 0 [pid 961] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 961] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 961] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 961] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 961] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[964]}, 88) = 964 [pid 961] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 961] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 961] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 962] <... futex resumed>) = 1 [pid 962] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 962] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 962] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 962] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 964 attached ) = 7 [pid 962] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 964] set_robust_list(0x7f2089ead9a0, 24 [pid 962] <... write resumed>) = 7 [pid 962] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 962] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 964] <... set_robust_list resumed>) = 0 [pid 962] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 964] rt_sigprocmask(SIG_SETMASK, [], [pid 962] <... write resumed>) = 7 [pid 962] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 962] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 964] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 962] <... write resumed>) = 7 [pid 964] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 962] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 962] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 964] <... mmap resumed>) = 0x20000000 [pid 964] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] write(4, 0x20000180, 7 [pid 961] <... futex resumed>) = 0 [pid 961] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 961] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 962] <... write resumed>) = 7 [pid 964] <... futex resumed>) = 1 [pid 964] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] write(4, 0x20000180, 7 [pid 964] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] <... write resumed>) = 7 [pid 961] <... futex resumed>) = 0 [pid 961] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 961] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 964] <... futex resumed>) = 1 [pid 964] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 962] write(4, 0x20000180, 7) = 7 [pid 964] <... setsockopt resumed>) = 0 [pid 962] write(4, 0x20000180, 7) = 7 [pid 964] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 962] write(4, 0x20000180, 7 [pid 961] <... futex resumed>) = 0 [pid 964] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 962] <... write resumed>) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] write(4, 0x20000180, 7) = 7 [pid 962] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 961] exit_group(0 [pid 962] <... futex resumed>) = ? [pid 961] <... exit_group resumed>) = ? [pid 962] +++ exited with 0 +++ [pid 964] <... futex resumed>) = ? [pid 964] +++ exited with 0 +++ [pid 961] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=961, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./161/binderfs") = 0 umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./161/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./161/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./161/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./161") = 0 mkdir("./162", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 965 ./strace-static-x86_64: Process 965 attached [pid 965] set_robust_list(0x5555574f36a0, 24) = 0 [pid 965] chdir("./162") = 0 [pid 965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 965] setpgid(0, 0) = 0 [pid 965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 965] write(3, "1000", 4) = 4 [pid 965] close(3) = 0 [pid 965] symlink("/dev/binderfs", "./binderfs") = 0 [pid 965] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 965] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 965] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 965] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 965] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 965] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[966]}, 88) = 966 [pid 965] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 965] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 965] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 966 attached [pid 966] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 966] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 966] memfd_create("syzkaller", 0) = 3 [pid 966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 966] munmap(0x7f2081aae000, 138412032) = 0 [pid 966] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.659206][ T962] loop0: detected capacity change from 0 to 512 [ 36.667813][ T962] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.680969][ T962] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 966] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 966] close(3) = 0 [pid 966] mkdir("./file0", 0777) = 0 [pid 966] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 966] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 966] chdir("./file0") = 0 [pid 966] ioctl(4, LOOP_CLR_FD) = 0 [pid 966] close(4) = 0 [pid 966] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 965] <... futex resumed>) = 0 [pid 965] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 965] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 966] <... futex resumed>) = 1 [pid 966] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 966] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 965] <... futex resumed>) = 0 [pid 965] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 965] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 966] <... futex resumed>) = 1 [pid 966] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 966] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 965] <... futex resumed>) = 0 [pid 965] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 965] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 965] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 965] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 965] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[968]}, 88) = 968 [pid 965] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 965] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 965] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 966] <... futex resumed>) = 1 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 966] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 966] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 968 attached [pid 968] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 968] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 968] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 968] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 965] <... futex resumed>) = 0 [pid 965] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 965] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 966] <... futex resumed>) = 0 [pid 966] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 966] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 965] <... futex resumed>) = 0 [pid 965] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 965] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 966] <... futex resumed>) = 1 [pid 968] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 966] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 966] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 965] <... futex resumed>) = 0 [pid 966] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 965] exit_group(0) = ? [pid 966] <... futex resumed>) = ? [pid 966] +++ exited with 0 +++ [pid 968] <... futex resumed>) = ? [pid 968] +++ exited with 0 +++ [pid 965] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=965, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./162/binderfs") = 0 umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./162/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./162/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./162/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./162") = 0 mkdir("./163", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 969 ./strace-static-x86_64: Process 969 attached [pid 969] set_robust_list(0x5555574f36a0, 24) = 0 [pid 969] chdir("./163") = 0 [pid 969] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 969] setpgid(0, 0) = 0 [pid 969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 969] write(3, "1000", 4) = 4 [pid 969] close(3) = 0 [pid 969] symlink("/dev/binderfs", "./binderfs") = 0 [pid 969] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 969] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 969] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 969] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 969] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 969] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 970 attached => {parent_tid=[970]}, 88) = 970 [pid 970] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 970] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 970] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 969] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 969] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 970] <... futex resumed>) = 0 [pid 969] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 970] memfd_create("syzkaller", 0) = 3 [pid 970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 970] munmap(0x7f2081aae000, 138412032) = 0 [pid 970] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.720969][ T966] loop0: detected capacity change from 0 to 512 [ 36.728875][ T966] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.742212][ T966] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 970] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 970] close(3) = 0 [pid 970] mkdir("./file0", 0777) = 0 [pid 970] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 970] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 970] chdir("./file0") = 0 [pid 970] ioctl(4, LOOP_CLR_FD) = 0 [pid 970] close(4) = 0 [pid 970] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 970] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 969] <... futex resumed>) = 0 [pid 969] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 969] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 970] <... futex resumed>) = 0 [pid 970] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 970] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 969] <... futex resumed>) = 0 [pid 969] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 969] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 970] <... futex resumed>) = 1 [pid 970] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 970] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 969] <... futex resumed>) = 0 [pid 969] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 969] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 969] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 970] <... futex resumed>) = 1 [pid 969] rt_sigprocmask(SIG_BLOCK, ~[], [pid 970] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 969] <... rt_sigprocmask resumed>[], 8) = 0 [pid 969] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[972]}, 88) = 972 [pid 969] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 969] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 969] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 972 attached [pid 972] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 972] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 972] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 972] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 969] <... futex resumed>) = 0 [pid 969] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 969] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 972] <... futex resumed>) = 1 [pid 972] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 972] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 969] <... futex resumed>) = 0 [pid 969] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 969] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 972] <... futex resumed>) = 1 [pid 972] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 972] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 969] <... futex resumed>) = 0 [pid 972] <... futex resumed>) = 1 [pid 972] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 970] <... write resumed>) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] write(4, 0x20000180, 7) = 7 [pid 970] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 969] exit_group(0) = ? [pid 972] <... futex resumed>) = ? [pid 972] +++ exited with 0 +++ [pid 970] +++ exited with 0 +++ [pid 969] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=969, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./163/binderfs") = 0 umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./163/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./163/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./163/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./163") = 0 mkdir("./164", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 973 ./strace-static-x86_64: Process 973 attached [pid 973] set_robust_list(0x5555574f36a0, 24) = 0 [pid 973] chdir("./164") = 0 [pid 973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 973] setpgid(0, 0) = 0 [pid 973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 973] write(3, "1000", 4) = 4 [pid 973] close(3) = 0 [pid 973] symlink("/dev/binderfs", "./binderfs") = 0 [pid 973] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 973] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 973] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 973] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 973] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 973] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[974]}, 88) = 974 ./strace-static-x86_64: Process 974 attached [pid 974] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 974] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 974] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 973] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 973] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 974] <... futex resumed>) = 0 [pid 974] memfd_create("syzkaller", 0) = 3 [pid 973] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 974] munmap(0x7f2081aae000, 138412032) = 0 [pid 974] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.786426][ T970] loop0: detected capacity change from 0 to 512 [ 36.794180][ T970] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.807498][ T970] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 974] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 974] close(3) = 0 [pid 974] mkdir("./file0", 0777) = 0 [pid 974] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 974] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 974] chdir("./file0") = 0 [pid 974] ioctl(4, LOOP_CLR_FD) = 0 [pid 974] close(4) = 0 [pid 974] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 974] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 973] <... futex resumed>) = 0 [pid 973] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 973] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 974] <... futex resumed>) = 0 [pid 974] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 974] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 973] <... futex resumed>) = 0 [pid 973] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 973] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 974] <... futex resumed>) = 1 [pid 974] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 974] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 973] <... futex resumed>) = 0 [pid 973] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 973] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 973] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 973] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 973] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 976 attached => {parent_tid=[976]}, 88) = 976 [pid 976] set_robust_list(0x7f2089ead9a0, 24 [pid 973] rt_sigprocmask(SIG_SETMASK, [], [pid 976] <... set_robust_list resumed>) = 0 [pid 973] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 976] rt_sigprocmask(SIG_SETMASK, [], [pid 973] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 976] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 973] <... futex resumed>) = 0 [pid 976] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 973] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 974] <... futex resumed>) = 1 [pid 976] <... mmap resumed>) = 0x20000000 [pid 976] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 973] <... futex resumed>) = 0 [pid 976] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 973] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 976] <... socket resumed>) = 6 [pid 973] <... futex resumed>) = 0 [pid 976] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 973] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 976] <... futex resumed>) = 0 [pid 973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 976] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 973] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 973] <... futex resumed>) = 0 [pid 976] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 973] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = ? [pid 976] +++ killed by SIGBUS +++ [pid 974] +++ killed by SIGBUS +++ [pid 973] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=973, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./164/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./164/binderfs") = 0 umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./164/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./164/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./164/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./164") = 0 mkdir("./165", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 977 ./strace-static-x86_64: Process 977 attached [pid 977] set_robust_list(0x5555574f36a0, 24) = 0 [pid 977] chdir("./165") = 0 [pid 977] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 977] setpgid(0, 0) = 0 [pid 977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 977] write(3, "1000", 4) = 4 [pid 977] close(3) = 0 [pid 977] symlink("/dev/binderfs", "./binderfs") = 0 [pid 977] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 977] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 977] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 977] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 977] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 977] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 977] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 978 attached [pid 978] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 978] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 978] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 977] <... clone3 resumed> => {parent_tid=[978]}, 88) = 978 [pid 977] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 977] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 978] <... futex resumed>) = 0 [pid 978] memfd_create("syzkaller", 0 [pid 977] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 978] <... memfd_create resumed>) = 3 [pid 978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 978] munmap(0x7f2081aae000, 138412032) = 0 [pid 978] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.864141][ T974] loop0: detected capacity change from 0 to 512 [ 36.871934][ T974] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.885196][ T974] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 978] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 978] close(3) = 0 [pid 978] mkdir("./file0", 0777) = 0 [pid 978] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 978] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 978] chdir("./file0") = 0 [pid 978] ioctl(4, LOOP_CLR_FD) = 0 [pid 978] close(4) = 0 [pid 978] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 977] <... futex resumed>) = 0 [pid 977] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 977] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 978] <... futex resumed>) = 1 [pid 978] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 978] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 977] <... futex resumed>) = 0 [pid 977] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 977] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 978] <... futex resumed>) = 1 [pid 978] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 978] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 977] <... futex resumed>) = 0 [pid 977] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 977] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 977] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 977] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 977] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 977] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[980]}, 88) = 980 ./strace-static-x86_64: Process 980 attached [pid 977] rt_sigprocmask(SIG_SETMASK, [], [pid 980] set_robust_list(0x7f2089ead9a0, 24 [pid 977] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 980] <... set_robust_list resumed>) = 0 [pid 977] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 980] rt_sigprocmask(SIG_SETMASK, [], [pid 977] <... futex resumed>) = 0 [pid 980] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 977] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 980] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 978] <... futex resumed>) = 1 [pid 980] <... mmap resumed>) = 0x20000000 [pid 978] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 980] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 977] <... futex resumed>) = ? [pid 980] <... futex resumed>) = ? [pid 980] +++ killed by SIGBUS +++ [pid 978] +++ killed by SIGBUS +++ [pid 977] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=977, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./165/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./165/binderfs") = 0 umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./165/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./165/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./165/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./165") = 0 mkdir("./166", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 981 ./strace-static-x86_64: Process 981 attached [pid 981] set_robust_list(0x5555574f36a0, 24) = 0 [pid 981] chdir("./166") = 0 [pid 981] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 981] setpgid(0, 0) = 0 [pid 981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 981] write(3, "1000", 4) = 4 [pid 981] close(3) = 0 [pid 981] symlink("/dev/binderfs", "./binderfs") = 0 [pid 981] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 981] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 981] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 981] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 981] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 981] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 981] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 982 attached => {parent_tid=[982]}, 88) = 982 [pid 982] set_robust_list(0x7f2089ece9a0, 24 [pid 981] rt_sigprocmask(SIG_SETMASK, [], [pid 982] <... set_robust_list resumed>) = 0 [pid 981] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 982] rt_sigprocmask(SIG_SETMASK, [], [pid 981] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 982] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 981] <... futex resumed>) = 0 [pid 981] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 982] memfd_create("syzkaller", 0) = 3 [pid 982] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 982] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 982] munmap(0x7f2081aae000, 138412032) = 0 [pid 982] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.927829][ T978] loop0: detected capacity change from 0 to 512 [ 36.935768][ T978] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 36.949341][ T978] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 982] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 982] close(3) = 0 [pid 982] mkdir("./file0", 0777) = 0 [pid 982] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 982] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 982] chdir("./file0") = 0 [pid 982] ioctl(4, LOOP_CLR_FD) = 0 [pid 982] close(4) = 0 [pid 982] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] <... futex resumed>) = 0 [pid 981] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 981] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 982] <... futex resumed>) = 1 [pid 982] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 982] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] <... futex resumed>) = 0 [pid 981] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 981] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 982] <... futex resumed>) = 1 [pid 982] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 982] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] <... futex resumed>) = 0 [pid 981] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 981] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 981] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 981] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 981] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 981] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[984]}, 88) = 984 [pid 981] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 981] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 981] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 982] <... futex resumed>) = 1 [pid 982] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 982] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 982] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 982] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 982] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 982] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 982] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 982] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 984 attached [pid 984] set_robust_list(0x7f2089ead9a0, 24 [pid 982] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 984] <... set_robust_list resumed>) = 0 [pid 984] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 984] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 982] <... write resumed>) = 7 [pid 984] <... mmap resumed>) = 0x20000000 [pid 982] write(4, 0x20000180, 7 [pid 984] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 982] <... write resumed>) = 7 [pid 981] <... futex resumed>) = 0 [pid 981] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 981] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 984] <... futex resumed>) = 1 [pid 984] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 982] write(4, 0x20000180, 7 [pid 984] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] <... futex resumed>) = 0 [pid 981] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 981] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 984] <... futex resumed>) = 1 [pid 984] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 982] <... write resumed>) = 7 [pid 984] <... setsockopt resumed>) = 0 [pid 984] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] <... futex resumed>) = 0 [pid 982] write(4, 0x20000180, 7 [pid 984] <... futex resumed>) = 1 [pid 984] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 982] <... write resumed>) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] write(4, 0x20000180, 7) = 7 [pid 982] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 982] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 981] exit_group(0) = ? [pid 984] <... futex resumed>) = ? [pid 982] <... futex resumed>) = ? [pid 984] +++ exited with 0 +++ [pid 982] +++ exited with 0 +++ [pid 981] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=981, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./166/binderfs") = 0 umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./166/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./166/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./166/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./166") = 0 mkdir("./167", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 985 ./strace-static-x86_64: Process 985 attached [pid 985] set_robust_list(0x5555574f36a0, 24) = 0 [pid 985] chdir("./167") = 0 [pid 985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 985] setpgid(0, 0) = 0 [pid 985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 985] write(3, "1000", 4) = 4 [pid 985] close(3) = 0 [pid 985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 985] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 985] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 985] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 985] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 985] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[986]}, 88) = 986 [pid 985] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 985] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 985] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 986 attached [pid 986] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 986] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 986] memfd_create("syzkaller", 0) = 3 [pid 986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 986] munmap(0x7f2081aae000, 138412032) = 0 [pid 986] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 36.984042][ T982] loop0: detected capacity change from 0 to 512 [ 36.992648][ T982] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.005855][ T982] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 986] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 986] close(3) = 0 [pid 986] mkdir("./file0", 0777) = 0 [pid 986] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 986] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 986] chdir("./file0") = 0 [pid 986] ioctl(4, LOOP_CLR_FD) = 0 [pid 986] close(4) = 0 [pid 986] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 986] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 985] <... futex resumed>) = 0 [pid 985] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 985] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 986] <... futex resumed>) = 0 [pid 986] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 986] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] <... futex resumed>) = 0 [pid 985] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 985] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 986] <... futex resumed>) = 1 [pid 986] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 986] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] <... futex resumed>) = 0 [pid 985] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 985] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 985] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 985] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 988 attached => {parent_tid=[988]}, 88) = 988 [pid 988] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 985] rt_sigprocmask(SIG_SETMASK, [], [pid 988] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 985] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 988] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 985] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 985] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 988] <... mmap resumed>) = 0x20000000 [pid 988] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 985] <... futex resumed>) = 0 [pid 988] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 985] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 985] <... futex resumed>) = 0 [pid 988] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 985] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 988] <... socket resumed>) = 6 [pid 988] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 985] <... futex resumed>) = 0 [pid 988] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 985] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 986] <... futex resumed>) = ? [pid 985] <... futex resumed>) = ? [pid 988] +++ killed by SIGBUS +++ [pid 986] +++ killed by SIGBUS +++ [pid 985] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=985, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./167/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./167/binderfs") = 0 umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./167/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./167/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./167/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./167") = 0 mkdir("./168", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 989 ./strace-static-x86_64: Process 989 attached [pid 989] set_robust_list(0x5555574f36a0, 24) = 0 [pid 989] chdir("./168") = 0 [pid 989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 989] setpgid(0, 0) = 0 [pid 989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 989] write(3, "1000", 4) = 4 [pid 989] close(3) = 0 [pid 989] symlink("/dev/binderfs", "./binderfs") = 0 [pid 989] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 989] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 989] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 989] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 989] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[990]}, 88) = 990 [pid 989] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 989] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 990 attached [pid 990] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 990] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 990] memfd_create("syzkaller", 0) = 3 [pid 990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 990] munmap(0x7f2081aae000, 138412032) = 0 [ 37.048842][ T986] loop0: detected capacity change from 0 to 512 [ 37.056703][ T986] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.069826][ T986] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 990] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 990] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 990] close(3) = 0 [pid 990] mkdir("./file0", 0777) = 0 [pid 990] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 990] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 990] chdir("./file0") = 0 [pid 990] ioctl(4, LOOP_CLR_FD) = 0 [pid 990] close(4) = 0 [pid 990] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 989] <... futex resumed>) = 0 [pid 989] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 990] <... futex resumed>) = 1 [pid 990] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 990] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 989] <... futex resumed>) = 0 [pid 989] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 990] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 990] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 989] <... futex resumed>) = 0 [pid 989] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 989] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 989] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 989] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 992 attached [pid 992] set_robust_list(0x7f2089ead9a0, 24 [pid 989] <... clone3 resumed> => {parent_tid=[992]}, 88) = 992 [pid 992] <... set_robust_list resumed>) = 0 [pid 989] rt_sigprocmask(SIG_SETMASK, [], [pid 992] rt_sigprocmask(SIG_SETMASK, [], [pid 989] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 992] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 989] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 992] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 989] <... futex resumed>) = 0 [pid 989] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 992] <... mmap resumed>) = 0x20000000 [pid 990] <... futex resumed>) = 1 [pid 992] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 989] <... futex resumed>) = 0 [pid 992] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 989] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 990] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 989] <... futex resumed>) = 0 [pid 992] <... socket resumed>) = ? [pid 992] +++ killed by SIGBUS +++ [pid 990] +++ killed by SIGBUS +++ [pid 989] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=989, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./168/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./168/binderfs") = 0 umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./168/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./168/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./168/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./168") = 0 mkdir("./169", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 993 ./strace-static-x86_64: Process 993 attached [pid 993] set_robust_list(0x5555574f36a0, 24) = 0 [pid 993] chdir("./169") = 0 [pid 993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 993] setpgid(0, 0) = 0 [pid 993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 993] write(3, "1000", 4) = 4 [pid 993] close(3) = 0 [pid 993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 993] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 993] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 993] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 993] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 993] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 993] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 994 attached [pid 994] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 994] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 994] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 993] <... clone3 resumed> => {parent_tid=[994]}, 88) = 994 [pid 993] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 993] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 994] <... futex resumed>) = 0 [pid 993] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 994] memfd_create("syzkaller", 0) = 3 [pid 994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 994] munmap(0x7f2081aae000, 138412032) = 0 [pid 994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 37.119049][ T990] loop0: detected capacity change from 0 to 512 [ 37.127038][ T990] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.140277][ T990] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 994] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 994] close(3) = 0 [pid 994] mkdir("./file0", 0777) = 0 [pid 994] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 994] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 994] chdir("./file0") = 0 [pid 994] ioctl(4, LOOP_CLR_FD) = 0 [pid 994] close(4) = 0 [pid 994] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 993] <... futex resumed>) = 0 [pid 993] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 993] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 994] <... futex resumed>) = 1 [pid 994] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 994] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 993] <... futex resumed>) = 0 [pid 993] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 993] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 994] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 994] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 993] <... futex resumed>) = 0 [pid 993] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 993] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 993] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 993] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 993] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[996]}, 88) = 996 [pid 993] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 993] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 993] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 994] <... futex resumed>) = 1 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 996 attached ) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 996] set_robust_list(0x7f2089ead9a0, 24 [pid 994] <... write resumed>) = 7 [pid 996] <... set_robust_list resumed>) = 0 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 996] rt_sigprocmask(SIG_SETMASK, [], [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 996] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 996] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 994] write(4, 0x20000180, 7) = 7 [pid 994] write(4, 0x20000180, 7) = 7 [pid 994] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 994] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 996] <... mmap resumed>) = 0x20000000 [pid 996] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 993] <... futex resumed>) = 0 [pid 993] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 993] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 994] <... futex resumed>) = 0 [pid 994] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 996] <... futex resumed>) = 1 [pid 996] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 994] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 993] <... futex resumed>) = 0 [pid 993] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 993] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 994] <... futex resumed>) = 1 [pid 994] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 994] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 993] <... futex resumed>) = 0 [pid 993] exit_group(0) = ? [pid 996] <... futex resumed>) = ? [pid 996] +++ exited with 0 +++ [pid 994] <... futex resumed>) = ? [pid 994] +++ exited with 0 +++ [pid 993] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=993, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./169/binderfs") = 0 umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./169/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./169/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./169/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./169") = 0 mkdir("./170", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 997 ./strace-static-x86_64: Process 997 attached [pid 997] set_robust_list(0x5555574f36a0, 24) = 0 [pid 997] chdir("./170") = 0 [pid 997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 997] setpgid(0, 0) = 0 [pid 997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 997] write(3, "1000", 4) = 4 [pid 997] close(3) = 0 [pid 997] symlink("/dev/binderfs", "./binderfs") = 0 [pid 997] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 997] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 997] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 997] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 997] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 997] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 998 attached [pid 998] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 998] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 998] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 997] <... clone3 resumed> => {parent_tid=[998]}, 88) = 998 [pid 997] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 997] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 998] <... futex resumed>) = 0 [pid 998] memfd_create("syzkaller", 0) = 3 [pid 998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 997] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 998] <... mmap resumed>) = 0x7f2081aae000 [pid 998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 998] munmap(0x7f2081aae000, 138412032) = 0 [pid 998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 37.185701][ T994] loop0: detected capacity change from 0 to 512 [ 37.193914][ T994] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.207129][ T994] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 998] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 998] close(3) = 0 [pid 998] mkdir("./file0", 0777) = 0 [pid 998] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 998] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 998] chdir("./file0") = 0 [pid 998] ioctl(4, LOOP_CLR_FD) = 0 [pid 998] close(4) = 0 [pid 998] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 997] <... futex resumed>) = 0 [pid 997] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 997] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 998] <... futex resumed>) = 1 [pid 998] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 998] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 997] <... futex resumed>) = 0 [pid 997] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 997] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 998] <... futex resumed>) = 1 [pid 998] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 998] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 998] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 997] <... futex resumed>) = 0 [pid 997] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 997] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 997] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 997] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 997] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1001]}, 88) = 1001 [pid 997] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 997] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 997] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 998] <... futex resumed>) = 0 [pid 998] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 998] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 998] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 998] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 998] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 998] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1001 attached ) = 7 [pid 1001] set_robust_list(0x7f2089ead9a0, 24 [pid 998] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1001] <... set_robust_list resumed>) = 0 [pid 1001] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1001] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 998] <... write resumed>) = 7 [pid 998] write(4, 0x20000180, 7 [pid 1001] <... mmap resumed>) = 0x20000000 [pid 1001] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 998] <... write resumed>) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7 [pid 1001] <... futex resumed>) = 1 [pid 997] <... futex resumed>) = 0 [pid 997] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 997] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 998] <... write resumed>) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 1001] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 1001] <... socket resumed>) = 6 [pid 998] write(4, 0x20000180, 7 [pid 1001] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 997] <... futex resumed>) = 0 [pid 997] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 997] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 998] <... write resumed>) = 7 [pid 1001] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 998] write(4, 0x20000180, 7 [pid 1001] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1001] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 998] <... write resumed>) = 7 [pid 997] <... futex resumed>) = 0 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] write(4, 0x20000180, 7) = 7 [pid 998] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 998] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 997] exit_group(0) = ? [pid 998] <... futex resumed>) = ? [pid 998] +++ exited with 0 +++ [pid 1001] <... futex resumed>) = ? [pid 1001] +++ exited with 0 +++ [pid 997] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=997, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./170/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./170/binderfs") = 0 umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./170/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./170/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./170/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./170") = 0 mkdir("./171", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1002 ./strace-static-x86_64: Process 1002 attached [pid 1002] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1002] chdir("./171") = 0 [pid 1002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1002] setpgid(0, 0) = 0 [pid 1002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1002] write(3, "1000", 4) = 4 [pid 1002] close(3) = 0 [pid 1002] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1002] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1002] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1002] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1002] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1002] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1002] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1003]}, 88) = 1003 [pid 1002] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1002] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1003 attached [pid 1003] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1003] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1003] memfd_create("syzkaller", 0) = 3 [pid 1003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1003] munmap(0x7f2081aae000, 138412032) = 0 [pid 1003] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 37.250051][ T998] loop0: detected capacity change from 0 to 512 [ 37.258449][ T998] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.271892][ T998] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1003] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1003] close(3) = 0 [pid 1003] mkdir("./file0", 0777) = 0 [pid 1003] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1003] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1003] chdir("./file0") = 0 [pid 1003] ioctl(4, LOOP_CLR_FD) = 0 [pid 1003] close(4) = 0 [pid 1003] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1002] <... futex resumed>) = 0 [pid 1002] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1003] <... futex resumed>) = 1 [pid 1003] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1003] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1002] <... futex resumed>) = 0 [pid 1002] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1003] <... futex resumed>) = 1 [pid 1003] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1003] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1002] <... futex resumed>) = 0 [pid 1002] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1002] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1002] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1002] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1005]}, 88) = 1005 [pid 1002] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1002] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1003] <... futex resumed>) = 1 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1003] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1003] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1005 attached [pid 1005] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1005] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1005] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1005] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1002] <... futex resumed>) = 0 [pid 1002] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1002] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1003] <... futex resumed>) = 0 [pid 1003] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1003] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1002] <... futex resumed>) = 0 [pid 1002] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1002] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1005] <... futex resumed>) = 1 [pid 1005] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1003] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1003] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1002] <... futex resumed>) = 0 [pid 1002] exit_group(0) = ? [pid 1005] <... futex resumed>) = ? [pid 1003] +++ exited with 0 +++ [pid 1005] +++ exited with 0 +++ [pid 1002] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1002, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./171/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./171/binderfs") = 0 umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./171/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./171/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./171/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./171") = 0 mkdir("./172", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1006 ./strace-static-x86_64: Process 1006 attached [pid 1006] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1006] chdir("./172") = 0 [pid 1006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1006] setpgid(0, 0) = 0 [pid 1006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1006] write(3, "1000", 4) = 4 [pid 1006] close(3) = 0 [pid 1006] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1006] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1006] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1006] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1006] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1006] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1007 attached => {parent_tid=[1007]}, 88) = 1007 [pid 1007] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1007] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1007] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1006] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1006] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1007] <... futex resumed>) = 0 [pid 1007] memfd_create("syzkaller", 0 [pid 1006] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1007] <... memfd_create resumed>) = 3 [pid 1007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1007] munmap(0x7f2081aae000, 138412032) = 0 [pid 1007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 37.313128][ T1003] loop0: detected capacity change from 0 to 512 [ 37.321238][ T1003] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.334603][ T1003] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1007] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1007] close(3) = 0 [pid 1007] mkdir("./file0", 0777) = 0 [pid 1007] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1007] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1007] chdir("./file0") = 0 [pid 1007] ioctl(4, LOOP_CLR_FD) = 0 [pid 1007] close(4) = 0 [pid 1007] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1006] <... futex resumed>) = 0 [pid 1006] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1007] <... futex resumed>) = 1 [pid 1007] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1007] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1006] <... futex resumed>) = 0 [pid 1006] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1007] <... futex resumed>) = 1 [pid 1006] <... futex resumed>) = 0 [pid 1006] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1007] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1007] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1006] <... futex resumed>) = 0 [pid 1006] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1006] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1006] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1006] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1009]}, 88) = 1009 [pid 1006] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1006] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1007] <... futex resumed>) = 1 [pid 1007] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1007] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1007] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1007] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1009 attached [pid 1009] set_robust_list(0x7f2089ead9a0, 24 [pid 1007] <... write resumed>) = 7 [pid 1009] <... set_robust_list resumed>) = 0 [pid 1007] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1009] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1009] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1007] <... write resumed>) = 7 [pid 1009] <... mmap resumed>) = 0x20000000 [pid 1007] write(4, 0x20000180, 7 [pid 1009] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1006] <... futex resumed>) = 0 [pid 1006] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1009] <... futex resumed>) = 1 [pid 1009] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1007] <... write resumed>) = 7 [pid 1009] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1006] <... futex resumed>) = 0 [pid 1006] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1006] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1009] <... futex resumed>) = 1 [pid 1007] write(4, 0x20000180, 7 [pid 1009] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1007] <... write resumed>) = 7 [pid 1009] <... setsockopt resumed>) = 0 [pid 1009] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1006] <... futex resumed>) = 0 [pid 1009] <... futex resumed>) = 1 [pid 1007] write(4, 0x20000180, 7 [pid 1009] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1007] <... write resumed>) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] write(4, 0x20000180, 7) = 7 [pid 1007] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1007] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1006] exit_group(0 [pid 1007] <... futex resumed>) = ? [pid 1006] <... exit_group resumed>) = ? [pid 1007] +++ exited with 0 +++ [pid 1009] <... futex resumed>) = ? [pid 1009] +++ exited with 0 +++ [pid 1006] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1006, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./172/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./172/binderfs") = 0 umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./172/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./172/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./172/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./172") = 0 mkdir("./173", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1010 ./strace-static-x86_64: Process 1010 attached [pid 1010] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1010] chdir("./173") = 0 [pid 1010] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1010] setpgid(0, 0) = 0 [pid 1010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1010] write(3, "1000", 4) = 4 [pid 1010] close(3) = 0 [pid 1010] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1010] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1010] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1010] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1010] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1010] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1010] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1011]}, 88) = 1011 ./strace-static-x86_64: Process 1011 attached [pid 1011] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1011] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1011] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1010] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1010] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1010] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1011] <... futex resumed>) = 0 [pid 1011] memfd_create("syzkaller", 0) = 3 [pid 1011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1011] munmap(0x7f2081aae000, 138412032) = 0 [ 37.373166][ T1007] loop0: detected capacity change from 0 to 512 [ 37.381590][ T1007] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.395110][ T1007] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1011] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1011] close(3) = 0 [pid 1011] mkdir("./file0", 0777) = 0 [pid 1011] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1011] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1011] chdir("./file0") = 0 [pid 1011] ioctl(4, LOOP_CLR_FD) = 0 [pid 1011] close(4) = 0 [pid 1011] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1010] <... futex resumed>) = 0 [pid 1010] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1010] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1011] <... futex resumed>) = 1 [pid 1011] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1011] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1010] <... futex resumed>) = 0 [pid 1010] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1010] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1011] <... futex resumed>) = 1 [pid 1011] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1011] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1010] <... futex resumed>) = 0 [pid 1010] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1011] <... futex resumed>) = 1 [pid 1010] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1010] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1010] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1010] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1013]}, 88) = 1013 [pid 1010] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1010] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1010] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1011] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1011] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1011] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1011] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1011] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1011] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1011] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1011] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1011] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1013 attached ) = 7 [pid 1013] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1011] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1013] rt_sigprocmask(SIG_SETMASK, [], [pid 1011] <... write resumed>) = 7 [pid 1013] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1013] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1011] write(4, 0x20000180, 7 [pid 1013] <... mmap resumed>) = 0x20000000 [pid 1013] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1011] <... write resumed>) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1010] <... futex resumed>) = 0 [pid 1011] write(4, 0x20000180, 7 [pid 1010] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1010] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1011] <... write resumed>) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1013] <... futex resumed>) = 1 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1013] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] write(4, 0x20000180, 7) = 7 [pid 1011] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1013] <... socket resumed>) = 6 [pid 1011] <... futex resumed>) = 0 [pid 1011] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1013] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1010] <... futex resumed>) = 0 [pid 1010] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1011] <... futex resumed>) = 0 [pid 1010] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1013] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1011] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1011] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1010] <... futex resumed>) = 0 [pid 1010] exit_group(0) = ? [pid 1013] <... futex resumed>) = ? [pid 1013] +++ exited with 0 +++ [pid 1011] +++ exited with 0 +++ [pid 1010] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1010, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./173/binderfs") = 0 umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./173/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./173/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./173/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./173") = 0 mkdir("./174", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1014 ./strace-static-x86_64: Process 1014 attached [pid 1014] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1014] chdir("./174") = 0 [pid 1014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1014] setpgid(0, 0) = 0 [pid 1014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1014] write(3, "1000", 4) = 4 [pid 1014] close(3) = 0 [pid 1014] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1014] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1014] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1014] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1014] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1014] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1014] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1014] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1015 attached => {parent_tid=[1015]}, 88) = 1015 [pid 1014] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1014] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1015] set_robust_list(0x7f2089ece9a0, 24 [pid 1014] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1015] <... set_robust_list resumed>) = 0 [pid 1015] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1015] memfd_create("syzkaller", 0) = 3 [pid 1015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1015] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1015] munmap(0x7f2081aae000, 138412032) = 0 [pid 1015] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 37.439664][ T1011] loop0: detected capacity change from 0 to 512 [ 37.447999][ T1011] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.461339][ T1011] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1015] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1015] close(3) = 0 [pid 1015] mkdir("./file0", 0777) = 0 [pid 1015] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1015] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1015] chdir("./file0") = 0 [pid 1015] ioctl(4, LOOP_CLR_FD) = 0 [pid 1015] close(4) = 0 [pid 1015] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1014] <... futex resumed>) = 0 [pid 1014] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1014] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1015] <... futex resumed>) = 1 [pid 1015] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1015] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1014] <... futex resumed>) = 0 [pid 1014] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1014] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1015] <... futex resumed>) = 1 [pid 1015] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1015] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1014] <... futex resumed>) = 0 [pid 1014] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1014] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1014] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1014] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1014] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1014] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 1017 attached => {parent_tid=[1017]}, 88) = 1017 [pid 1017] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1014] rt_sigprocmask(SIG_SETMASK, [], [pid 1017] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1014] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1017] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1014] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1017] <... mmap resumed>) = 0x20000000 [pid 1014] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1017] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1017] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 1014] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1017] <... socket resumed>) = 6 [pid 1014] <... futex resumed>) = 0 [pid 1017] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1014] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1017] <... futex resumed>) = 0 [pid 1014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1017] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 1014] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1015] <... futex resumed>) = ? [pid 1014] <... futex resumed>) = ? [pid 1015] +++ killed by SIGBUS +++ [pid 1017] +++ killed by SIGBUS +++ [pid 1014] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1014, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./174/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./174/binderfs") = 0 umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./174/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./174/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./174/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./174") = 0 mkdir("./175", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1018 ./strace-static-x86_64: Process 1018 attached [pid 1018] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1018] chdir("./175") = 0 [pid 1018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1018] setpgid(0, 0) = 0 [pid 1018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1018] write(3, "1000", 4) = 4 [pid 1018] close(3) = 0 [pid 1018] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1018] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1018] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1018] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1018] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1018] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1018] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1018] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1019 attached => {parent_tid=[1019]}, 88) = 1019 [pid 1019] set_robust_list(0x7f2089ece9a0, 24 [pid 1018] rt_sigprocmask(SIG_SETMASK, [], [pid 1019] <... set_robust_list resumed>) = 0 [pid 1018] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1019] rt_sigprocmask(SIG_SETMASK, [], [pid 1018] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1018] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1019] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1019] memfd_create("syzkaller", 0) = 3 [pid 1019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1019] munmap(0x7f2081aae000, 138412032) = 0 [pid 1019] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 37.505675][ T1015] loop0: detected capacity change from 0 to 512 [ 37.513555][ T1015] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.526869][ T1015] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1019] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1019] close(3) = 0 [pid 1019] mkdir("./file0", 0777) = 0 [pid 1019] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1019] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1019] chdir("./file0") = 0 [pid 1019] ioctl(4, LOOP_CLR_FD) = 0 [pid 1019] close(4) = 0 [pid 1019] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1018] <... futex resumed>) = 0 [pid 1018] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1018] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1019] <... futex resumed>) = 1 [pid 1019] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1019] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1018] <... futex resumed>) = 0 [pid 1018] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1019] <... futex resumed>) = 1 [pid 1018] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1019] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1019] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1019] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1018] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1018] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1018] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1018] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1018] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1018] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1021]}, 88) = 1021 [pid 1018] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1018] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1018] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1019] <... futex resumed>) = 0 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1021 attached ) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1019] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1019] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1021] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1021] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1021] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1021] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1018] <... futex resumed>) = 0 [pid 1021] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1018] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1019] <... futex resumed>) = 0 [pid 1018] <... futex resumed>) = 1 [pid 1018] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1019] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1019] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1018] <... futex resumed>) = 0 [pid 1018] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1018] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1019] <... futex resumed>) = 1 [pid 1019] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1019] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1018] <... futex resumed>) = 0 [pid 1019] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1018] exit_group(0 [pid 1021] <... futex resumed>) = ? [pid 1019] <... futex resumed>) = ? [pid 1018] <... exit_group resumed>) = ? [pid 1021] +++ exited with 0 +++ [pid 1019] +++ exited with 0 +++ [pid 1018] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1018, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./175/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./175/binderfs") = 0 umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./175/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./175/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./175/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./175") = 0 mkdir("./176", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1022 ./strace-static-x86_64: Process 1022 attached [pid 1022] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1022] chdir("./176") = 0 [pid 1022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1022] setpgid(0, 0) = 0 [pid 1022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1022] write(3, "1000", 4) = 4 [pid 1022] close(3) = 0 [pid 1022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1022] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1022] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1022] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1022] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1022] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1022] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1023 attached => {parent_tid=[1023]}, 88) = 1023 [pid 1022] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1022] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1023] set_robust_list(0x7f2089ece9a0, 24 [pid 1022] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1023] <... set_robust_list resumed>) = 0 [pid 1023] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1023] memfd_create("syzkaller", 0) = 3 [pid 1023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1023] munmap(0x7f2081aae000, 138412032) = 0 [pid 1023] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 37.567881][ T1019] loop0: detected capacity change from 0 to 512 [ 37.575965][ T1019] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.589187][ T1019] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1023] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1023] close(3) = 0 [pid 1023] mkdir("./file0", 0777) = 0 [pid 1023] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1023] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1023] chdir("./file0") = 0 [pid 1023] ioctl(4, LOOP_CLR_FD) = 0 [pid 1023] close(4) = 0 [pid 1023] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1022] <... futex resumed>) = 0 [pid 1022] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1022] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1023] <... futex resumed>) = 1 [pid 1023] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1023] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1022] <... futex resumed>) = 0 [pid 1022] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1022] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1023] <... futex resumed>) = 1 [pid 1023] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1023] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1022] <... futex resumed>) = 0 [pid 1022] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1022] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1022] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1022] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1022] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1025]}, 88) = 1025 [pid 1022] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1022] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1022] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1023] <... futex resumed>) = 1 [pid 1023] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1023] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1023] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1023] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1025 attached ) = 7 [pid 1025] set_robust_list(0x7f2089ead9a0, 24 [pid 1023] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1025] <... set_robust_list resumed>) = 0 [pid 1025] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1025] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1023] <... write resumed>) = 7 [pid 1023] write(4, 0x20000180, 7 [pid 1025] <... mmap resumed>) = 0x20000000 [pid 1023] <... write resumed>) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1025] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1025] <... futex resumed>) = 1 [pid 1022] <... futex resumed>) = 0 [pid 1022] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1022] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7 [pid 1025] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 1023] <... write resumed>) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1025] <... socket resumed>) = 6 [pid 1023] write(4, 0x20000180, 7 [pid 1025] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1022] <... futex resumed>) = 0 [pid 1022] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1022] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1025] <... futex resumed>) = 1 [pid 1025] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1025] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1022] <... futex resumed>) = 0 [pid 1025] <... futex resumed>) = 1 [pid 1025] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1023] <... write resumed>) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] write(4, 0x20000180, 7) = 7 [pid 1023] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1023] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1022] exit_group(0 [pid 1025] <... futex resumed>) = ? [pid 1022] <... exit_group resumed>) = ? [pid 1025] +++ exited with 0 +++ [pid 1023] <... futex resumed>) = ? [pid 1023] +++ exited with 0 +++ [pid 1022] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1022, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./176/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./176/binderfs") = 0 umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./176/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./176/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./176/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./176") = 0 mkdir("./177", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1026 ./strace-static-x86_64: Process 1026 attached [pid 1026] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1026] chdir("./177") = 0 [pid 1026] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1026] setpgid(0, 0) = 0 [pid 1026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1026] write(3, "1000", 4) = 4 [pid 1026] close(3) = 0 [pid 1026] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1026] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1026] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1026] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1026] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1026] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1026] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1026] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1027 attached => {parent_tid=[1027]}, 88) = 1027 [pid 1027] set_robust_list(0x7f2089ece9a0, 24 [pid 1026] rt_sigprocmask(SIG_SETMASK, [], [pid 1027] <... set_robust_list resumed>) = 0 [pid 1026] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1027] rt_sigprocmask(SIG_SETMASK, [], [pid 1026] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1027] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1026] <... futex resumed>) = 0 [pid 1026] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1027] memfd_create("syzkaller", 0) = 3 [pid 1027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1027] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1027] munmap(0x7f2081aae000, 138412032) = 0 [pid 1027] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 37.635733][ T1023] loop0: detected capacity change from 0 to 512 [ 37.644351][ T1023] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.657584][ T1023] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1027] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1027] close(3) = 0 [pid 1027] mkdir("./file0", 0777) = 0 [pid 1027] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1027] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1027] chdir("./file0") = 0 [pid 1027] ioctl(4, LOOP_CLR_FD) = 0 [pid 1027] close(4) = 0 [pid 1027] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1026] <... futex resumed>) = 0 [pid 1026] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1026] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1027] <... futex resumed>) = 1 [pid 1027] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1027] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1026] <... futex resumed>) = 0 [pid 1026] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1026] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1027] <... futex resumed>) = 1 [pid 1027] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1027] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1026] <... futex resumed>) = 0 [pid 1026] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1026] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1026] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1026] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1026] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1026] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1029]}, 88) = 1029 [pid 1026] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1026] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1026] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1027] <... futex resumed>) = 1 [pid 1027] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1027] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1027] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1027] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1027] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1027] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1027] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1027] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1027] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1027] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 1029 attached [pid 1027] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1029] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1029] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1029] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1027] <... write resumed>) = 7 [pid 1027] write(4, 0x20000180, 7 [pid 1029] <... mmap resumed>) = 0x20000000 [pid 1029] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1026] <... futex resumed>) = 0 [pid 1029] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1026] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1027] <... write resumed>) = 7 [pid 1026] <... futex resumed>) = 0 [pid 1029] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 1027] write(4, 0x20000180, 7 [pid 1026] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1029] <... socket resumed>) = 6 [pid 1027] <... write resumed>) = 7 [pid 1029] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1027] write(4, 0x20000180, 7 [pid 1026] <... futex resumed>) = 0 [pid 1026] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1026] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1027] <... write resumed>) = 7 [pid 1029] <... futex resumed>) = 1 [pid 1027] write(4, 0x20000180, 7 [pid 1029] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1029] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1026] <... futex resumed>) = 0 [pid 1029] <... futex resumed>) = 1 [pid 1029] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1027] <... write resumed>) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] write(4, 0x20000180, 7) = 7 [pid 1027] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1027] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1026] exit_group(0 [pid 1029] <... futex resumed>) = ? [pid 1027] <... futex resumed>) = ? [pid 1026] <... exit_group resumed>) = ? [pid 1029] +++ exited with 0 +++ [pid 1027] +++ exited with 0 +++ [pid 1026] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1026, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./177/binderfs") = 0 umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./177/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./177/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./177/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./177") = 0 mkdir("./178", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1030 ./strace-static-x86_64: Process 1030 attached [pid 1030] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1030] chdir("./178") = 0 [pid 1030] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1030] setpgid(0, 0) = 0 [pid 1030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1030] write(3, "1000", 4) = 4 [pid 1030] close(3) = 0 [pid 1030] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1030] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1030] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1030] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1030] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1030] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1030] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1030] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1031 attached => {parent_tid=[1031]}, 88) = 1031 [pid 1030] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1030] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1030] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1031] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1031] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1031] memfd_create("syzkaller", 0) = 3 [pid 1031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1031] munmap(0x7f2081aae000, 138412032) = 0 [pid 1031] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 37.698292][ T1027] loop0: detected capacity change from 0 to 512 [ 37.706315][ T1027] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.719446][ T1027] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1031] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1031] close(3) = 0 [pid 1031] mkdir("./file0", 0777) = 0 [pid 1031] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1031] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1031] chdir("./file0") = 0 [pid 1031] ioctl(4, LOOP_CLR_FD) = 0 [pid 1031] close(4) = 0 [pid 1031] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1030] <... futex resumed>) = 0 [pid 1030] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1030] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1031] <... futex resumed>) = 1 [pid 1031] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1031] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1030] <... futex resumed>) = 0 [pid 1030] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1030] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1031] <... futex resumed>) = 1 [pid 1031] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1031] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1030] <... futex resumed>) = 0 [pid 1030] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1030] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1030] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1030] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1030] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1030] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 1033 attached [pid 1031] <... futex resumed>) = 1 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1033] set_robust_list(0x7f2089ead9a0, 24 [pid 1031] <... write resumed>) = 7 [pid 1030] <... clone3 resumed> => {parent_tid=[1033]}, 88) = 1033 [pid 1033] <... set_robust_list resumed>) = 0 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1030] rt_sigprocmask(SIG_SETMASK, [], [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1030] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1030] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1030] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1031] <... write resumed>) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1033] rt_sigprocmask(SIG_SETMASK, [], [pid 1031] <... write resumed>) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1033] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1033] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1031] <... write resumed>) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1031] write(4, 0x20000180, 7 [pid 1033] <... mmap resumed>) = 0x20000000 [pid 1031] <... write resumed>) = 7 [pid 1033] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1031] write(4, 0x20000180, 7) = 7 [pid 1031] write(4, 0x20000180, 7) = 7 [pid 1031] write(4, 0x20000180, 7) = 7 [pid 1031] write(4, 0x20000180, 7) = 7 [pid 1031] write(4, 0x20000180, 7) = 7 [pid 1031] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1031] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1033] <... futex resumed>) = 1 [pid 1030] <... futex resumed>) = 0 [pid 1033] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1030] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1030] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1031] <... futex resumed>) = 0 [pid 1031] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1031] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1030] <... futex resumed>) = 0 [pid 1030] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1030] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1031] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1031] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1030] <... futex resumed>) = 0 [pid 1030] exit_group(0 [pid 1033] <... futex resumed>) = ? [pid 1030] <... exit_group resumed>) = ? [pid 1033] +++ exited with 0 +++ [pid 1031] +++ exited with 0 +++ [pid 1030] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1030, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./178/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./178/binderfs") = 0 umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./178/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./178/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./178/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./178") = 0 mkdir("./179", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1034 ./strace-static-x86_64: Process 1034 attached [pid 1034] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1034] chdir("./179") = 0 [pid 1034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1034] setpgid(0, 0) = 0 [pid 1034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1034] write(3, "1000", 4) = 4 [pid 1034] close(3) = 0 [pid 1034] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1034] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1034] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1034] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1034] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1034] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1034] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1035 attached => {parent_tid=[1035]}, 88) = 1035 [pid 1035] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1035] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1035] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1034] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1034] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1035] <... futex resumed>) = 0 [pid 1034] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1035] memfd_create("syzkaller", 0) = 3 [pid 1035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1035] munmap(0x7f2081aae000, 138412032) = 0 [pid 1035] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 37.778695][ T1031] loop0: detected capacity change from 0 to 512 [ 37.786593][ T1031] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.799665][ T1031] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1035] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1035] close(3) = 0 [pid 1035] mkdir("./file0", 0777) = 0 [pid 1035] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1035] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1035] chdir("./file0") = 0 [pid 1035] ioctl(4, LOOP_CLR_FD) = 0 [pid 1035] close(4) = 0 [pid 1035] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1034] <... futex resumed>) = 0 [pid 1034] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1034] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1035] <... futex resumed>) = 1 [pid 1035] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1035] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1034] <... futex resumed>) = 0 [pid 1034] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1034] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1035] <... futex resumed>) = 1 [pid 1035] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1035] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1034] <... futex resumed>) = 0 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1034] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1034] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1035] <... write resumed>) = 7 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1034] <... mmap resumed>) = 0x7f2089e8d000 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1034] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1034] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1034] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 1035] <... write resumed>) = 7 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1034] <... clone3 resumed> => {parent_tid=[1037]}, 88) = 1037 [pid 1034] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1035] <... write resumed>) = 7 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1034] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1034] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1035] <... write resumed>) = 7 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1035] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1037 attached [pid 1037] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1035] <... write resumed>) = 7 [pid 1037] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1037] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1035] write(4, 0x20000180, 7 [pid 1037] <... mmap resumed>) = 0x20000000 [pid 1037] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1037] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1035] <... write resumed>) = 7 [pid 1034] <... futex resumed>) = 0 [pid 1035] write(4, 0x20000180, 7) = 7 [pid 1035] write(4, 0x20000180, 7 [pid 1034] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1035] <... write resumed>) = 7 [pid 1035] write(4, 0x20000180, 7) = 7 [pid 1035] write(4, 0x20000180, 7) = 7 [pid 1034] <... futex resumed>) = 1 [pid 1035] write(4, 0x20000180, 7) = 7 [pid 1035] write(4, 0x20000180, 7) = 7 [pid 1035] write(4, 0x20000180, 7) = 7 [pid 1035] write(4, 0x20000180, 7) = 7 [pid 1035] write(4, 0x20000180, 7) = 7 [pid 1035] write(4, 0x20000180, 7) = 7 [pid 1035] write(4, 0x20000180, 7) = 7 [pid 1034] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1037] <... futex resumed>) = 0 [pid 1035] write(4, 0x20000180, 7 [pid 1037] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1037] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1034] <... futex resumed>) = 0 [pid 1034] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1034] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1037] <... futex resumed>) = 1 [pid 1035] <... write resumed>) = 7 [pid 1037] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1035] write(4, 0x20000180, 7 [pid 1037] <... setsockopt resumed>) = 0 [pid 1035] <... write resumed>) = 7 [pid 1035] write(4, 0x20000180, 7 [pid 1037] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1035] <... write resumed>) = 7 [pid 1035] write(4, 0x20000180, 7) = 7 [pid 1035] write(4, 0x20000180, 7) = 7 [pid 1035] write(4, 0x20000180, 7) = 7 [pid 1035] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1035] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1034] <... futex resumed>) = 0 [pid 1034] exit_group(0) = ? [pid 1037] <... futex resumed>) = ? [pid 1035] <... futex resumed>) = ? [pid 1035] +++ exited with 0 +++ [pid 1037] +++ exited with 0 +++ [pid 1034] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1034, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./179/binderfs") = 0 umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./179/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./179/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./179/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./179") = 0 mkdir("./180", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1038 ./strace-static-x86_64: Process 1038 attached [pid 1038] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1038] chdir("./180") = 0 [pid 1038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1038] setpgid(0, 0) = 0 [pid 1038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1038] write(3, "1000", 4) = 4 [pid 1038] close(3) = 0 [pid 1038] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1038] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1038] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1038] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1038] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1038] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1039 attached [pid 1039] set_robust_list(0x7f2089ece9a0, 24 [pid 1038] <... clone3 resumed> => {parent_tid=[1039]}, 88) = 1039 [pid 1039] <... set_robust_list resumed>) = 0 [pid 1038] rt_sigprocmask(SIG_SETMASK, [], [pid 1039] rt_sigprocmask(SIG_SETMASK, [], [pid 1038] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1039] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1038] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1039] memfd_create("syzkaller", 0) = 3 [pid 1039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1039] munmap(0x7f2081aae000, 138412032) = 0 [pid 1039] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 37.854290][ T1035] loop0: detected capacity change from 0 to 512 [ 37.862969][ T1035] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.876404][ T1035] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1039] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1039] close(3) = 0 [pid 1039] mkdir("./file0", 0777) = 0 [pid 1039] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1039] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1039] chdir("./file0") = 0 [pid 1039] ioctl(4, LOOP_CLR_FD) = 0 [pid 1039] close(4) = 0 [pid 1039] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1038] <... futex resumed>) = 0 [pid 1038] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1039] <... futex resumed>) = 1 [pid 1039] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1039] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1038] <... futex resumed>) = 0 [pid 1038] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1039] <... futex resumed>) = 1 [pid 1039] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1039] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1038] <... futex resumed>) = 0 [pid 1038] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1038] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1038] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1038] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 1041 attached => {parent_tid=[1041]}, 88) = 1041 [pid 1041] set_robust_list(0x7f2089ead9a0, 24 [pid 1038] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1038] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1039] <... futex resumed>) = 1 [pid 1039] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1041] <... set_robust_list resumed>) = 0 [pid 1041] rt_sigprocmask(SIG_SETMASK, [], [pid 1039] <... write resumed>) = 7 [pid 1039] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1039] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1039] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1041] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1039] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1039] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1039] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1039] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1039] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1039] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1041] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1039] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1041] <... mmap resumed>) = 0x20000000 [pid 1039] write(4, 0x20000180, 7 [pid 1041] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1039] <... write resumed>) = 7 [pid 1038] <... futex resumed>) = 0 [pid 1038] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1041] <... futex resumed>) = 1 [pid 1041] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1041] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1038] <... futex resumed>) = 0 [pid 1038] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1038] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1039] write(4, 0x20000180, 7 [pid 1041] <... futex resumed>) = 1 [pid 1039] <... write resumed>) = 7 [pid 1041] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1041] <... setsockopt resumed>) = 0 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1041] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1038] <... futex resumed>) = 0 [pid 1041] <... futex resumed>) = 1 [pid 1039] write(4, 0x20000180, 7 [pid 1041] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1039] <... write resumed>) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] write(4, 0x20000180, 7) = 7 [pid 1039] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1039] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1038] exit_group(0 [pid 1041] <... futex resumed>) = ? [pid 1038] <... exit_group resumed>) = ? [pid 1041] +++ exited with 0 +++ [pid 1039] <... futex resumed>) = ? [pid 1039] +++ exited with 0 +++ [pid 1038] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1038, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./180/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./180/binderfs") = 0 umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./180/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./180/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./180/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./180") = 0 mkdir("./181", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1042 ./strace-static-x86_64: Process 1042 attached [pid 1042] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1042] chdir("./181") = 0 [pid 1042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1042] setpgid(0, 0) = 0 [pid 1042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1042] write(3, "1000", 4) = 4 [pid 1042] close(3) = 0 [pid 1042] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1042] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1042] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1042] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1042] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1042] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1043]}, 88) = 1043 [pid 1042] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1042] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1043 attached [pid 1043] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1043] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1043] memfd_create("syzkaller", 0) = 3 [pid 1043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1043] munmap(0x7f2081aae000, 138412032) = 0 [pid 1043] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 37.921972][ T1039] loop0: detected capacity change from 0 to 512 [ 37.930392][ T1039] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 37.943665][ T1039] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1043] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1043] close(3) = 0 [pid 1043] mkdir("./file0", 0777) = 0 [pid 1043] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1043] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1043] chdir("./file0") = 0 [pid 1043] ioctl(4, LOOP_CLR_FD) = 0 [pid 1043] close(4) = 0 [pid 1043] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1043] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1042] <... futex resumed>) = 0 [pid 1042] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1042] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1043] <... futex resumed>) = 0 [pid 1043] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1043] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1042] <... futex resumed>) = 0 [pid 1042] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1043] <... futex resumed>) = 1 [pid 1043] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1043] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1043] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1042] <... futex resumed>) = 1 [pid 1042] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1042] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1043] <... futex resumed>) = 0 [pid 1043] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1043] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1043] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1043] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1043] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1043] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1043] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1042] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1043] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1042] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1042] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1045]}, 88) = 1045 [pid 1042] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 1045 attached [pid 1043] <... write resumed>) = 7 [pid 1042] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1045] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1045] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1045] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1043] write(4, 0x20000180, 7 [pid 1045] <... mmap resumed>) = 0x20000000 [pid 1045] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1042] <... futex resumed>) = 0 [pid 1042] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1045] <... futex resumed>) = 1 [pid 1045] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1043] <... write resumed>) = 7 [pid 1045] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1042] <... futex resumed>) = 0 [pid 1042] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1045] <... futex resumed>) = 1 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1045] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1043] write(4, 0x20000180, 7 [pid 1045] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1042] <... futex resumed>) = 0 [pid 1045] <... futex resumed>) = 1 [pid 1043] <... write resumed>) = 7 [pid 1045] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] write(4, 0x20000180, 7) = 7 [pid 1043] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1043] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1042] exit_group(0 [pid 1043] <... futex resumed>) = ? [pid 1042] <... exit_group resumed>) = ? [pid 1043] +++ exited with 0 +++ [pid 1045] <... futex resumed>) = ? [pid 1045] +++ exited with 0 +++ [pid 1042] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1042, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./181/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./181/binderfs") = 0 umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./181/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./181/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./181/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./181") = 0 mkdir("./182", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1046 ./strace-static-x86_64: Process 1046 attached [pid 1046] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1046] chdir("./182") = 0 [pid 1046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1046] setpgid(0, 0) = 0 [pid 1046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1046] write(3, "1000", 4) = 4 [pid 1046] close(3) = 0 [pid 1046] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1046] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1046] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1046] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1046] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1046] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1047 attached [pid 1047] set_robust_list(0x7f2089ece9a0, 24 [pid 1046] <... clone3 resumed> => {parent_tid=[1047]}, 88) = 1047 [pid 1047] <... set_robust_list resumed>) = 0 [pid 1046] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1047] rt_sigprocmask(SIG_SETMASK, [], [pid 1046] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1047] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1046] <... futex resumed>) = 0 [pid 1046] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1047] memfd_create("syzkaller", 0) = 3 [pid 1047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1047] munmap(0x7f2081aae000, 138412032) = 0 [pid 1047] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 37.992883][ T1043] loop0: detected capacity change from 0 to 512 [ 38.001548][ T1043] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.014985][ T1043] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1047] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1047] close(3) = 0 [pid 1047] mkdir("./file0", 0777) = 0 [pid 1047] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1047] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1047] chdir("./file0") = 0 [pid 1047] ioctl(4, LOOP_CLR_FD) = 0 [pid 1047] close(4) = 0 [pid 1047] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] <... futex resumed>) = 0 [pid 1046] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1046] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1047] <... futex resumed>) = 1 [pid 1047] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1047] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] <... futex resumed>) = 0 [pid 1046] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1046] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1047] <... futex resumed>) = 1 [pid 1047] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1047] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] <... futex resumed>) = 0 [pid 1046] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1047] <... futex resumed>) = 1 [pid 1046] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1046] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1046] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1049]}, 88) = 1049 [pid 1046] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1046] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1046] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1047] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1047] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1047] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1047] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1047] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1047] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1047] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1047] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1047] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1049 attached ) = 7 [pid 1049] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1049] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1049] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1047] write(4, 0x20000180, 7 [pid 1049] <... mmap resumed>) = 0x20000000 [pid 1047] <... write resumed>) = 7 [pid 1049] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1046] <... futex resumed>) = 0 [pid 1046] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1046] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7 [pid 1049] <... futex resumed>) = 1 [pid 1047] <... write resumed>) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] write(4, 0x20000180, 7) = 7 [pid 1047] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1047] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1049] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1049] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] <... futex resumed>) = 0 [pid 1046] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1046] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1047] <... futex resumed>) = 0 [pid 1049] <... futex resumed>) = 1 [pid 1049] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1047] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1047] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1046] <... futex resumed>) = 0 [pid 1046] exit_group(0 [pid 1047] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1049] <... futex resumed>) = ? [pid 1046] <... exit_group resumed>) = ? [pid 1047] <... futex resumed>) = ? [pid 1049] +++ exited with 0 +++ [pid 1047] +++ exited with 0 +++ [pid 1046] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1046, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./182/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./182/binderfs") = 0 umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./182/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./182/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./182/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./182") = 0 mkdir("./183", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1050 ./strace-static-x86_64: Process 1050 attached [pid 1050] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1050] chdir("./183") = 0 [pid 1050] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1050] setpgid(0, 0) = 0 [pid 1050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1050] write(3, "1000", 4) = 4 [pid 1050] close(3) = 0 [pid 1050] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1050] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1050] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1050] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1050] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1050] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1050] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1051 attached [pid 1051] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1051] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1051] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1050] <... clone3 resumed> => {parent_tid=[1051]}, 88) = 1051 [pid 1050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1050] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1051] <... futex resumed>) = 0 [pid 1051] memfd_create("syzkaller", 0 [pid 1050] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1051] <... memfd_create resumed>) = 3 [pid 1051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1051] munmap(0x7f2081aae000, 138412032) = 0 [pid 1051] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 38.065753][ T1047] loop0: detected capacity change from 0 to 512 [ 38.073752][ T1047] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.087179][ T1047] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1051] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1051] close(3) = 0 [pid 1051] mkdir("./file0", 0777) = 0 [pid 1051] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1051] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1051] chdir("./file0") = 0 [pid 1051] ioctl(4, LOOP_CLR_FD) = 0 [pid 1051] close(4) = 0 [pid 1051] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1051] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1050] <... futex resumed>) = 0 [pid 1050] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1050] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1051] <... futex resumed>) = 0 [pid 1051] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1051] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1050] <... futex resumed>) = 0 [pid 1050] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1050] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1051] <... futex resumed>) = 1 [pid 1051] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1051] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1050] <... futex resumed>) = 0 [pid 1050] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1050] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1050] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1050] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1050] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1053]}, 88) = 1053 [pid 1050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1050] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1050] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1051] <... futex resumed>) = 1 [pid 1051] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1051] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 1053 attached [pid 1051] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1051] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1051] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1051] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1053] set_robust_list(0x7f2089ead9a0, 24 [pid 1051] <... write resumed>) = 7 [pid 1051] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1051] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1051] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1053] <... set_robust_list resumed>) = 0 [pid 1051] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1051] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1053] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1051] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1053] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1051] write(4, 0x20000180, 7 [pid 1053] <... mmap resumed>) = 0x20000000 [pid 1051] <... write resumed>) = 7 [pid 1053] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1050] <... futex resumed>) = 0 [pid 1050] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1050] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1053] <... futex resumed>) = 1 [pid 1051] write(4, 0x20000180, 7 [pid 1053] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 1051] <... write resumed>) = 7 [pid 1053] <... socket resumed>) = 6 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1053] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1050] <... futex resumed>) = 0 [pid 1053] <... futex resumed>) = 1 [pid 1050] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1050] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1053] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1053] <... setsockopt resumed>) = 0 [pid 1051] write(4, 0x20000180, 7 [pid 1053] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] <... write resumed>) = 7 [pid 1050] <... futex resumed>) = 0 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1053] <... futex resumed>) = 1 [pid 1053] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1051] write(4, 0x20000180, 7) = 7 [pid 1051] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1051] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1050] exit_group(0 [pid 1051] <... futex resumed>) = ? [pid 1050] <... exit_group resumed>) = ? [pid 1053] <... futex resumed>) = ? [pid 1053] +++ exited with 0 +++ [pid 1051] +++ exited with 0 +++ [pid 1050] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1050, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./183/binderfs") = 0 umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./183/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./183/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./183/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./183") = 0 mkdir("./184", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1054 ./strace-static-x86_64: Process 1054 attached [pid 1054] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1054] chdir("./184") = 0 [pid 1054] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1054] setpgid(0, 0) = 0 [pid 1054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1054] write(3, "1000", 4) = 4 [pid 1054] close(3) = 0 [pid 1054] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1054] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1054] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1054] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1054] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1054] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1054] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1055 attached => {parent_tid=[1055]}, 88) = 1055 [pid 1055] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1055] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1055] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1054] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1054] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1055] <... futex resumed>) = 0 [pid 1055] memfd_create("syzkaller", 0) = 3 [pid 1055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1054] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1055] munmap(0x7f2081aae000, 138412032) = 0 [pid 1055] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 38.125220][ T1051] loop0: detected capacity change from 0 to 512 [ 38.132826][ T1051] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.146362][ T1051] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1055] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1055] close(3) = 0 [pid 1055] mkdir("./file0", 0777) = 0 [pid 1055] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1055] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1055] chdir("./file0") = 0 [pid 1055] ioctl(4, LOOP_CLR_FD) = 0 [pid 1055] close(4) = 0 [pid 1055] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1054] <... futex resumed>) = 0 [pid 1054] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1054] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1055] <... futex resumed>) = 1 [pid 1055] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1055] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1054] <... futex resumed>) = 0 [pid 1054] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1054] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1055] <... futex resumed>) = 1 [pid 1055] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1055] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1054] <... futex resumed>) = 0 [pid 1054] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1054] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1054] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 1055] <... futex resumed>) = 1 [pid 1054] <... mprotect resumed>) = 0 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1054] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1054] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1054] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 1057 attached [pid 1055] <... write resumed>) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1054] <... clone3 resumed> => {parent_tid=[1057]}, 88) = 1057 [pid 1055] <... write resumed>) = 7 [pid 1054] rt_sigprocmask(SIG_SETMASK, [], [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1054] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1055] <... write resumed>) = 7 [pid 1054] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1054] <... futex resumed>) = 0 [pid 1055] <... write resumed>) = 7 [pid 1054] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1057] set_robust_list(0x7f2089ead9a0, 24 [pid 1055] <... write resumed>) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1057] <... set_robust_list resumed>) = 0 [pid 1057] rt_sigprocmask(SIG_SETMASK, [], [pid 1055] <... write resumed>) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1055] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1057] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1055] <... write resumed>) = 7 [pid 1057] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1055] write(4, 0x20000180, 7 [pid 1057] <... mmap resumed>) = 0x20000000 [pid 1057] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1055] <... write resumed>) = 7 [pid 1054] <... futex resumed>) = 0 [pid 1054] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1054] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1057] <... futex resumed>) = 1 [pid 1057] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 1055] write(4, 0x20000180, 7 [pid 1057] <... socket resumed>) = 6 [pid 1055] <... write resumed>) = 7 [pid 1057] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1055] write(4, 0x20000180, 7 [pid 1054] <... futex resumed>) = 0 [pid 1054] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1054] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1057] <... futex resumed>) = 1 [pid 1055] <... write resumed>) = 7 [pid 1055] write(4, 0x20000180, 7) = 7 [pid 1055] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1055] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1057] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1057] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1054] <... futex resumed>) = 0 [pid 1054] exit_group(0 [pid 1057] <... futex resumed>) = ? [pid 1055] <... futex resumed>) = ? [pid 1054] <... exit_group resumed>) = ? [pid 1057] +++ exited with 0 +++ [pid 1055] +++ exited with 0 +++ [pid 1054] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1054, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./184/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./184/binderfs") = 0 umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./184/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./184/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./184/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./184") = 0 mkdir("./185", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1058 ./strace-static-x86_64: Process 1058 attached [pid 1058] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1058] chdir("./185") = 0 [pid 1058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1058] setpgid(0, 0) = 0 [pid 1058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1058] write(3, "1000", 4) = 4 [pid 1058] close(3) = 0 [pid 1058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1058] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1058] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1058] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1058] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1058] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1058] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1059 attached => {parent_tid=[1059]}, 88) = 1059 [pid 1059] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1059] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1059] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1058] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1059] <... futex resumed>) = 0 [pid 1059] memfd_create("syzkaller", 0) = 3 [pid 1059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1058] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 38.187441][ T1055] loop0: detected capacity change from 0 to 512 [ 38.195709][ T1055] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.209013][ T1055] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1059] munmap(0x7f2081aae000, 138412032) = 0 [pid 1059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1059] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1059] close(3) = 0 [pid 1059] mkdir("./file0", 0777) = 0 [pid 1059] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1059] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1059] chdir("./file0") = 0 [pid 1059] ioctl(4, LOOP_CLR_FD) = 0 [pid 1059] close(4) = 0 [pid 1059] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1058] <... futex resumed>) = 0 [pid 1058] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1058] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1059] <... futex resumed>) = 1 [pid 1059] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1059] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1058] <... futex resumed>) = 0 [pid 1058] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1058] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1059] <... futex resumed>) = 1 [pid 1059] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1059] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1058] <... futex resumed>) = 0 [pid 1058] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1058] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1058] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1058] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1058] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1062]}, 88) = 1062 [pid 1058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1058] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1062 attached ) = 0 [pid 1058] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1059] <... futex resumed>) = 1 [pid 1059] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1059] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1059] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1059] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1062] set_robust_list(0x7f2089ead9a0, 24 [pid 1059] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1059] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1062] <... set_robust_list resumed>) = 0 [pid 1059] <... write resumed>) = 7 [pid 1059] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1059] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1059] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1062] rt_sigprocmask(SIG_SETMASK, [], [pid 1059] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1062] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1062] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1059] <... write resumed>) = 7 [pid 1062] <... mmap resumed>) = 0x20000000 [pid 1059] write(4, 0x20000180, 7 [pid 1062] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1059] <... write resumed>) = 7 [pid 1058] <... futex resumed>) = 0 [pid 1062] <... futex resumed>) = 1 [pid 1059] write(4, 0x20000180, 7 [pid 1058] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1058] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1062] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1059] <... write resumed>) = 7 [pid 1062] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1058] <... futex resumed>) = 0 [pid 1059] write(4, 0x20000180, 7 [pid 1058] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1059] <... write resumed>) = 7 [pid 1059] write(4, 0x20000180, 7 [pid 1058] <... futex resumed>) = 0 [pid 1058] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1059] <... write resumed>) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7 [pid 1062] <... futex resumed>) = 1 [pid 1059] <... write resumed>) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] write(4, 0x20000180, 7 [pid 1062] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1059] <... write resumed>) = 7 [pid 1059] write(4, 0x20000180, 7) = 7 [pid 1059] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1059] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1062] <... setsockopt resumed>) = 0 [pid 1062] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1058] <... futex resumed>) = 0 [pid 1062] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1058] exit_group(0 [pid 1062] <... futex resumed>) = ? [pid 1058] <... exit_group resumed>) = ? [pid 1062] +++ exited with 0 +++ [pid 1059] <... futex resumed>) = ? [pid 1059] +++ exited with 0 +++ [pid 1058] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1058, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./185/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./185/binderfs") = 0 umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./185/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./185/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./185/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./185") = 0 mkdir("./186", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1063 ./strace-static-x86_64: Process 1063 attached [pid 1063] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1063] chdir("./186") = 0 [pid 1063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1063] setpgid(0, 0) = 0 [pid 1063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1063] write(3, "1000", 4) = 4 [pid 1063] close(3) = 0 [pid 1063] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1063] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1063] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1063] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1063] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1063] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1063] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1063] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1064]}, 88) = 1064 ./strace-static-x86_64: Process 1064 attached [pid 1064] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1064] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1063] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1063] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1064] <... futex resumed>) = 0 [pid 1063] <... futex resumed>) = 1 [pid 1064] memfd_create("syzkaller", 0) = 3 [pid 1064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1063] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1064] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1064] munmap(0x7f2081aae000, 138412032) = 0 [pid 1064] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 38.265123][ T1059] loop0: detected capacity change from 0 to 512 [ 38.273637][ T1059] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.286933][ T1059] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1064] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1064] close(3) = 0 [pid 1064] mkdir("./file0", 0777) = 0 [pid 1064] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1064] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1064] chdir("./file0") = 0 [pid 1064] ioctl(4, LOOP_CLR_FD) = 0 [pid 1064] close(4) = 0 [pid 1064] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1063] <... futex resumed>) = 0 [pid 1063] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1063] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1064] <... futex resumed>) = 1 [pid 1064] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1064] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1063] <... futex resumed>) = 0 [pid 1063] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1063] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1064] <... futex resumed>) = 1 [pid 1064] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1064] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1063] <... futex resumed>) = 0 [pid 1063] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1063] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1063] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1063] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1063] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1063] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 1066 attached [pid 1066] set_robust_list(0x7f2089ead9a0, 24 [pid 1063] <... clone3 resumed> => {parent_tid=[1066]}, 88) = 1066 [pid 1066] <... set_robust_list resumed>) = 0 [pid 1063] rt_sigprocmask(SIG_SETMASK, [], [pid 1066] rt_sigprocmask(SIG_SETMASK, [], [pid 1063] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1063] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1066] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1063] <... futex resumed>) = 0 [pid 1063] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1066] <... mmap resumed>) = 0x20000000 [pid 1064] <... futex resumed>) = 1 [pid 1066] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1063] <... futex resumed>) = 0 [pid 1066] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1063] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1063] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1064] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 1066] <... futex resumed>) = ? [pid 1063] <... futex resumed>) = ? [pid 1066] +++ killed by SIGBUS +++ [pid 1064] +++ killed by SIGBUS +++ [pid 1063] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1063, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./186/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./186/binderfs") = 0 umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./186/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./186/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./186/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./186") = 0 mkdir("./187", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1067 ./strace-static-x86_64: Process 1067 attached [pid 1067] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1067] chdir("./187") = 0 [pid 1067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1067] setpgid(0, 0) = 0 [pid 1067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1067] write(3, "1000", 4) = 4 [pid 1067] close(3) = 0 [pid 1067] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1067] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1067] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1067] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1067] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1067] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1068 attached => {parent_tid=[1068]}, 88) = 1068 [pid 1068] set_robust_list(0x7f2089ece9a0, 24 [pid 1067] rt_sigprocmask(SIG_SETMASK, [], [pid 1068] <... set_robust_list resumed>) = 0 [pid 1067] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1068] rt_sigprocmask(SIG_SETMASK, [], [pid 1067] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1068] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1067] <... futex resumed>) = 0 [pid 1067] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1068] memfd_create("syzkaller", 0) = 3 [pid 1068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1068] munmap(0x7f2081aae000, 138412032) = 0 [pid 1068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 38.328689][ T1064] loop0: detected capacity change from 0 to 512 [ 38.336774][ T1064] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.349908][ T1064] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1068] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1068] close(3) = 0 [pid 1068] mkdir("./file0", 0777) = 0 [pid 1068] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1068] chdir("./file0") = 0 [pid 1068] ioctl(4, LOOP_CLR_FD) = 0 [pid 1068] close(4) = 0 [pid 1068] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1067] <... futex resumed>) = 0 [pid 1067] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1067] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1068] <... futex resumed>) = 1 [pid 1068] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1068] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1067] <... futex resumed>) = 0 [pid 1067] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1067] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1068] <... futex resumed>) = 1 [pid 1068] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1068] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1067] <... futex resumed>) = 0 [pid 1067] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1067] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1067] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1067] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 1070 attached [pid 1070] set_robust_list(0x7f2089ead9a0, 24 [pid 1067] <... clone3 resumed> => {parent_tid=[1070]}, 88) = 1070 [pid 1070] <... set_robust_list resumed>) = 0 [pid 1067] rt_sigprocmask(SIG_SETMASK, [], [pid 1070] rt_sigprocmask(SIG_SETMASK, [], [pid 1067] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1070] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1067] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1070] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1067] <... futex resumed>) = 0 [pid 1067] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1070] <... mmap resumed>) = 0x20000000 [pid 1068] <... futex resumed>) = 1 [pid 1070] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1067] <... futex resumed>) = 0 [pid 1070] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 1067] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1070] <... socket resumed>) = 6 [pid 1067] <... futex resumed>) = 0 [pid 1070] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1068] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 1067] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1070] <... futex resumed>) = 0 [pid 1067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1067] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1067] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1070] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200001a0} --- [pid 1067] <... futex resumed>) = ? [pid 1070] +++ killed by SIGBUS +++ [pid 1068] +++ killed by SIGBUS +++ [pid 1067] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1067, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./187/binderfs") = 0 umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./187/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./187/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./187") = 0 mkdir("./188", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1071 ./strace-static-x86_64: Process 1071 attached [pid 1071] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1071] chdir("./188") = 0 [pid 1071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1071] setpgid(0, 0) = 0 [pid 1071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1071] write(3, "1000", 4) = 4 [pid 1071] close(3) = 0 [pid 1071] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1071] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1071] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1071] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1071] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1071] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1071] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1071] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1072]}, 88) = 1072 [pid 1071] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1071] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1071] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1072 attached [pid 1072] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1072] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1072] memfd_create("syzkaller", 0) = 3 [pid 1072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1072] munmap(0x7f2081aae000, 138412032) = 0 [ 38.392327][ T1068] loop0: detected capacity change from 0 to 512 [ 38.400206][ T1068] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.413396][ T1068] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1072] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1072] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1072] close(3) = 0 [pid 1072] mkdir("./file0", 0777) = 0 [pid 1072] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1072] chdir("./file0") = 0 [pid 1072] ioctl(4, LOOP_CLR_FD) = 0 [pid 1072] close(4) = 0 [pid 1072] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1071] <... futex resumed>) = 0 [pid 1071] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1071] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1072] <... futex resumed>) = 1 [pid 1072] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1072] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1071] <... futex resumed>) = 0 [pid 1071] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1071] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1072] <... futex resumed>) = 1 [pid 1072] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1072] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1071] <... futex resumed>) = 0 [pid 1071] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1071] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1071] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1071] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1071] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1071] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1074]}, 88) = 1074 [pid 1071] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1071] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1071] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1072] <... futex resumed>) = 1 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1074 attached ) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1072] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1072] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1074] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1074] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1074] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1074] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1071] <... futex resumed>) = 0 [pid 1074] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1071] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1072] <... futex resumed>) = 0 [pid 1071] <... futex resumed>) = 1 [pid 1071] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1072] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1072] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1071] <... futex resumed>) = 0 [pid 1071] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1071] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1072] <... futex resumed>) = 1 [pid 1072] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1072] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1071] <... futex resumed>) = 0 [pid 1071] exit_group(0) = ? [pid 1074] <... futex resumed>) = ? [pid 1072] <... futex resumed>) = ? [pid 1074] +++ exited with 0 +++ [pid 1072] +++ exited with 0 +++ [pid 1071] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1071, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./188/binderfs") = 0 umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./188/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./188/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./188") = 0 mkdir("./189", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1075 ./strace-static-x86_64: Process 1075 attached [pid 1075] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1075] chdir("./189") = 0 [pid 1075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1075] setpgid(0, 0) = 0 [pid 1075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1075] write(3, "1000", 4) = 4 [pid 1075] close(3) = 0 [pid 1075] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1075] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1075] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1075] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1075] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1075] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1075] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1076]}, 88) = 1076 [pid 1075] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 1076 attached [pid 1075] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1075] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1076] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1076] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1076] memfd_create("syzkaller", 0) = 3 [pid 1076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1076] munmap(0x7f2081aae000, 138412032) = 0 [pid 1076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 38.466585][ T1072] loop0: detected capacity change from 0 to 512 [ 38.474605][ T1072] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.487903][ T1072] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1076] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1076] close(3) = 0 [pid 1076] mkdir("./file0", 0777) = 0 [pid 1076] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1076] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1076] chdir("./file0") = 0 [pid 1076] ioctl(4, LOOP_CLR_FD) = 0 [pid 1076] close(4) = 0 [pid 1076] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1075] <... futex resumed>) = 0 [pid 1075] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1075] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1076] <... futex resumed>) = 1 [pid 1076] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1076] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1075] <... futex resumed>) = 0 [pid 1075] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1075] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1076] <... futex resumed>) = 1 [pid 1076] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1076] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1075] <... futex resumed>) = 0 [pid 1075] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1075] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1075] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1075] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1075] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 1078 attached [pid 1078] set_robust_list(0x7f2089ead9a0, 24 [pid 1075] <... clone3 resumed> => {parent_tid=[1078]}, 88) = 1078 [pid 1078] <... set_robust_list resumed>) = 0 [pid 1075] rt_sigprocmask(SIG_SETMASK, [], [pid 1078] rt_sigprocmask(SIG_SETMASK, [], [pid 1075] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1078] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1075] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1078] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1075] <... futex resumed>) = 0 [pid 1075] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1078] <... mmap resumed>) = 0x20000000 [pid 1076] <... futex resumed>) = 1 [pid 1076] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 1075] <... futex resumed>) = ? [pid 1078] +++ killed by SIGBUS +++ [pid 1076] +++ killed by SIGBUS +++ [pid 1075] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1075, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./189/binderfs") = 0 umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./189/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./189/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./189") = 0 mkdir("./190", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1079 ./strace-static-x86_64: Process 1079 attached [pid 1079] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1079] chdir("./190") = 0 [pid 1079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1079] setpgid(0, 0) = 0 [pid 1079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1079] write(3, "1000", 4) = 4 [pid 1079] close(3) = 0 [pid 1079] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1079] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1079] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1079] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1079] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1079] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1079] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1080 attached => {parent_tid=[1080]}, 88) = 1080 [pid 1079] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1079] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1080] set_robust_list(0x7f2089ece9a0, 24 [pid 1079] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1080] <... set_robust_list resumed>) = 0 [pid 1080] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1080] memfd_create("syzkaller", 0) = 3 [pid 1080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1080] munmap(0x7f2081aae000, 138412032) = 0 [pid 1080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 38.532914][ T1076] loop0: detected capacity change from 0 to 512 [ 38.541457][ T1076] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.554685][ T1076] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1080] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1080] close(3) = 0 [pid 1080] mkdir("./file0", 0777) = 0 [pid 1080] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1080] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1080] chdir("./file0") = 0 [pid 1080] ioctl(4, LOOP_CLR_FD) = 0 [pid 1080] close(4) = 0 [pid 1080] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1080] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1079] <... futex resumed>) = 0 [pid 1079] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1079] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1080] <... futex resumed>) = 0 [pid 1080] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1080] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1079] <... futex resumed>) = 0 [pid 1079] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1079] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1080] <... futex resumed>) = 1 [pid 1080] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1080] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1080] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1079] <... futex resumed>) = 0 [pid 1079] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1079] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1079] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1079] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1079] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1082]}, 88) = 1082 [pid 1079] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1079] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1079] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1080] <... futex resumed>) = 0 [pid 1080] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1080] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1080] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1080] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1080] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1080] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1080] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1080] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 1082 attached [pid 1080] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1082] set_robust_list(0x7f2089ead9a0, 24 [pid 1080] <... write resumed>) = 7 [pid 1082] <... set_robust_list resumed>) = 0 [pid 1080] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1080] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1080] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1082] rt_sigprocmask(SIG_SETMASK, [], [pid 1080] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1080] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1082] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1080] <... write resumed>) = 7 [pid 1082] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1080] write(4, 0x20000180, 7 [pid 1082] <... mmap resumed>) = 0x20000000 [pid 1082] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1079] <... futex resumed>) = 0 [pid 1079] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1079] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1082] <... futex resumed>) = 1 [pid 1082] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1082] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1079] <... futex resumed>) = 0 [pid 1079] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1079] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1082] <... futex resumed>) = 1 [pid 1080] <... write resumed>) = 7 [pid 1082] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7 [pid 1082] <... setsockopt resumed>) = 0 [pid 1080] <... write resumed>) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] write(4, 0x20000180, 7) = 7 [pid 1080] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1080] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1082] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1079] <... futex resumed>) = 0 [pid 1079] exit_group(0) = ? [pid 1082] <... futex resumed>) = ? [pid 1080] <... futex resumed>) = ? [pid 1082] +++ exited with 0 +++ [pid 1080] +++ exited with 0 +++ [pid 1079] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1079, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./190/binderfs") = 0 umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./190/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./190/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./190") = 0 mkdir("./191", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1083 ./strace-static-x86_64: Process 1083 attached [pid 1083] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1083] chdir("./191") = 0 [pid 1083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1083] setpgid(0, 0) = 0 [pid 1083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1083] write(3, "1000", 4) = 4 [pid 1083] close(3) = 0 [pid 1083] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1083] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1083] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1083] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1083] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1083] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1083] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1084 attached => {parent_tid=[1084]}, 88) = 1084 [pid 1083] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1083] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1083] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1084] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1084] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1084] memfd_create("syzkaller", 0) = 3 [pid 1084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1084] munmap(0x7f2081aae000, 138412032) = 0 [pid 1084] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 38.590010][ T1080] loop0: detected capacity change from 0 to 512 [ 38.598329][ T1080] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.611748][ T1080] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1084] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1084] close(3) = 0 [pid 1084] mkdir("./file0", 0777) = 0 [pid 1084] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1084] chdir("./file0") = 0 [pid 1084] ioctl(4, LOOP_CLR_FD) = 0 [pid 1084] close(4) = 0 [pid 1084] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1083] <... futex resumed>) = 0 [pid 1083] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1083] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1084] <... futex resumed>) = 1 [pid 1084] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1084] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1083] <... futex resumed>) = 0 [pid 1083] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1083] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1084] <... futex resumed>) = 1 [pid 1084] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1084] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1083] <... futex resumed>) = 0 [pid 1083] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1083] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1083] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1083] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1083] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1086]}, 88) = 1086 [pid 1083] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1083] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1083] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1084] <... futex resumed>) = 1 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 1086 attached [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1086] set_robust_list(0x7f2089ead9a0, 24 [pid 1084] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1084] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1084] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1086] <... set_robust_list resumed>) = 0 [pid 1086] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1086] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1086] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1083] <... futex resumed>) = 0 [pid 1083] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1083] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1084] <... futex resumed>) = 0 [pid 1084] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1084] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1083] <... futex resumed>) = 0 [pid 1083] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1083] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1084] <... futex resumed>) = 1 [pid 1086] <... futex resumed>) = 1 [pid 1086] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1084] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1084] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1083] <... futex resumed>) = 0 [pid 1083] exit_group(0) = ? [pid 1084] <... futex resumed>) = ? [pid 1084] +++ exited with 0 +++ [pid 1086] <... futex resumed>) = ? [pid 1086] +++ exited with 0 +++ [pid 1083] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1083, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./191/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./191/binderfs") = 0 umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./191/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./191/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./191") = 0 mkdir("./192", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1087 ./strace-static-x86_64: Process 1087 attached [pid 1087] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1087] chdir("./192") = 0 [pid 1087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1087] setpgid(0, 0) = 0 [pid 1087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1087] write(3, "1000", 4) = 4 [pid 1087] close(3) = 0 [pid 1087] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1087] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1087] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1087] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1087] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1087] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1087] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1088]}, 88) = 1088 [pid 1087] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1087] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 1088 attached [pid 1088] set_robust_list(0x7f2089ece9a0, 24 [pid 1087] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1088] <... set_robust_list resumed>) = 0 [pid 1088] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1088] memfd_create("syzkaller", 0) = 3 [pid 1088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1088] munmap(0x7f2081aae000, 138412032) = 0 [pid 1088] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 38.655117][ T1084] loop0: detected capacity change from 0 to 512 [ 38.662798][ T1084] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.675986][ T1084] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1088] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1088] close(3) = 0 [pid 1088] mkdir("./file0", 0777) = 0 [pid 1088] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1088] chdir("./file0") = 0 [pid 1088] ioctl(4, LOOP_CLR_FD) = 0 [pid 1088] close(4) = 0 [pid 1088] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1088] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1087] <... futex resumed>) = 0 [pid 1087] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1087] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1088] <... futex resumed>) = 0 [pid 1088] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1088] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1087] <... futex resumed>) = 0 [pid 1087] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1087] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1088] <... futex resumed>) = 1 [pid 1088] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1088] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1087] <... futex resumed>) = 0 [pid 1087] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1087] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1087] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1087] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1087] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1090]}, 88) = 1090 [pid 1087] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1087] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1087] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1088] <... futex resumed>) = 1 [pid 1088] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1088] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1088] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1088] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1088] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1088] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1088] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1088] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1088] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1090 attached [pid 1090] set_robust_list(0x7f2089ead9a0, 24 [pid 1088] <... write resumed>) = 7 [pid 1090] <... set_robust_list resumed>) = 0 [pid 1090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1088] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1090] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1088] <... write resumed>) = 7 [pid 1088] write(4, 0x20000180, 7 [pid 1090] <... mmap resumed>) = 0x20000000 [pid 1088] <... write resumed>) = 7 [pid 1090] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1088] write(4, 0x20000180, 7 [pid 1087] <... futex resumed>) = 0 [pid 1087] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1087] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1090] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 1088] <... write resumed>) = 7 [pid 1090] <... socket resumed>) = 6 [pid 1088] write(4, 0x20000180, 7 [pid 1090] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1088] <... write resumed>) = 7 [pid 1087] <... futex resumed>) = 0 [pid 1087] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1087] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1090] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1090] <... setsockopt resumed>) = 0 [pid 1090] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1088] write(4, 0x20000180, 7 [pid 1090] <... futex resumed>) = 1 [pid 1088] <... write resumed>) = 7 [pid 1087] <... futex resumed>) = 0 [pid 1090] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] write(4, 0x20000180, 7) = 7 [pid 1088] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1088] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1087] exit_group(0) = ? [pid 1090] <... futex resumed>) = ? [pid 1090] +++ exited with 0 +++ [pid 1088] <... futex resumed>) = ? [pid 1088] +++ exited with 0 +++ [pid 1087] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1087, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./192/binderfs") = 0 umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./192/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./192/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./192") = 0 mkdir("./193", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1091 ./strace-static-x86_64: Process 1091 attached [pid 1091] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1091] chdir("./193") = 0 [pid 1091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1091] setpgid(0, 0) = 0 [pid 1091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1091] write(3, "1000", 4) = 4 [pid 1091] close(3) = 0 [pid 1091] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1091] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1091] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1091] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1091] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1091] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1091] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1092 attached [pid 1092] set_robust_list(0x7f2089ece9a0, 24 [pid 1091] <... clone3 resumed> => {parent_tid=[1092]}, 88) = 1092 [pid 1092] <... set_robust_list resumed>) = 0 [pid 1091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1092] rt_sigprocmask(SIG_SETMASK, [], [pid 1091] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1092] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1091] <... futex resumed>) = 0 [pid 1091] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1092] memfd_create("syzkaller", 0) = 3 [pid 1092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1092] munmap(0x7f2081aae000, 138412032) = 0 [pid 1092] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 38.710768][ T1088] loop0: detected capacity change from 0 to 512 [ 38.718453][ T1088] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.731623][ T1088] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1092] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1092] close(3) = 0 [pid 1092] mkdir("./file0", 0777) = 0 [pid 1092] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1092] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1092] chdir("./file0") = 0 [pid 1092] ioctl(4, LOOP_CLR_FD) = 0 [pid 1092] close(4) = 0 [pid 1092] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1091] <... futex resumed>) = 0 [pid 1091] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1091] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1092] <... futex resumed>) = 1 [pid 1092] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1092] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1091] <... futex resumed>) = 0 [pid 1091] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1091] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1092] <... futex resumed>) = 1 [pid 1092] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1092] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1091] <... futex resumed>) = 0 [pid 1091] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1091] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1091] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1091] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1091] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1094]}, 88) = 1094 [pid 1091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1091] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1091] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1092] <... futex resumed>) = 1 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1092] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1092] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1094 attached [pid 1094] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1094] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1094] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1094] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1091] <... futex resumed>) = 0 [pid 1091] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1091] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1092] <... futex resumed>) = 0 [pid 1092] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1092] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1091] <... futex resumed>) = 0 [pid 1091] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1091] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1094] <... futex resumed>) = 1 [pid 1094] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1092] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1092] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1091] <... futex resumed>) = 0 [pid 1092] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1091] exit_group(0 [pid 1094] <... futex resumed>) = ? [pid 1092] <... futex resumed>) = ? [pid 1091] <... exit_group resumed>) = ? [pid 1094] +++ exited with 0 +++ [pid 1092] +++ exited with 0 +++ [pid 1091] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1091, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./193/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./193/binderfs") = 0 umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./193/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./193/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./193") = 0 mkdir("./194", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 1095 attached [pid 1095] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1095] chdir("./194") = 0 [pid 1095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1095] setpgid(0, 0) = 0 [pid 1095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1095] write(3, "1000", 4) = 4 [pid 1095] close(3) = 0 [pid 1095] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1095] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1095] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1095] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1095] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1095] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1095] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1096]}, 88) = 1096 [pid 1095] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... clone resumed>, child_tidptr=0x5555574f3690) = 1095 [pid 1095] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1095] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1095] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1096 attached [pid 1096] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1096] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1096] memfd_create("syzkaller", 0) = 3 [pid 1096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1096] munmap(0x7f2081aae000, 138412032) = 0 [pid 1096] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 38.777386][ T1092] loop0: detected capacity change from 0 to 512 [ 38.785210][ T1092] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.798395][ T1092] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1096] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1096] close(3) = 0 [pid 1096] mkdir("./file0", 0777) = 0 [pid 1096] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1096] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1096] chdir("./file0") = 0 [pid 1096] ioctl(4, LOOP_CLR_FD) = 0 [pid 1096] close(4) = 0 [pid 1096] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1096] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1095] <... futex resumed>) = 0 [pid 1095] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1095] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1096] <... futex resumed>) = 0 [pid 1096] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1096] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = 0 [pid 1095] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1096] <... futex resumed>) = 1 [pid 1095] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1096] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1096] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = 0 [pid 1095] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1095] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1095] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1095] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1095] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1098]}, 88) = 1098 [pid 1095] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1095] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1095] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1096] <... futex resumed>) = 1 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 1098 attached [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1098] set_robust_list(0x7f2089ead9a0, 24 [pid 1096] <... write resumed>) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1098] <... set_robust_list resumed>) = 0 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1098] rt_sigprocmask(SIG_SETMASK, [], [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1098] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1096] <... write resumed>) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1096] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1096] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1098] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1098] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = 0 [pid 1095] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1095] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1096] <... futex resumed>) = 0 [pid 1096] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1096] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = 0 [pid 1095] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1095] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1096] <... futex resumed>) = 1 [pid 1098] <... futex resumed>) = 1 [pid 1096] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1098] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1096] <... setsockopt resumed>) = 0 [pid 1096] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = 0 [pid 1095] exit_group(0) = ? [pid 1098] <... futex resumed>) = ? [pid 1096] <... futex resumed>) = ? [pid 1098] +++ exited with 0 +++ [pid 1096] +++ exited with 0 +++ [pid 1095] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1095, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./194/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./194/binderfs") = 0 umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./194/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./194/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./194") = 0 mkdir("./195", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1099 ./strace-static-x86_64: Process 1099 attached [pid 1099] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1099] chdir("./195") = 0 [pid 1099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1099] setpgid(0, 0) = 0 [pid 1099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1099] write(3, "1000", 4) = 4 [pid 1099] close(3) = 0 [pid 1099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1099] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1099] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1099] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1099] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1099] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1100]}, 88) = 1100 [pid 1099] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1099] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1100 attached [pid 1100] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1100] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1100] memfd_create("syzkaller", 0) = 3 [pid 1100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [ 38.836657][ T1096] loop0: detected capacity change from 0 to 512 [ 38.844524][ T1096] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.857862][ T1096] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1100] munmap(0x7f2081aae000, 138412032) = 0 [pid 1100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1100] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1100] close(3) = 0 [pid 1100] mkdir("./file0", 0777) = 0 [pid 1100] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1100] chdir("./file0") = 0 [pid 1100] ioctl(4, LOOP_CLR_FD) = 0 [pid 1100] close(4) = 0 [pid 1100] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1099] <... futex resumed>) = 0 [pid 1099] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1100] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1099] <... futex resumed>) = 0 [pid 1099] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1100] <... open resumed>) = 4 [pid 1100] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1099] <... futex resumed>) = 0 [pid 1099] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1100] <... futex resumed>) = 1 [pid 1100] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1100] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1099] <... futex resumed>) = 0 [pid 1099] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1099] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 1100] <... futex resumed>) = 1 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1099] <... mprotect resumed>) = 0 [pid 1100] <... write resumed>) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1099] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1100] <... write resumed>) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1099] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1099] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1102 attached [pid 1099] <... clone3 resumed> => {parent_tid=[1102]}, 88) = 1102 [pid 1099] rt_sigprocmask(SIG_SETMASK, [], [pid 1100] <... write resumed>) = 7 [pid 1099] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1099] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1100] <... write resumed>) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1102] set_robust_list(0x7f2089ead9a0, 24 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1102] <... set_robust_list resumed>) = 0 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1102] rt_sigprocmask(SIG_SETMASK, [], [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1102] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1100] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1100] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1100] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1102] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1102] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1099] <... futex resumed>) = 0 [pid 1099] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1099] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1102] <... futex resumed>) = 1 [pid 1102] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] <... futex resumed>) = 0 [pid 1100] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1100] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1099] <... futex resumed>) = 0 [pid 1099] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1099] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1100] <... futex resumed>) = 1 [pid 1100] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1100] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1099] <... futex resumed>) = 0 [pid 1099] exit_group(0) = ? [pid 1102] <... futex resumed>) = ? [pid 1100] <... futex resumed>) = ? [pid 1102] +++ exited with 0 +++ [pid 1100] +++ exited with 0 +++ [pid 1099] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1099, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./195/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./195/binderfs") = 0 umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./195/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./195/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./195") = 0 mkdir("./196", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1103 ./strace-static-x86_64: Process 1103 attached [pid 1103] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1103] chdir("./196") = 0 [pid 1103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1103] setpgid(0, 0) = 0 [pid 1103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1103] write(3, "1000", 4) = 4 [pid 1103] close(3) = 0 [pid 1103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1103] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1103] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1103] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1103] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1103] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1103] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1104 attached => {parent_tid=[1104]}, 88) = 1104 [pid 1104] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1104] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1104] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1103] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1103] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1104] <... futex resumed>) = 0 [pid 1104] memfd_create("syzkaller", 0) = 3 [pid 1104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1103] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1104] munmap(0x7f2081aae000, 138412032) = 0 [pid 1104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 38.896315][ T1100] loop0: detected capacity change from 0 to 512 [ 38.904316][ T1100] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.917601][ T1100] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1104] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1104] close(3) = 0 [pid 1104] mkdir("./file0", 0777) = 0 [pid 1104] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1104] chdir("./file0") = 0 [pid 1104] ioctl(4, LOOP_CLR_FD) = 0 [pid 1104] close(4) = 0 [pid 1104] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1104] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1103] <... futex resumed>) = 0 [pid 1103] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1103] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1104] <... futex resumed>) = 0 [pid 1104] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1104] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = 0 [pid 1103] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1103] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1104] <... futex resumed>) = 1 [pid 1104] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1104] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1104] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1103] <... futex resumed>) = 0 [pid 1103] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1103] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1103] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1103] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1103] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 1106 attached [pid 1104] <... futex resumed>) = 0 [pid 1104] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1104] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1104] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1104] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1104] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1103] <... clone3 resumed> => {parent_tid=[1106]}, 88) = 1106 [pid 1106] set_robust_list(0x7f2089ead9a0, 24 [pid 1104] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1103] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1103] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1103] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1104] <... write resumed>) = 7 [pid 1106] <... set_robust_list resumed>) = 0 [pid 1104] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1104] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1104] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1106] rt_sigprocmask(SIG_SETMASK, [], [pid 1104] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1104] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1106] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1104] <... write resumed>) = 7 [pid 1106] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1104] write(4, 0x20000180, 7 [pid 1106] <... mmap resumed>) = 0x20000000 [pid 1106] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = 0 [pid 1103] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1103] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1106] <... futex resumed>) = 1 [pid 1106] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1106] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = 0 [pid 1103] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1103] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1106] <... futex resumed>) = 1 [pid 1104] <... write resumed>) = 7 [pid 1106] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7 [pid 1106] <... setsockopt resumed>) = 0 [pid 1104] <... write resumed>) = 7 [pid 1106] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1103] <... futex resumed>) = 0 [pid 1104] write(4, 0x20000180, 7 [pid 1106] <... futex resumed>) = 1 [pid 1104] <... write resumed>) = 7 [pid 1106] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] write(4, 0x20000180, 7) = 7 [pid 1104] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1104] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1103] exit_group(0 [pid 1104] <... futex resumed>) = ? [pid 1103] <... exit_group resumed>) = ? [pid 1104] +++ exited with 0 +++ [pid 1106] <... futex resumed>) = ? [pid 1106] +++ exited with 0 +++ [pid 1103] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1103, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./196/binderfs") = 0 umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./196/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./196/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./196") = 0 mkdir("./197", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1107 ./strace-static-x86_64: Process 1107 attached [pid 1107] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1107] chdir("./197") = 0 [pid 1107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1107] setpgid(0, 0) = 0 [pid 1107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1107] write(3, "1000", 4) = 4 [pid 1107] close(3) = 0 [pid 1107] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1107] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1107] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1107] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1107] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1107] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1107] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1107] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1108 attached [pid 1108] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1108] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1108] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1107] <... clone3 resumed> => {parent_tid=[1108]}, 88) = 1108 [pid 1107] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1107] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1108] <... futex resumed>) = 0 [pid 1107] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1108] memfd_create("syzkaller", 0) = 3 [pid 1108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1108] munmap(0x7f2081aae000, 138412032) = 0 [pid 1108] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 38.963089][ T1104] loop0: detected capacity change from 0 to 512 [ 38.971841][ T1104] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 38.985132][ T1104] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1108] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1108] close(3) = 0 [pid 1108] mkdir("./file0", 0777) = 0 [pid 1108] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1108] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1108] chdir("./file0") = 0 [pid 1108] ioctl(4, LOOP_CLR_FD) = 0 [pid 1108] close(4) = 0 [pid 1108] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1107] <... futex resumed>) = 0 [pid 1107] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1107] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1108] <... futex resumed>) = 1 [pid 1108] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1108] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1107] <... futex resumed>) = 0 [pid 1107] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1107] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1108] <... futex resumed>) = 1 [pid 1108] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1108] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1107] <... futex resumed>) = 0 [pid 1107] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1107] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1107] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1108] <... futex resumed>) = 1 [pid 1107] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 1108] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1107] <... mprotect resumed>) = 0 [pid 1107] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1107] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1110]}, 88) = 1110 [pid 1107] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1107] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1107] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1110 attached [pid 1110] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1110] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1110] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1110] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1107] <... futex resumed>) = 0 [pid 1107] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1107] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1110] <... futex resumed>) = 1 [pid 1110] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1110] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1107] <... futex resumed>) = 0 [pid 1107] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1107] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1110] <... futex resumed>) = 1 [pid 1110] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1110] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1107] <... futex resumed>) = 0 [pid 1110] <... futex resumed>) = 1 [pid 1110] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1108] <... write resumed>) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] write(4, 0x20000180, 7) = 7 [pid 1108] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1108] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1107] exit_group(0) = ? [pid 1110] <... futex resumed>) = ? [pid 1108] <... futex resumed>) = ? [pid 1110] +++ exited with 0 +++ [pid 1108] +++ exited with 0 +++ [pid 1107] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1107, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./197/binderfs") = 0 umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./197/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./197/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./197") = 0 mkdir("./198", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1111 ./strace-static-x86_64: Process 1111 attached [pid 1111] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1111] chdir("./198") = 0 [pid 1111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1111] setpgid(0, 0) = 0 [pid 1111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1111] write(3, "1000", 4) = 4 [pid 1111] close(3) = 0 [pid 1111] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1111] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1111] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1111] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1111] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1111] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1111] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1112]}, 88) = 1112 [pid 1111] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1111] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1111] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1112 attached [pid 1112] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1112] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1112] memfd_create("syzkaller", 0) = 3 [pid 1112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1112] munmap(0x7f2081aae000, 138412032) = 0 [pid 1112] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.025712][ T1108] loop0: detected capacity change from 0 to 512 [ 39.033667][ T1108] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 39.046851][ T1108] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1112] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1112] close(3) = 0 [pid 1112] mkdir("./file0", 0777) = 0 [pid 1112] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1112] chdir("./file0") = 0 [pid 1112] ioctl(4, LOOP_CLR_FD) = 0 [pid 1112] close(4) = 0 [pid 1112] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1111] <... futex resumed>) = 0 [pid 1111] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1111] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1112] <... futex resumed>) = 1 [pid 1112] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1112] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1111] <... futex resumed>) = 0 [pid 1111] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1111] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1112] <... futex resumed>) = 1 [pid 1112] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1112] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1111] <... futex resumed>) = 0 [pid 1111] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1111] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1111] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1111] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1111] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1114]}, 88) = 1114 [pid 1111] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1111] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1111] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1112] <... futex resumed>) = 1 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1112] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1112] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1114 attached [pid 1114] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1114] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1114] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1114] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1111] <... futex resumed>) = 0 [pid 1111] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1111] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1112] <... futex resumed>) = 0 [pid 1112] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1112] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1111] <... futex resumed>) = 0 [pid 1111] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1111] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1112] <... futex resumed>) = 1 [pid 1112] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1114] <... futex resumed>) = 1 [pid 1114] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1112] <... setsockopt resumed>) = 0 [pid 1112] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1111] <... futex resumed>) = 0 [pid 1111] exit_group(0) = ? [pid 1114] <... futex resumed>) = ? [pid 1112] <... futex resumed>) = ? [pid 1114] +++ exited with 0 +++ [pid 1112] +++ exited with 0 +++ [pid 1111] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1111, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./198/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./198/binderfs") = 0 umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./198/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./198/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./198") = 0 mkdir("./199", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1115 ./strace-static-x86_64: Process 1115 attached [pid 1115] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1115] chdir("./199") = 0 [pid 1115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1115] setpgid(0, 0) = 0 [pid 1115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1115] write(3, "1000", 4) = 4 [pid 1115] close(3) = 0 [pid 1115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1115] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1115] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1115] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1115] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1115] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1115] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1116 attached [pid 1116] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1116] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1116] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1115] <... clone3 resumed> => {parent_tid=[1116]}, 88) = 1116 [pid 1115] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1115] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1116] <... futex resumed>) = 0 [pid 1116] memfd_create("syzkaller", 0) = 3 [pid 1116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1115] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1116] munmap(0x7f2081aae000, 138412032) = 0 [pid 1116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.092656][ T1112] loop0: detected capacity change from 0 to 512 [ 39.100559][ T1112] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 39.113872][ T1112] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1116] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1116] close(3) = 0 [pid 1116] mkdir("./file0", 0777) = 0 [pid 1116] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1116] chdir("./file0") = 0 [pid 1116] ioctl(4, LOOP_CLR_FD) = 0 [pid 1116] close(4) = 0 [pid 1116] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1115] <... futex resumed>) = 0 [pid 1115] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1115] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1116] <... futex resumed>) = 1 [pid 1116] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1116] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1115] <... futex resumed>) = 0 [pid 1115] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1115] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1116] <... futex resumed>) = 1 [pid 1116] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1116] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1115] <... futex resumed>) = 0 [pid 1115] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1115] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1115] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1115] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1115] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 1118 attached => {parent_tid=[1118]}, 88) = 1118 [pid 1115] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1115] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1115] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1116] <... futex resumed>) = 1 [pid 1118] set_robust_list(0x7f2089ead9a0, 24 [pid 1116] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1118] <... set_robust_list resumed>) = 0 [pid 1116] <... write resumed>) = 7 [pid 1116] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1116] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1116] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1116] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1116] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1116] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1118] rt_sigprocmask(SIG_SETMASK, [], [pid 1116] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1116] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1118] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1116] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1118] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1116] <... write resumed>) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1118] <... mmap resumed>) = 0x20000000 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1118] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1115] <... futex resumed>) = 0 [pid 1115] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1115] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1118] <... futex resumed>) = 1 [pid 1118] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7 [pid 1118] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1116] <... write resumed>) = 7 [pid 1115] <... futex resumed>) = 0 [pid 1115] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1115] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1118] <... futex resumed>) = 1 [pid 1118] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7 [pid 1118] <... setsockopt resumed>) = 0 [pid 1116] <... write resumed>) = 7 [pid 1116] write(4, 0x20000180, 7 [pid 1118] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1116] <... write resumed>) = 7 [pid 1115] <... futex resumed>) = 0 [pid 1118] <... futex resumed>) = 1 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1118] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] write(4, 0x20000180, 7) = 7 [pid 1116] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1116] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1115] exit_group(0 [pid 1118] <... futex resumed>) = ? [pid 1116] <... futex resumed>) = ? [pid 1115] <... exit_group resumed>) = ? [pid 1118] +++ exited with 0 +++ [pid 1116] +++ exited with 0 +++ [pid 1115] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1115, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./199/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./199/binderfs") = 0 umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./199/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./199/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./199") = 0 mkdir("./200", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1119 ./strace-static-x86_64: Process 1119 attached [pid 1119] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1119] chdir("./200") = 0 [pid 1119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1119] setpgid(0, 0) = 0 [pid 1119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1119] write(3, "1000", 4) = 4 [pid 1119] close(3) = 0 [pid 1119] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1119] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1119] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1119] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1119] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1119] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1119] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1120 attached => {parent_tid=[1120]}, 88) = 1120 [pid 1119] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1119] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1119] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1120] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1120] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1120] memfd_create("syzkaller", 0) = 3 [pid 1120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1120] munmap(0x7f2081aae000, 138412032) = 0 [pid 1120] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.158314][ T1116] loop0: detected capacity change from 0 to 512 [ 39.166708][ T1116] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 39.179792][ T1116] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1120] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1120] close(3) = 0 [pid 1120] mkdir("./file0", 0777) = 0 [pid 1120] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1120] chdir("./file0") = 0 [pid 1120] ioctl(4, LOOP_CLR_FD) = 0 [pid 1120] close(4) = 0 [pid 1120] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1119] <... futex resumed>) = 0 [pid 1119] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1119] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1120] <... futex resumed>) = 1 [pid 1120] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1120] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1119] <... futex resumed>) = 0 [pid 1119] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1119] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1120] <... futex resumed>) = 1 [pid 1120] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1120] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1119] <... futex resumed>) = 0 [pid 1119] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1119] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1119] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1119] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1119] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1122]}, 88) = 1122 [pid 1119] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1119] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1119] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1120] <... futex resumed>) = 1 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 1122 attached [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1122] set_robust_list(0x7f2089ead9a0, 24 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1122] <... set_robust_list resumed>) = 0 [pid 1120] <... write resumed>) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1122] rt_sigprocmask(SIG_SETMASK, [], [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1122] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1122] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1120] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1120] write(4, 0x20000180, 7 [pid 1122] <... mmap resumed>) = 0x20000000 [pid 1122] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] <... write resumed>) = 7 [pid 1122] <... futex resumed>) = 1 [pid 1120] write(4, 0x20000180, 7 [pid 1119] <... futex resumed>) = 0 [pid 1119] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1119] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1122] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 1120] <... write resumed>) = 7 [pid 1120] write(4, 0x20000180, 7) = 7 [pid 1122] <... socket resumed>) = 6 [pid 1122] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] write(4, 0x20000180, 7 [pid 1122] <... futex resumed>) = 1 [pid 1120] <... write resumed>) = 7 [pid 1119] <... futex resumed>) = 0 [pid 1119] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1119] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1120] write(4, 0x20000180, 7) = 7 [pid 1122] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1120] write(4, 0x20000180, 7 [pid 1122] <... setsockopt resumed>) = 0 [pid 1120] <... write resumed>) = 7 [pid 1122] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1120] write(4, 0x20000180, 7 [pid 1119] <... futex resumed>) = 0 [pid 1122] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1120] <... write resumed>) = 7 [pid 1120] write(4, 0x20000180, 7) = 7 [pid 1120] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1119] exit_group(0 [pid 1122] <... futex resumed>) = ? [pid 1120] <... futex resumed>) = ? [pid 1119] <... exit_group resumed>) = ? [pid 1120] +++ exited with 0 +++ [pid 1122] +++ exited with 0 +++ [pid 1119] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1119, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./200/binderfs") = 0 umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./200/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./200/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./200/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./200") = 0 mkdir("./201", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1124 ./strace-static-x86_64: Process 1124 attached [pid 1124] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1124] chdir("./201") = 0 [pid 1124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1124] setpgid(0, 0) = 0 [pid 1124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1124] write(3, "1000", 4) = 4 [pid 1124] close(3) = 0 [pid 1124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1124] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1124] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1124] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1124] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1124] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1124] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1125 attached => {parent_tid=[1125]}, 88) = 1125 [pid 1125] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1125] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1125] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1124] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1125] <... futex resumed>) = 0 [ 39.230330][ T1120] loop0: detected capacity change from 0 to 512 [ 39.238734][ T1120] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 39.252309][ T1120] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1125] memfd_create("syzkaller", 0 [pid 1124] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1125] <... memfd_create resumed>) = 3 [pid 1125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1125] munmap(0x7f2081aae000, 138412032) = 0 [pid 1125] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1125] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1125] close(3) = 0 [pid 1125] mkdir("./file0", 0777) = 0 [pid 1125] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1125] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1125] chdir("./file0") = 0 [pid 1125] ioctl(4, LOOP_CLR_FD) = 0 [pid 1125] close(4) = 0 [pid 1125] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1124] <... futex resumed>) = 0 [pid 1124] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1124] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1125] <... futex resumed>) = 1 [pid 1125] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1125] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1124] <... futex resumed>) = 0 [pid 1124] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1124] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1125] <... futex resumed>) = 1 [pid 1125] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1125] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1124] <... futex resumed>) = 0 [pid 1124] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1124] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1124] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 1125] <... futex resumed>) = 1 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1124] <... mprotect resumed>) = 0 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1124] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1124] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1124] <... clone3 resumed> => {parent_tid=[1127]}, 88) = 1127 [pid 1124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1124] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1124] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1125] <... write resumed>) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 1127 attached [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1127] set_robust_list(0x7f2089ead9a0, 24 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1127] <... set_robust_list resumed>) = 0 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1127] rt_sigprocmask(SIG_SETMASK, [], [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1127] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1125] <... write resumed>) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1127] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1125] <... write resumed>) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1125] write(4, 0x20000180, 7 [pid 1127] <... mmap resumed>) = 0x20000000 [pid 1125] <... write resumed>) = 7 [pid 1125] write(4, 0x20000180, 7) = 7 [pid 1125] write(4, 0x20000180, 7) = 7 [pid 1125] write(4, 0x20000180, 7 [pid 1127] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... write resumed>) = 7 [pid 1125] write(4, 0x20000180, 7) = 7 [pid 1125] write(4, 0x20000180, 7 [pid 1127] <... futex resumed>) = 1 [pid 1125] <... write resumed>) = 7 [pid 1124] <... futex resumed>) = 0 [pid 1125] write(4, 0x20000180, 7 [pid 1124] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1124] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1125] <... write resumed>) = 7 [pid 1125] write(4, 0x20000180, 7) = 7 [pid 1125] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1125] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1127] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1127] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1124] <... futex resumed>) = 0 [pid 1127] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1124] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1125] <... futex resumed>) = 0 [pid 1124] <... futex resumed>) = 1 [pid 1124] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1125] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1125] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1124] <... futex resumed>) = 0 [pid 1125] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1124] exit_group(0) = ? [pid 1125] <... futex resumed>) = ? [pid 1125] +++ exited with 0 +++ [pid 1127] <... futex resumed>) = ? [pid 1127] +++ exited with 0 +++ [pid 1124] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1124, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./201/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./201/binderfs") = 0 umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./201/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./201/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./201/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./201") = 0 mkdir("./202", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1128 ./strace-static-x86_64: Process 1128 attached [pid 1128] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1128] chdir("./202") = 0 [pid 1128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1128] setpgid(0, 0) = 0 [pid 1128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1128] write(3, "1000", 4) = 4 [pid 1128] close(3) = 0 [pid 1128] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1128] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1128] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1128] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1128] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1128] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1128] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1128] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1129]}, 88) = 1129 ./strace-static-x86_64: Process 1129 attached [pid 1129] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1129] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1129] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1128] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1128] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1129] <... futex resumed>) = 0 [pid 1128] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1129] memfd_create("syzkaller", 0) = 3 [pid 1129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1129] munmap(0x7f2081aae000, 138412032) = 0 [pid 1129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.315350][ T1125] loop0: detected capacity change from 0 to 512 [ 39.323132][ T1125] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 39.336527][ T1125] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1129] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1129] close(3) = 0 [pid 1129] mkdir("./file0", 0777) = 0 [pid 1129] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1129] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1129] chdir("./file0") = 0 [pid 1129] ioctl(4, LOOP_CLR_FD) = 0 [pid 1129] close(4) = 0 [pid 1129] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1128] <... futex resumed>) = 0 [pid 1128] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1128] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1129] <... futex resumed>) = 1 [pid 1129] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1129] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1128] <... futex resumed>) = 0 [pid 1128] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1128] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1129] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1129] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1128] <... futex resumed>) = 0 [pid 1128] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1128] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1128] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1128] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1128] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1128] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1131]}, 88) = 1131 [pid 1128] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1128] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1128] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1129] <... futex resumed>) = 1 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1131 attached ) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1129] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1129] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1131] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1131] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1131] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1131] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1131] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1128] <... futex resumed>) = 0 [pid 1128] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1128] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1129] <... futex resumed>) = 0 [pid 1129] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1129] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1128] <... futex resumed>) = 0 [pid 1128] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1128] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1129] <... futex resumed>) = 1 [pid 1129] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1129] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1128] <... futex resumed>) = 0 [pid 1128] exit_group(0) = ? [pid 1131] <... futex resumed>) = ? [pid 1131] +++ exited with 0 +++ [pid 1129] +++ exited with 0 +++ [pid 1128] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1128, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./202/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./202/binderfs") = 0 umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./202/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./202/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./202") = 0 mkdir("./203", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1132 ./strace-static-x86_64: Process 1132 attached [pid 1132] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1132] chdir("./203") = 0 [pid 1132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1132] setpgid(0, 0) = 0 [pid 1132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1132] write(3, "1000", 4) = 4 [pid 1132] close(3) = 0 [pid 1132] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1132] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1132] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1132] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1132] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1132] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1132] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1132] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1133 attached => {parent_tid=[1133]}, 88) = 1133 [pid 1133] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1133] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1133] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1132] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1132] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1133] <... futex resumed>) = 0 [pid 1133] memfd_create("syzkaller", 0) = 3 [pid 1133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1132] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1133] munmap(0x7f2081aae000, 138412032) = 0 [pid 1133] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.381414][ T1129] loop0: detected capacity change from 0 to 512 [ 39.389118][ T1129] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 39.402290][ T1129] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1133] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1133] close(3) = 0 [pid 1133] mkdir("./file0", 0777) = 0 [pid 1133] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1133] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1133] chdir("./file0") = 0 [pid 1133] ioctl(4, LOOP_CLR_FD) = 0 [pid 1133] close(4) = 0 [pid 1133] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1132] <... futex resumed>) = 0 [pid 1132] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1132] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1133] <... futex resumed>) = 1 [pid 1133] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1133] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1132] <... futex resumed>) = 0 [pid 1132] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1132] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1133] <... futex resumed>) = 1 [pid 1133] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1133] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1133] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1132] <... futex resumed>) = 0 [pid 1132] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1132] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1132] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1132] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1132] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1132] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1135]}, 88) = 1135 [pid 1132] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1132] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1132] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1133] <... futex resumed>) = 0 [pid 1133] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1133] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1133] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1133] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1135 attached ) = 7 [pid 1133] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1133] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1133] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1135] set_robust_list(0x7f2089ead9a0, 24 [pid 1133] <... write resumed>) = 7 [pid 1135] <... set_robust_list resumed>) = 0 [pid 1135] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1135] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1133] write(4, 0x20000180, 7 [pid 1135] <... mmap resumed>) = 0x20000000 [pid 1135] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1132] <... futex resumed>) = 0 [pid 1132] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1132] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1135] <... futex resumed>) = 1 [pid 1135] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1135] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1132] <... futex resumed>) = 0 [pid 1132] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1132] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1135] <... futex resumed>) = 1 [pid 1135] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1133] <... write resumed>) = 7 [pid 1135] <... setsockopt resumed>) = 0 [pid 1133] write(4, 0x20000180, 7 [pid 1135] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1133] <... write resumed>) = 7 [pid 1133] write(4, 0x20000180, 7 [pid 1132] <... futex resumed>) = 0 [pid 1135] <... futex resumed>) = 1 [pid 1135] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1133] <... write resumed>) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] write(4, 0x20000180, 7) = 7 [pid 1133] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1133] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1132] exit_group(0) = ? [pid 1135] <... futex resumed>) = ? [pid 1133] <... futex resumed>) = ? [pid 1135] +++ exited with 0 +++ [pid 1133] +++ exited with 0 +++ [pid 1132] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1132, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./203/binderfs") = 0 umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./203/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./203/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./203") = 0 mkdir("./204", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1136 ./strace-static-x86_64: Process 1136 attached [pid 1136] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1136] chdir("./204") = 0 [pid 1136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1136] setpgid(0, 0) = 0 [pid 1136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1136] write(3, "1000", 4) = 4 [pid 1136] close(3) = 0 [pid 1136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1136] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1136] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1136] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1136] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1136] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1136] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1137]}, 88) = 1137 ./strace-static-x86_64: Process 1137 attached [pid 1136] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1136] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1136] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1137] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1137] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1137] memfd_create("syzkaller", 0) = 3 [pid 1137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1137] munmap(0x7f2081aae000, 138412032) = 0 [pid 1137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.441317][ T1133] loop0: detected capacity change from 0 to 512 [ 39.449502][ T1133] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 39.462664][ T1133] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1137] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1137] close(3) = 0 [pid 1137] mkdir("./file0", 0777) = 0 [pid 1137] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1137] chdir("./file0") = 0 [pid 1137] ioctl(4, LOOP_CLR_FD) = 0 [pid 1137] close(4) = 0 [pid 1137] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1136] <... futex resumed>) = 0 [pid 1136] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1136] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1137] <... futex resumed>) = 1 [pid 1137] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1137] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1136] <... futex resumed>) = 0 [pid 1136] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1136] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1137] <... futex resumed>) = 1 [pid 1137] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1137] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1136] <... futex resumed>) = 0 [pid 1137] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1136] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1136] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1137] <... write resumed>) = 7 [pid 1137] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1136] <... futex resumed>) = 0 [pid 1136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1137] <... write resumed>) = 7 [pid 1136] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 1137] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1136] <... mprotect resumed>) = 0 [pid 1136] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1137] <... write resumed>) = 7 [pid 1137] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1136] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1136] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 1137] <... write resumed>) = 7 ./strace-static-x86_64: Process 1139 attached [pid 1139] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1139] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1139] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1137] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1136] <... clone3 resumed> => {parent_tid=[1139]}, 88) = 1139 [pid 1136] rt_sigprocmask(SIG_SETMASK, [], [pid 1137] <... write resumed>) = 7 [pid 1137] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1136] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1136] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1137] <... write resumed>) = 7 [pid 1136] <... futex resumed>) = 1 [pid 1139] <... futex resumed>) = 0 [pid 1136] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1139] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1137] write(4, 0x20000180, 7 [pid 1139] <... mmap resumed>) = 0x20000000 [pid 1139] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1137] <... write resumed>) = 7 [pid 1137] write(4, 0x20000180, 7 [pid 1139] <... futex resumed>) = 1 [pid 1136] <... futex resumed>) = 0 [pid 1136] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1136] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1139] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 1137] <... write resumed>) = 7 [pid 1137] write(4, 0x20000180, 7 [pid 1139] <... socket resumed>) = 6 [pid 1137] <... write resumed>) = 7 [pid 1139] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1137] write(4, 0x20000180, 7 [pid 1139] <... futex resumed>) = 1 [pid 1137] <... write resumed>) = 7 [pid 1136] <... futex resumed>) = 0 [pid 1136] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1136] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1137] write(4, 0x20000180, 7 [pid 1139] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1137] <... write resumed>) = 7 [pid 1137] write(4, 0x20000180, 7 [pid 1139] <... setsockopt resumed>) = 0 [pid 1137] <... write resumed>) = 7 [pid 1139] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1137] write(4, 0x20000180, 7 [pid 1139] <... futex resumed>) = 1 [pid 1137] <... write resumed>) = 7 [pid 1136] <... futex resumed>) = 0 [pid 1139] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] write(4, 0x20000180, 7) = 7 [pid 1137] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1137] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1136] exit_group(0) = ? [pid 1139] <... futex resumed>) = ? [pid 1139] +++ exited with 0 +++ [pid 1137] <... futex resumed>) = ? [pid 1137] +++ exited with 0 +++ [pid 1136] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1136, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./204/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./204/binderfs") = 0 umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./204/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./204/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./204") = 0 mkdir("./205", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1140 ./strace-static-x86_64: Process 1140 attached [pid 1140] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1140] chdir("./205") = 0 [pid 1140] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1140] setpgid(0, 0) = 0 [pid 1140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1140] write(3, "1000", 4) = 4 [pid 1140] close(3) = 0 [pid 1140] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1140] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1140] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1140] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1140] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1140] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1140] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1141]}, 88) = 1141 ./strace-static-x86_64: Process 1141 attached [pid 1141] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1141] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1140] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1140] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1140] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1141] memfd_create("syzkaller", 0) = 3 [pid 1141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1141] munmap(0x7f2081aae000, 138412032) = 0 [pid 1141] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.513031][ T1137] loop0: detected capacity change from 0 to 512 [ 39.520752][ T1137] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 39.534185][ T1137] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1141] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1141] close(3) = 0 [pid 1141] mkdir("./file0", 0777) = 0 [pid 1141] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1141] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1141] chdir("./file0") = 0 [pid 1141] ioctl(4, LOOP_CLR_FD) = 0 [pid 1141] close(4) = 0 [pid 1141] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1140] <... futex resumed>) = 0 [pid 1141] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1140] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1141] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1140] <... futex resumed>) = 0 [pid 1141] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1140] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1141] <... open resumed>) = 4 [pid 1141] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1140] <... futex resumed>) = 0 [pid 1140] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1140] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1141] <... futex resumed>) = 1 [pid 1141] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1141] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1140] <... futex resumed>) = 0 [pid 1140] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1140] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1141] <... futex resumed>) = 1 [pid 1140] <... futex resumed>) = 0 [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1141] <... write resumed>) = 7 [pid 1140] <... mmap resumed>) = 0x7f2089e8d000 [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1140] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE [pid 1141] <... write resumed>) = 7 [pid 1140] <... mprotect resumed>) = 0 [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1140] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1141] <... write resumed>) = 7 [pid 1140] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1140] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1143 attached [pid 1140] <... clone3 resumed> => {parent_tid=[1143]}, 88) = 1143 [pid 1140] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1140] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1140] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1141] <... write resumed>) = 7 [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1143] set_robust_list(0x7f2089ead9a0, 24 [pid 1141] <... write resumed>) = 7 [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1143] <... set_robust_list resumed>) = 0 [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1143] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1141] <... write resumed>) = 7 [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1143] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1141] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1141] write(4, 0x20000180, 7 [pid 1143] <... mmap resumed>) = 0x20000000 [pid 1141] <... write resumed>) = 7 [pid 1141] write(4, 0x20000180, 7) = 7 [pid 1141] write(4, 0x20000180, 7 [pid 1143] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1141] <... write resumed>) = 7 [pid 1143] <... futex resumed>) = 1 [pid 1141] write(4, 0x20000180, 7 [pid 1140] <... futex resumed>) = 0 [pid 1143] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1141] <... write resumed>) = 7 [pid 1140] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1141] write(4, 0x20000180, 7 [pid 1140] <... futex resumed>) = 0 [pid 1143] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 1141] <... write resumed>) = 7 [pid 1140] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1143] <... socket resumed>) = 6 [pid 1141] write(4, 0x20000180, 7 [pid 1143] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1141] <... write resumed>) = 7 [pid 1143] <... futex resumed>) = 1 [pid 1141] write(4, 0x20000180, 7 [pid 1140] <... futex resumed>) = 0 [pid 1143] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1141] <... write resumed>) = 7 [pid 1140] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1141] write(4, 0x20000180, 7 [pid 1140] <... futex resumed>) = 0 [pid 1143] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1141] <... write resumed>) = 7 [pid 1140] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1143] <... setsockopt resumed>) = 0 [pid 1141] write(4, 0x20000180, 7 [pid 1143] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1141] <... write resumed>) = 7 [pid 1143] <... futex resumed>) = 1 [pid 1141] write(4, 0x20000180, 7 [pid 1140] <... futex resumed>) = 0 [pid 1141] <... write resumed>) = 7 [pid 1143] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1141] write(4, 0x20000180, 7) = 7 [pid 1141] write(4, 0x20000180, 7) = 7 [pid 1141] write(4, 0x20000180, 7) = 7 [pid 1141] write(4, 0x20000180, 7) = 7 [pid 1141] write(4, 0x20000180, 7) = 7 [pid 1141] write(4, 0x20000180, 7) = 7 [pid 1141] write(4, 0x20000180, 7) = 7 [pid 1141] write(4, 0x20000180, 7) = 7 [pid 1141] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1141] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1140] exit_group(0 [pid 1143] <... futex resumed>) = ? [pid 1141] <... futex resumed>) = ? [pid 1140] <... exit_group resumed>) = ? [pid 1143] +++ exited with 0 +++ [pid 1141] +++ exited with 0 +++ [pid 1140] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1140, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./205/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./205/binderfs") = 0 umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./205/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./205/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./205") = 0 mkdir("./206", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1144 ./strace-static-x86_64: Process 1144 attached [pid 1144] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1144] chdir("./206") = 0 [pid 1144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1144] setpgid(0, 0) = 0 [pid 1144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1144] write(3, "1000", 4) = 4 [pid 1144] close(3) = 0 [pid 1144] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1144] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1144] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1144] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1144] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1144] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1144] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1144] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1145 attached [pid 1145] set_robust_list(0x7f2089ece9a0, 24 [pid 1144] <... clone3 resumed> => {parent_tid=[1145]}, 88) = 1145 [pid 1144] rt_sigprocmask(SIG_SETMASK, [], [pid 1145] <... set_robust_list resumed>) = 0 [pid 1144] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1145] rt_sigprocmask(SIG_SETMASK, [], [pid 1144] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1144] <... futex resumed>) = 0 [pid 1144] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1145] memfd_create("syzkaller", 0) = 3 [pid 1145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1145] munmap(0x7f2081aae000, 138412032) = 0 [pid 1145] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.585384][ T1141] loop0: detected capacity change from 0 to 512 [ 39.593618][ T1141] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 39.607121][ T1141] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1145] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1145] close(3) = 0 [pid 1145] mkdir("./file0", 0777) = 0 [pid 1145] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1145] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1145] chdir("./file0") = 0 [pid 1145] ioctl(4, LOOP_CLR_FD) = 0 [pid 1145] close(4) = 0 [pid 1145] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1144] <... futex resumed>) = 0 [pid 1144] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1144] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1145] <... futex resumed>) = 1 [pid 1145] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1145] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1144] <... futex resumed>) = 0 [pid 1144] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1144] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1145] <... futex resumed>) = 1 [pid 1145] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1145] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1144] <... futex resumed>) = 0 [pid 1144] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1144] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1144] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1144] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1144] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1144] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1147]}, 88) = 1147 [pid 1144] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1144] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1144] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1145] <... futex resumed>) = 1 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 1147 attached [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1145] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1145] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1147] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1147] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1147] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1147] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1144] <... futex resumed>) = 0 [pid 1144] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1144] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1145] <... futex resumed>) = 0 [pid 1145] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1145] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1144] <... futex resumed>) = 0 [pid 1144] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1144] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1145] <... futex resumed>) = 1 [pid 1147] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1145] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1145] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1144] <... futex resumed>) = 0 [pid 1144] exit_group(0) = ? [pid 1147] <... futex resumed>) = ? [pid 1145] <... futex resumed>) = ? [pid 1145] +++ exited with 0 +++ [pid 1147] +++ exited with 0 +++ [pid 1144] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1144, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./206/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./206/binderfs") = 0 umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./206/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./206/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./206") = 0 mkdir("./207", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1148 ./strace-static-x86_64: Process 1148 attached [pid 1148] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1148] chdir("./207") = 0 [pid 1148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1148] setpgid(0, 0) = 0 [pid 1148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1148] write(3, "1000", 4) = 4 [pid 1148] close(3) = 0 [pid 1148] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1148] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1148] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1148] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1148] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1148] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1148] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1149 attached => {parent_tid=[1149]}, 88) = 1149 [pid 1149] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1149] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1149] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1148] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1148] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1149] <... futex resumed>) = 0 [pid 1149] memfd_create("syzkaller", 0) = 3 [pid 1148] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1149] munmap(0x7f2081aae000, 138412032) = 0 [pid 1149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.658347][ T1145] loop0: detected capacity change from 0 to 512 [ 39.666201][ T1145] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 39.679417][ T1145] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1149] close(3) = 0 [pid 1149] mkdir("./file0", 0777) = 0 [pid 1149] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1149] chdir("./file0") = 0 [pid 1149] ioctl(4, LOOP_CLR_FD) = 0 [pid 1149] close(4) = 0 [pid 1149] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] <... futex resumed>) = 0 [pid 1148] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1148] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1149] <... futex resumed>) = 1 [pid 1149] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1149] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] <... futex resumed>) = 0 [pid 1148] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1148] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1149] <... futex resumed>) = 1 [pid 1149] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1149] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] <... futex resumed>) = 0 [pid 1148] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1148] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1148] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1148] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1148] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1151]}, 88) = 1151 [pid 1148] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1148] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1148] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1149] <... futex resumed>) = 1 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1149] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1149] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1151 attached [pid 1151] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1151] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1151] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1151] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] <... futex resumed>) = 0 [pid 1148] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1148] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1149] <... futex resumed>) = 0 [pid 1149] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1151] <... futex resumed>) = 1 [pid 1149] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1148] <... futex resumed>) = 0 [pid 1148] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1148] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1149] <... futex resumed>) = 1 [pid 1151] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1149] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1149] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1148] <... futex resumed>) = 0 [pid 1148] exit_group(0) = ? [pid 1149] +++ exited with 0 +++ [pid 1151] <... futex resumed>) = ? [pid 1151] +++ exited with 0 +++ [pid 1148] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1148, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./207/binderfs") = 0 umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./207/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./207/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./207") = 0 mkdir("./208", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1152 ./strace-static-x86_64: Process 1152 attached [pid 1152] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1152] chdir("./208") = 0 [pid 1152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1152] setpgid(0, 0) = 0 [pid 1152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1152] write(3, "1000", 4) = 4 [pid 1152] close(3) = 0 [pid 1152] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1152] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1152] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1152] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1152] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1152] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1152] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1153 attached [pid 1153] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1153] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1153] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1152] <... clone3 resumed> => {parent_tid=[1153]}, 88) = 1153 [pid 1152] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1152] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1152] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1153] <... futex resumed>) = 0 [pid 1153] memfd_create("syzkaller", 0) = 3 [pid 1153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1153] munmap(0x7f2081aae000, 138412032) = 0 [pid 1153] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.719686][ T1149] loop0: detected capacity change from 0 to 512 [ 39.727950][ T1149] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 39.741477][ T1149] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1153] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1153] close(3) = 0 [pid 1153] mkdir("./file0", 0777) = 0 [pid 1153] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1153] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1153] chdir("./file0") = 0 [pid 1153] ioctl(4, LOOP_CLR_FD) = 0 [pid 1153] close(4) = 0 [pid 1153] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1152] <... futex resumed>) = 0 [pid 1152] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1152] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1153] <... futex resumed>) = 1 [pid 1153] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1153] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1152] <... futex resumed>) = 0 [pid 1152] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1152] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1153] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1153] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1152] <... futex resumed>) = 0 [pid 1152] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1152] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1152] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1152] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1152] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1155]}, 88) = 1155 [pid 1152] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1152] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1152] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1153] <... futex resumed>) = 1 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1155 attached ) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1155] set_robust_list(0x7f2089ead9a0, 24 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1155] <... set_robust_list resumed>) = 0 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1155] rt_sigprocmask(SIG_SETMASK, [], [pid 1153] <... write resumed>) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1155] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1153] <... write resumed>) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1153] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1153] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1155] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1155] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1152] <... futex resumed>) = 0 [pid 1152] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1152] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1153] <... futex resumed>) = 0 [pid 1153] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1153] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1152] <... futex resumed>) = 0 [pid 1152] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1152] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1153] <... futex resumed>) = 1 [pid 1155] <... futex resumed>) = 1 [pid 1153] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1153] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1152] <... futex resumed>) = 0 [pid 1152] exit_group(0) = ? [pid 1153] <... futex resumed>) = ? [pid 1153] +++ exited with 0 +++ [pid 1155] +++ exited with 0 +++ [pid 1152] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1152, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./208/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./208/binderfs") = 0 umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./208/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./208/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./208") = 0 mkdir("./209", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1156 ./strace-static-x86_64: Process 1156 attached [pid 1156] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1156] chdir("./209") = 0 [pid 1156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1156] setpgid(0, 0) = 0 [pid 1156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1156] write(3, "1000", 4) = 4 [pid 1156] close(3) = 0 [pid 1156] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1156] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1156] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1156] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1156] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1156] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1156] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1157 attached [pid 1157] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1157] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1157] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1156] <... clone3 resumed> => {parent_tid=[1157]}, 88) = 1157 [pid 1156] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1156] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1157] <... futex resumed>) = 0 [pid 1157] memfd_create("syzkaller", 0) = 3 [pid 1157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1156] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1157] <... mmap resumed>) = 0x7f2081aae000 [pid 1157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1157] munmap(0x7f2081aae000, 138412032) = 0 [pid 1157] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.783464][ T1153] loop0: detected capacity change from 0 to 512 [ 39.791845][ T1153] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 39.805105][ T1153] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1157] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1157] close(3) = 0 [pid 1157] mkdir("./file0", 0777) = 0 [pid 1157] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1157] chdir("./file0") = 0 [pid 1157] ioctl(4, LOOP_CLR_FD) = 0 [pid 1157] close(4) = 0 [pid 1157] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] <... futex resumed>) = 0 [pid 1156] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1156] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1157] <... futex resumed>) = 1 [pid 1157] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1157] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] <... futex resumed>) = 0 [pid 1156] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1156] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1157] <... futex resumed>) = 1 [pid 1157] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1157] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1157] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1156] <... futex resumed>) = 0 [pid 1156] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1156] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1156] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1156] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1156] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1159]}, 88) = 1159 [pid 1156] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1156] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1156] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1157] <... futex resumed>) = 0 [pid 1157] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1157] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1157] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1157] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1157] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 1159 attached [pid 1159] set_robust_list(0x7f2089ead9a0, 24 [pid 1157] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1159] <... set_robust_list resumed>) = 0 [pid 1157] <... write resumed>) = 7 [pid 1159] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1159] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1157] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1157] write(4, 0x20000180, 7 [pid 1159] <... mmap resumed>) = 0x20000000 [pid 1159] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1157] <... write resumed>) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1156] <... futex resumed>) = 0 [pid 1157] write(4, 0x20000180, 7 [pid 1156] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1156] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1159] <... futex resumed>) = 1 [pid 1157] <... write resumed>) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1159] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7 [pid 1159] <... socket resumed>) = 6 [pid 1157] <... write resumed>) = 7 [pid 1159] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7) = 7 [pid 1157] write(4, 0x20000180, 7 [pid 1156] <... futex resumed>) = 0 [pid 1157] <... write resumed>) = 7 [pid 1157] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1157] <... futex resumed>) = 0 [pid 1156] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1157] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1159] <... futex resumed>) = 1 [pid 1159] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1159] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1156] <... futex resumed>) = 0 [pid 1156] exit_group(0) = ? [pid 1159] +++ exited with 0 +++ [pid 1157] <... futex resumed>) = ? [pid 1157] +++ exited with 0 +++ [pid 1156] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1156, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./209/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./209/binderfs") = 0 umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./209/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./209/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./209") = 0 mkdir("./210", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 1160 attached , child_tidptr=0x5555574f3690) = 1160 [pid 1160] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1160] chdir("./210") = 0 [pid 1160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1160] setpgid(0, 0) = 0 [pid 1160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1160] write(3, "1000", 4) = 4 [pid 1160] close(3) = 0 [pid 1160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1160] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1160] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1160] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1160] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1160] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1160] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1161 attached => {parent_tid=[1161]}, 88) = 1161 [pid 1161] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1161] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1161] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1160] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1160] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1161] <... futex resumed>) = 0 [pid 1161] memfd_create("syzkaller", 0) = 3 [pid 1161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1160] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1161] munmap(0x7f2081aae000, 138412032) = 0 [pid 1161] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.850606][ T1157] loop0: detected capacity change from 0 to 512 [ 39.858881][ T1157] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 39.872306][ T1157] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1161] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1161] close(3) = 0 [pid 1161] mkdir("./file0", 0777) = 0 [pid 1161] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1161] chdir("./file0") = 0 [pid 1161] ioctl(4, LOOP_CLR_FD) = 0 [pid 1161] close(4) = 0 [pid 1161] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1160] <... futex resumed>) = 0 [pid 1161] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 1160] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1160] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1161] <... open resumed>) = 4 [pid 1161] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1160] <... futex resumed>) = 0 [pid 1161] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1160] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1160] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1161] <... open resumed>) = 5 [pid 1161] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1160] <... futex resumed>) = 0 [pid 1160] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1160] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1160] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1160] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1160] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1163]}, 88) = 1163 [pid 1160] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1160] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1160] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1163 attached [pid 1163] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1163] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1163] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1161] <... futex resumed>) = 1 [pid 1163] <... mmap resumed>) = 0x20000000 [pid 1161] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 1163] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1160] <... futex resumed>) = 0 [pid 1160] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1160] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1163] <... futex resumed>) = 1 [pid 1163] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = ? [pid 1160] <... futex resumed>) = ? [pid 1163] +++ killed by SIGBUS +++ [pid 1161] +++ killed by SIGBUS +++ [pid 1160] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1160, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./210/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./210/binderfs") = 0 umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./210/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./210/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./210") = 0 mkdir("./211", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1164 ./strace-static-x86_64: Process 1164 attached [pid 1164] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1164] chdir("./211") = 0 [pid 1164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1164] setpgid(0, 0) = 0 [pid 1164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1164] write(3, "1000", 4) = 4 [pid 1164] close(3) = 0 [pid 1164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1164] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1164] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1164] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1164] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1164] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1165]}, 88) = 1165 [pid 1164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1164] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1165 attached [pid 1165] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1165] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1165] memfd_create("syzkaller", 0) = 3 [pid 1165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1165] munmap(0x7f2081aae000, 138412032) = 0 [pid 1165] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.916307][ T1161] loop0: detected capacity change from 0 to 512 [ 39.924234][ T1161] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 39.937887][ T1161] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1165] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1165] close(3) = 0 [pid 1165] mkdir("./file0", 0777) = 0 [pid 1165] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1165] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1165] chdir("./file0") = 0 [pid 1165] ioctl(4, LOOP_CLR_FD) = 0 [pid 1165] close(4) = 0 [pid 1165] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1164] <... futex resumed>) = 0 [pid 1164] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1165] <... futex resumed>) = 1 [pid 1165] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1165] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1164] <... futex resumed>) = 0 [pid 1164] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1165] <... futex resumed>) = 1 [pid 1165] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1165] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1164] <... futex resumed>) = 0 [pid 1164] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1164] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1164] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1164] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1167]}, 88) = 1167 [pid 1164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1164] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1165] <... futex resumed>) = 1 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1167 attached [pid 1167] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1165] <... write resumed>) = 7 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1167] rt_sigprocmask(SIG_SETMASK, [], [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1167] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1165] <... write resumed>) = 7 [pid 1167] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1165] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1165] write(4, 0x20000180, 7) = 7 [pid 1165] write(4, 0x20000180, 7) = 7 [pid 1165] write(4, 0x20000180, 7) = 7 [pid 1167] <... mmap resumed>) = 0x20000000 [pid 1167] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1165] write(4, 0x20000180, 7 [pid 1164] <... futex resumed>) = 0 [pid 1164] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1167] <... futex resumed>) = 1 [pid 1165] <... write resumed>) = 7 [pid 1167] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 1165] write(4, 0x20000180, 7 [pid 1167] <... socket resumed>) = 6 [pid 1167] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1164] <... futex resumed>) = 0 [pid 1164] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1164] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1167] <... futex resumed>) = 1 [pid 1167] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1165] <... write resumed>) = 7 [pid 1165] write(4, 0x20000180, 7) = 7 [pid 1165] write(4, 0x20000180, 7) = 7 [pid 1165] write(4, 0x20000180, 7) = 7 [pid 1165] write(4, 0x20000180, 7) = 7 [pid 1167] <... setsockopt resumed>) = 0 [pid 1165] write(4, 0x20000180, 7) = 7 [pid 1165] write(4, 0x20000180, 7 [pid 1167] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1165] <... write resumed>) = 7 [pid 1164] <... futex resumed>) = 0 [pid 1167] <... futex resumed>) = 1 [pid 1167] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1165] write(4, 0x20000180, 7) = 7 [pid 1165] write(4, 0x20000180, 7) = 7 [pid 1165] write(4, 0x20000180, 7) = 7 [pid 1165] write(4, 0x20000180, 7) = 7 [pid 1165] write(4, 0x20000180, 7) = 7 [pid 1165] write(4, 0x20000180, 7) = 7 [pid 1165] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1165] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1164] exit_group(0) = ? [pid 1167] <... futex resumed>) = ? [pid 1165] <... futex resumed>) = ? [pid 1167] +++ exited with 0 +++ [pid 1165] +++ exited with 0 +++ [pid 1164] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1164, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./211/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./211/binderfs") = 0 umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./211/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./211/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./211") = 0 mkdir("./212", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1168 ./strace-static-x86_64: Process 1168 attached [pid 1168] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1168] chdir("./212") = 0 [pid 1168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1168] setpgid(0, 0) = 0 [pid 1168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1168] write(3, "1000", 4) = 4 [pid 1168] close(3) = 0 [pid 1168] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1168] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1168] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1168] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1168] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1168] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1169]}, 88) = 1169 [pid 1168] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1168] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1169 attached [pid 1169] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1169] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1169] memfd_create("syzkaller", 0) = 3 [pid 1169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1169] munmap(0x7f2081aae000, 138412032) = 0 [pid 1169] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 39.981832][ T1165] loop0: detected capacity change from 0 to 512 [ 39.989431][ T1165] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 40.003178][ T1165] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1169] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1169] close(3) = 0 [pid 1169] mkdir("./file0", 0777) = 0 [pid 1169] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 40.040548][ T1169] loop0: detected capacity change from 0 to 512 [ 40.048590][ T1169] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 40.056668][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 40.056680][ T28] audit: type=1400 audit(1699959256.936:80): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [pid 1169] chdir("./file0") = 0 [pid 1169] ioctl(4, LOOP_CLR_FD) = 0 [pid 1169] close(4) = 0 [pid 1169] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1169] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1168] <... futex resumed>) = 0 [pid 1168] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1169] <... futex resumed>) = 0 [pid 1169] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1169] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1168] <... futex resumed>) = 0 [pid 1168] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1169] <... futex resumed>) = 1 [pid 1169] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1169] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1168] <... futex resumed>) = 0 [pid 1168] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1168] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1168] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1168] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1171]}, 88) = 1171 [pid 1168] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1168] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1169] <... futex resumed>) = 1 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1169] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1169] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1171 attached [pid 1171] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1171] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1171] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1171] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1168] <... futex resumed>) = 0 [pid 1168] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1169] <... futex resumed>) = 0 [pid 1169] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1169] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1171] <... futex resumed>) = 1 [pid 1169] <... futex resumed>) = 1 [pid 1168] <... futex resumed>) = 0 [pid 1168] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1168] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1169] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1171] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1169] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1168] <... futex resumed>) = 0 [pid 1169] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1168] exit_group(0) = ? [pid 1169] <... futex resumed>) = ? [pid 1169] +++ exited with 0 +++ [pid 1171] <... futex resumed>) = ? [pid 1171] +++ exited with 0 +++ [pid 1168] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1168, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./212/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./212/binderfs") = 0 umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./212/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./212/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./212/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./212") = 0 mkdir("./213", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1172 ./strace-static-x86_64: Process 1172 attached [pid 1172] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1172] chdir("./213") = 0 [pid 1172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1172] setpgid(0, 0) = 0 [pid 1172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1172] write(3, "1000", 4) = 4 [pid 1172] close(3) = 0 [pid 1172] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1172] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1172] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1172] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1172] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1172] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1173 attached [pid 1173] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1173] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1173] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1172] <... clone3 resumed> => {parent_tid=[1173]}, 88) = 1173 [pid 1172] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1172] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1173] <... futex resumed>) = 0 [pid 1172] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1173] memfd_create("syzkaller", 0) = 3 [pid 1173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1173] munmap(0x7f2081aae000, 138412032) = 0 [pid 1173] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 40.061721][ T1169] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 40.067908][ T28] audit: type=1400 audit(1699959256.936:81): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [pid 1173] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1173] close(3) = 0 [pid 1173] mkdir("./file0", 0777) = 0 [pid 1173] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1173] chdir("./file0") = 0 [pid 1173] ioctl(4, LOOP_CLR_FD) = 0 [pid 1173] close(4) = 0 [pid 1173] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = 0 [pid 1172] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1173] <... futex resumed>) = 1 [pid 1173] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1173] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = 0 [pid 1172] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1173] <... futex resumed>) = 1 [pid 1173] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1173] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = 0 [pid 1172] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1172] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1172] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1172] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1175]}, 88) = 1175 [pid 1172] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1172] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1173] <... futex resumed>) = 1 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1173] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1173] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1175 attached [pid 1175] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1175] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1175] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1175] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1172] <... futex resumed>) = 0 [pid 1172] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1172] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1175] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1173] <... futex resumed>) = 0 [pid 1173] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1173] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = 0 [pid 1172] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1172] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1173] <... futex resumed>) = 1 [pid 1173] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1173] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1172] <... futex resumed>) = 0 [pid 1172] exit_group(0) = ? [pid 1173] <... futex resumed>) = ? [pid 1175] <... futex resumed>) = ? [pid 1173] +++ exited with 0 +++ [pid 1175] +++ exited with 0 +++ [pid 1172] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1172, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./213/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./213/binderfs") = 0 umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./213/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./213/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./213") = 0 mkdir("./214", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1176 ./strace-static-x86_64: Process 1176 attached [pid 1176] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1176] chdir("./214") = 0 [pid 1176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1176] setpgid(0, 0) = 0 [pid 1176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1176] write(3, "1000", 4) = 4 [pid 1176] close(3) = 0 [pid 1176] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1176] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1176] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1176] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1176] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1176] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0} => {parent_tid=[1177]}, 88) = 1177 [pid 1176] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1176] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1177 attached [pid 1177] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1177] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1177] memfd_create("syzkaller", 0) = 3 [pid 1177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1177] munmap(0x7f2081aae000, 138412032) = 0 [pid 1177] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 40.141249][ T1173] loop0: detected capacity change from 0 to 512 [ 40.149077][ T1173] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 40.162551][ T1173] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1177] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1177] close(3) = 0 [pid 1177] mkdir("./file0", 0777) = 0 [pid 1177] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1177] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1177] chdir("./file0") = 0 [pid 1177] ioctl(4, LOOP_CLR_FD) = 0 [pid 1177] close(4) = 0 [pid 1177] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1177] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1176] <... futex resumed>) = 0 [pid 1176] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1176] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1177] <... futex resumed>) = 0 [pid 1177] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1177] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1176] <... futex resumed>) = 0 [pid 1176] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1177] <... futex resumed>) = 1 [pid 1177] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1177] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1176] <... futex resumed>) = 0 [pid 1176] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1176] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1176] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1176] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1179]}, 88) = 1179 ./strace-static-x86_64: Process 1179 attached [pid 1176] rt_sigprocmask(SIG_SETMASK, [], [pid 1179] set_robust_list(0x7f2089ead9a0, 24 [pid 1176] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1179] <... set_robust_list resumed>) = 0 [pid 1179] rt_sigprocmask(SIG_SETMASK, [], [pid 1176] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1179] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1176] <... futex resumed>) = 0 [pid 1179] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1176] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1179] <... mmap resumed>) = 0x20000000 [pid 1177] <... futex resumed>) = 1 [pid 1179] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1176] <... futex resumed>) = 0 [pid 1177] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000180} --- [pid 1179] +++ killed by SIGBUS +++ [pid 1177] +++ killed by SIGBUS +++ [pid 1176] +++ killed by SIGBUS +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1176, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./214/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./214/binderfs") = 0 umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./214/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./214/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./214/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./214") = 0 mkdir("./215", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1180 ./strace-static-x86_64: Process 1180 attached [pid 1180] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1180] chdir("./215") = 0 [pid 1180] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1180] setpgid(0, 0) = 0 [pid 1180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1180] write(3, "1000", 4) = 4 [pid 1180] close(3) = 0 [pid 1180] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1180] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1180] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1180] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1180] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1180] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1180] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1181 attached => {parent_tid=[1181]}, 88) = 1181 [pid 1181] set_robust_list(0x7f2089ece9a0, 24 [pid 1180] rt_sigprocmask(SIG_SETMASK, [], [pid 1181] <... set_robust_list resumed>) = 0 [pid 1180] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1181] rt_sigprocmask(SIG_SETMASK, [], [pid 1180] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1180] <... futex resumed>) = 0 [pid 1180] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1181] memfd_create("syzkaller", 0) = 3 [pid 1181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1181] munmap(0x7f2081aae000, 138412032) = 0 [pid 1181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 40.201443][ T1177] loop0: detected capacity change from 0 to 512 [ 40.209313][ T1177] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 40.222607][ T1177] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1181] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1181] close(3) = 0 [pid 1181] mkdir("./file0", 0777) = 0 [pid 1181] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1181] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1181] chdir("./file0") = 0 [pid 1181] ioctl(4, LOOP_CLR_FD) = 0 [pid 1181] close(4) = 0 [pid 1181] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1181] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1180] <... futex resumed>) = 0 [pid 1180] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1180] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1181] <... futex resumed>) = 0 [pid 1181] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1181] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1180] <... futex resumed>) = 0 [pid 1181] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 1180] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1181] <... open resumed>) = 5 [pid 1180] <... futex resumed>) = 0 [pid 1180] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1181] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1180] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1181] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1180] <... futex resumed>) = 0 [pid 1180] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1181] <... write resumed>) = 7 [pid 1180] <... mmap resumed>) = 0x7f2089e8d000 [pid 1181] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1180] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1181] <... write resumed>) = 7 [pid 1181] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1180] rt_sigprocmask(SIG_BLOCK, ~[], [pid 1181] <... write resumed>) = 7 [pid 1180] <... rt_sigprocmask resumed>[], 8) = 0 [pid 1181] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1180] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1184]}, 88) = 1184 ./strace-static-x86_64: Process 1184 attached [pid 1181] <... write resumed>) = 7 [pid 1180] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1184] set_robust_list(0x7f2089ead9a0, 24 [pid 1180] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1181] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1180] <... futex resumed>) = 0 [pid 1184] <... set_robust_list resumed>) = 0 [pid 1180] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1181] <... write resumed>) = 7 [pid 1184] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1184] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1181] write(4, 0x20000180, 7 [pid 1184] <... mmap resumed>) = 0x20000000 [pid 1181] <... write resumed>) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7 [pid 1184] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1181] <... write resumed>) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1184] <... futex resumed>) = 1 [pid 1180] <... futex resumed>) = 0 [pid 1180] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1180] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] write(4, 0x20000180, 7) = 7 [pid 1181] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1181] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1184] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1184] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1180] <... futex resumed>) = 0 [pid 1180] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1180] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1181] <... futex resumed>) = 0 [pid 1181] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1181] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1180] <... futex resumed>) = 0 [pid 1180] exit_group(0) = ? [pid 1181] <... futex resumed>) = ? [pid 1181] +++ exited with 0 +++ [pid 1184] <... futex resumed>) = ? [pid 1184] +++ exited with 0 +++ [pid 1180] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1180, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./215/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./215/binderfs") = 0 umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./215/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./215/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./215/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./215") = 0 mkdir("./216", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1185 ./strace-static-x86_64: Process 1185 attached [ 40.258300][ T1181] loop0: detected capacity change from 0 to 512 [ 40.266704][ T1181] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 40.279968][ T1181] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1185] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1185] chdir("./216") = 0 [pid 1185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1185] setpgid(0, 0) = 0 [pid 1185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1185] write(3, "1000", 4) = 4 [pid 1185] close(3) = 0 [pid 1185] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1185] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1185] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1185] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1185] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1186 attached => {parent_tid=[1186]}, 88) = 1186 [pid 1186] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1186] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1186] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1185] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1185] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1186] <... futex resumed>) = 0 [pid 1186] memfd_create("syzkaller", 0) = 3 [pid 1185] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1186] munmap(0x7f2081aae000, 138412032) = 0 [pid 1186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1186] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1186] close(3) = 0 [pid 1186] mkdir("./file0", 0777) = 0 [pid 1186] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1186] chdir("./file0") = 0 [pid 1186] ioctl(4, LOOP_CLR_FD) = 0 [pid 1186] close(4) = 0 [pid 1186] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] <... futex resumed>) = 0 [pid 1185] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1186] <... futex resumed>) = 1 [pid 1186] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1186] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1185] <... futex resumed>) = 0 [pid 1185] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1186] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1186] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] <... futex resumed>) = 0 [pid 1185] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1185] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1185] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1188]}, 88) = 1188 [pid 1185] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1185] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1186] <... futex resumed>) = 1 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1186] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1186] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1188 attached [pid 1188] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1188] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1188] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1188] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] <... futex resumed>) = 0 [pid 1185] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1185] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1186] <... futex resumed>) = 0 [pid 1186] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1186] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1185] <... futex resumed>) = 0 [pid 1185] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1185] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1188] <... futex resumed>) = 1 [pid 1186] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232) = 0 [pid 1186] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] <... futex resumed>) = 0 [pid 1185] exit_group(0) = ? [pid 1186] <... futex resumed>) = ? [pid 1186] +++ exited with 0 +++ [pid 1188] +++ exited with 0 +++ [pid 1185] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1185, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./216/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./216/binderfs") = 0 umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./216/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./216/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./216") = 0 mkdir("./217", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1189 ./strace-static-x86_64: Process 1189 attached [pid 1189] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1189] chdir("./217") = 0 [pid 1189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1189] setpgid(0, 0) = 0 [pid 1189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1189] write(3, "1000", 4) = 4 [pid 1189] close(3) = 0 [pid 1189] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1189] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1189] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1189] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1189] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1189] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1190 attached => {parent_tid=[1190]}, 88) = 1190 [pid 1190] set_robust_list(0x7f2089ece9a0, 24 [pid 1189] rt_sigprocmask(SIG_SETMASK, [], [pid 1190] <... set_robust_list resumed>) = 0 [pid 1190] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1190] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1189] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1190] <... futex resumed>) = 0 [pid 1189] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1190] memfd_create("syzkaller", 0) = 3 [pid 1190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1190] munmap(0x7f2081aae000, 138412032) = 0 [pid 1190] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 40.351644][ T1186] loop0: detected capacity change from 0 to 512 [ 40.359580][ T1186] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 40.372859][ T1186] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1190] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1190] close(3) = 0 [pid 1190] mkdir("./file0", 0777) = 0 [pid 1190] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1190] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1190] chdir("./file0") = 0 [pid 1190] ioctl(4, LOOP_CLR_FD) = 0 [pid 1190] close(4) = 0 [pid 1190] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] <... futex resumed>) = 0 [pid 1189] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... futex resumed>) = 1 [pid 1190] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1190] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] <... futex resumed>) = 0 [pid 1189] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... futex resumed>) = 1 [pid 1190] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1190] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] <... futex resumed>) = 0 [pid 1189] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1189] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1190] <... futex resumed>) = 1 [pid 1189] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1190] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1189] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} [pid 1190] <... write resumed>) = 7 [pid 1189] <... clone3 resumed> => {parent_tid=[1192]}, 88) = 1192 [pid 1190] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1189] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1189] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1190] <... write resumed>) = 7 [pid 1189] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1190] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1192 attached ) = 7 [pid 1190] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1192] set_robust_list(0x7f2089ead9a0, 24 [pid 1190] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1192] <... set_robust_list resumed>) = 0 [pid 1192] rt_sigprocmask(SIG_SETMASK, [], [pid 1190] <... write resumed>) = 7 [pid 1192] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1192] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1190] write(4, 0x20000180, 7 [pid 1192] <... mmap resumed>) = 0x20000000 [pid 1192] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1192] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] <... futex resumed>) = 0 [pid 1190] <... write resumed>) = 7 [pid 1190] write(4, 0x20000180, 7 [pid 1189] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1189] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1190] <... write resumed>) = 7 [pid 1192] <... futex resumed>) = 0 [pid 1192] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1192] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] <... futex resumed>) = 0 [pid 1189] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1192] <... futex resumed>) = 1 [pid 1192] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1190] write(4, 0x20000180, 7 [pid 1192] <... setsockopt resumed>) = 0 [pid 1192] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] <... futex resumed>) = 0 [pid 1190] <... write resumed>) = 7 [pid 1192] <... futex resumed>) = 1 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7) = 7 [pid 1190] write(4, 0x20000180, 7 [pid 1192] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1190] <... write resumed>) = 7 [pid 1190] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1190] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] exit_group(0) = ? [pid 1192] <... futex resumed>) = ? [pid 1190] <... futex resumed>) = ? [pid 1192] +++ exited with 0 +++ [pid 1190] +++ exited with 0 +++ [pid 1189] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1189, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./217/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./217/binderfs") = 0 umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./217/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./217/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./217/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./217") = 0 mkdir("./218", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1193 ./strace-static-x86_64: Process 1193 attached [pid 1193] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1193] chdir("./218") = 0 [pid 1193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1193] setpgid(0, 0) = 0 [pid 1193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1193] write(3, "1000", 4) = 4 [pid 1193] close(3) = 0 [pid 1193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1193] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1193] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1193] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1193] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1193] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1193] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1194 attached [pid 1194] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1194] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1194] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1193] <... clone3 resumed> => {parent_tid=[1194]}, 88) = 1194 [pid 1193] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1193] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1194] <... futex resumed>) = 0 [pid 1194] memfd_create("syzkaller", 0) = 3 [pid 1194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [ 40.412126][ T1190] loop0: detected capacity change from 0 to 512 [ 40.419940][ T1190] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 40.433192][ T1190] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1193] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1194] munmap(0x7f2081aae000, 138412032) = 0 [pid 1194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1194] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1194] close(3) = 0 [pid 1194] mkdir("./file0", 0777) = 0 [pid 1194] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1194] chdir("./file0") = 0 [pid 1194] ioctl(4, LOOP_CLR_FD) = 0 [pid 1194] close(4) = 0 [pid 1194] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1193] <... futex resumed>) = 0 [pid 1193] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1193] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1194] <... futex resumed>) = 1 [pid 1194] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1194] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1193] <... futex resumed>) = 0 [pid 1193] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1193] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1194] <... futex resumed>) = 1 [pid 1194] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1194] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1193] <... futex resumed>) = 0 [pid 1193] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1193] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1194] <... futex resumed>) = 1 [pid 1193] <... mmap resumed>) = 0x7f2089e8d000 [pid 1193] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1193] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1193] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0}./strace-static-x86_64: Process 1196 attached => {parent_tid=[1196]}, 88) = 1196 [pid 1196] set_robust_list(0x7f2089ead9a0, 24 [pid 1193] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1193] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1193] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1194] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1196] <... set_robust_list resumed>) = 0 [pid 1194] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1194] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1196] rt_sigprocmask(SIG_SETMASK, [], [pid 1194] <... write resumed>) = 7 [pid 1194] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1196] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1194] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1194] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1194] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1194] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1194] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1194] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1196] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 1194] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1194] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1196] <... mmap resumed>) = 0x20000000 [pid 1196] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1196] <... futex resumed>) = 1 [pid 1193] <... futex resumed>) = 0 [pid 1193] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1193] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1196] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1196] <... socket resumed>) = 6 [pid 1194] write(4, 0x20000180, 7 [pid 1196] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1194] <... write resumed>) = 7 [pid 1196] <... futex resumed>) = 1 [pid 1194] write(4, 0x20000180, 7 [pid 1193] <... futex resumed>) = 0 [pid 1193] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1193] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1196] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1194] <... write resumed>) = 7 [pid 1194] write(4, 0x20000180, 7 [pid 1196] <... setsockopt resumed>) = 0 [pid 1196] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1194] <... write resumed>) = 7 [pid 1194] write(4, 0x20000180, 7 [pid 1196] <... futex resumed>) = 1 [pid 1193] <... futex resumed>) = 0 [pid 1196] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1194] <... write resumed>) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1194] write(4, 0x20000180, 7) = 7 [pid 1194] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1194] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1193] exit_group(0 [pid 1194] <... futex resumed>) = ? [pid 1193] <... exit_group resumed>) = ? [pid 1194] +++ exited with 0 +++ [pid 1196] <... futex resumed>) = ? [pid 1196] +++ exited with 0 +++ [pid 1193] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1193, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./218/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./218/binderfs") = 0 umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./218/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./218/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./218/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./218") = 0 mkdir("./219", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1197 ./strace-static-x86_64: Process 1197 attached [pid 1197] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1197] chdir("./219") = 0 [pid 1197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1197] setpgid(0, 0) = 0 [pid 1197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1197] write(3, "1000", 4) = 4 [pid 1197] close(3) = 0 [pid 1197] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1197] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1197] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1197] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1197] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1197] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1197] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1198 attached => {parent_tid=[1198]}, 88) = 1198 [pid 1198] set_robust_list(0x7f2089ece9a0, 24 [pid 1197] rt_sigprocmask(SIG_SETMASK, [], [pid 1198] <... set_robust_list resumed>) = 0 [pid 1197] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1198] rt_sigprocmask(SIG_SETMASK, [], [pid 1197] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1198] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 1197] <... futex resumed>) = 0 [pid 1198] memfd_create("syzkaller", 0 [pid 1197] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1198] <... memfd_create resumed>) = 3 [pid 1198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1198] munmap(0x7f2081aae000, 138412032) = 0 [pid 1198] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 40.495364][ T1194] loop0: detected capacity change from 0 to 512 [ 40.503502][ T1194] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 40.516883][ T1194] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1198] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1198] close(3) = 0 [pid 1198] mkdir("./file0", 0777) = 0 [pid 1198] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1198] chdir("./file0") = 0 [pid 1198] ioctl(4, LOOP_CLR_FD) = 0 [pid 1198] close(4) = 0 [pid 1198] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1197] <... futex resumed>) = 0 [pid 1197] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1197] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1198] <... futex resumed>) = 1 [pid 1198] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1198] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1197] <... futex resumed>) = 0 [pid 1197] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1197] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1198] <... futex resumed>) = 1 [pid 1198] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1198] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1197] <... futex resumed>) = 0 [pid 1197] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1197] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1197] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1197] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1197] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1200]}, 88) = 1200 [pid 1197] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1197] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1197] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1198] <... futex resumed>) = 1 [pid 1198] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1198] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1198] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7./strace-static-x86_64: Process 1200 attached [pid 1200] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1200] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1200] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1200] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1197] <... futex resumed>) = 0 [pid 1197] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1197] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1200] <... futex resumed>) = 1 [pid 1200] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1200] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1197] <... futex resumed>) = 0 [pid 1197] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1197] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1200] <... futex resumed>) = 1 [pid 1198] <... write resumed>) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7 [pid 1200] setsockopt(6, SOL_IPV6, IPV6_XFRM_POLICY, 0x20000180, 232 [pid 1198] <... write resumed>) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1200] <... setsockopt resumed>) = 0 [pid 1198] write(4, 0x20000180, 7 [pid 1200] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1198] <... write resumed>) = 7 [pid 1200] <... futex resumed>) = 1 [pid 1197] <... futex resumed>) = 0 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7 [pid 1200] futex(0x7f2089f9a6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1198] <... write resumed>) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] write(4, 0x20000180, 7) = 7 [pid 1198] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1197] exit_group(0) = ? [pid 1200] <... futex resumed>) = ? [pid 1198] <... futex resumed>) = ? [pid 1198] +++ exited with 0 +++ [pid 1200] +++ exited with 0 +++ [pid 1197] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=1197, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./219", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555574f4730 /* 4 entries */, 32768) = 112 umount2("./219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./219/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./219/binderfs") = 0 umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./219/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./219/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555574fc770 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555574fc770 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./219/file0") = 0 getdents64(3, 0x5555574f4730 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./219") = 0 mkdir("./220", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f3690) = 1201 ./strace-static-x86_64: Process 1201 attached [pid 1201] set_robust_list(0x5555574f36a0, 24) = 0 [pid 1201] chdir("./220") = 0 [pid 1201] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1201] setpgid(0, 0) = 0 [pid 1201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1201] write(3, "1000", 4) = 4 [pid 1201] close(3) = 0 [pid 1201] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1201] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1201] rt_sigaction(SIGRT_1, {sa_handler=0x7f2089f382f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2089f294a0}, NULL, 8) = 0 [pid 1201] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 1201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089eae000 [pid 1201] mprotect(0x7f2089eaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1201] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1201] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ece990, parent_tid=0x7f2089ece990, exit_signal=0, stack=0x7f2089eae000, stack_size=0x20300, tls=0x7f2089ece6c0}./strace-static-x86_64: Process 1202 attached [pid 1202] set_robust_list(0x7f2089ece9a0, 24) = 0 [pid 1202] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1202] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1201] <... clone3 resumed> => {parent_tid=[1202]}, 88) = 1202 [pid 1201] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1201] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1202] <... futex resumed>) = 0 [pid 1202] memfd_create("syzkaller", 0) = 3 [pid 1202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2081aae000 [pid 1201] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 1202] munmap(0x7f2081aae000, 138412032) = 0 [pid 1202] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 40.562588][ T1198] loop0: detected capacity change from 0 to 512 [ 40.570374][ T1198] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 40.583743][ T1198] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [pid 1202] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1202] close(3) = 0 [pid 1202] mkdir("./file0", 0777) = 0 [pid 1202] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID, ",errors=continue") = 0 [pid 1202] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1202] chdir("./file0") = 0 [pid 1202] ioctl(4, LOOP_CLR_FD) = 0 [pid 1202] close(4) = 0 [pid 1202] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1201] <... futex resumed>) = 0 [pid 1201] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1201] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1202] <... futex resumed>) = 1 [pid 1202] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 1202] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1201] <... futex resumed>) = 0 [pid 1201] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1201] futex(0x7f2089f9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1202] <... futex resumed>) = 1 [pid 1202] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 1202] futex(0x7f2089f9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1202] futex(0x7f2089f9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1201] <... futex resumed>) = 0 [pid 1201] futex(0x7f2089f9a6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1201] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2089e8d000 [pid 1201] mprotect(0x7f2089e8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1201] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 1201] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2089ead990, parent_tid=0x7f2089ead990, exit_signal=0, stack=0x7f2089e8d000, stack_size=0x20300, tls=0x7f2089ead6c0} => {parent_tid=[1204]}, 88) = 1204 [pid 1201] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1201] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1201] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1202] <... futex resumed>) = 0 [pid 1202] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1202] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1202] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1202] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1202] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1202] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1202] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1202] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 [pid 1202] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7) = 7 ./strace-static-x86_64: Process 1204 attached [pid 1202] write(4, "\x07\x00\x00\x00\x7f\x00\x00", 7 [pid 1204] set_robust_list(0x7f2089ead9a0, 24) = 0 [pid 1204] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 1204] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x20000000 [pid 1204] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1201] <... futex resumed>) = 0 [pid 1201] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1201] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1204] <... futex resumed>) = 1 [pid 1204] socket(AF_INET6, SOCK_RAW, IPPROTO_IPIP) = 6 [pid 1204] futex(0x7f2089f9a6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1201] <... futex resumed>) = 0 [pid 1201] futex(0x7f2089f9a6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1201] futex(0x7f2089f9a6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1204] <... futex resumed>) = 1 [ 40.643229][ T1202] loop0: detected capacity change from 0 to 512 [ 40.651591][ T1202] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor848: casefold flag without casefold feature [ 40.664900][ T1202] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 40.684900][ T1202] ------------[ cut here ]------------ [ 40.690222][ T1202] kernel BUG at fs/ext4/inline.c:767! [ 40.695433][ T1202] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 40.701287][ T1202] CPU: 1 PID: 1202 Comm: syz-executor848 Not tainted 6.1.43-syzkaller-00009-ga59b32866cd4 #0 [ 40.711266][ T1202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 40.721161][ T1202] RIP: 0010:ext4_write_inline_data_end+0xa85/0xa90 [ 40.727497][ T1202] Code: f8 ff ff 44 89 e9 80 e1 07 fe c1 38 c1 0f 8c 17 fb ff ff 4c 89 ef e8 7a 0d cb ff e9 0a fb ff ff e8 a0 29 05 03 e8 bb 84 84 ff <0f> 0b e8 b4 84 84 ff 0f 0b 66 90 55 48 89 e5 41 57 41 56 41 55 41 [ 40.746940][ T1202] RSP: 0018:ffffc90001aa76e0 EFLAGS: 00010293 [ 40.752840][ T1202] RAX: ffffffff81f07815 RBX: 0000000000000000 RCX: ffff888112772880 [ 40.760651][ T1202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.768462][ T1202] RBP: ffffc90001aa77f8 R08: ffffffff81f07003 R09: ffffed10200b0b7b [ 40.776276][ T1202] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000004c00000000 [ 40.784087][ T1202] R13: ffff888112772880 R14: ffff888100585bd0 R15: ffff888100585ce8 [ 40.791897][ T1202] FS: 00007f2089ece6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 40.800666][ T1202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.807088][ T1202] CR2: 00000000200001a0 CR3: 000000011972d000 CR4: 00000000003506a0 [ 40.814901][ T1202] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.822712][ T1202] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.830527][ T1202] Call Trace: [ 40.833649][ T1202] [ 40.836425][ T1202] ? __die_body+0x62/0xb0 [ 40.840589][ T1202] ? die+0x88/0xb0 [ 40.844147][ T1202] ? do_trap+0x103/0x330 [ 40.848234][ T1202] ? ext4_write_inline_data_end+0xa85/0xa90 [ 40.853958][ T1202] ? handle_invalid_op+0x95/0xc0 [ 40.858730][ T1202] ? ext4_write_inline_data_end+0xa85/0xa90 [ 40.864461][ T1202] ? exc_invalid_op+0x32/0x50 [ 40.868972][ T1202] ? asm_exc_invalid_op+0x1b/0x20 [ 40.873831][ T1202] ? ext4_write_inline_data_end+0x273/0xa90 [ 40.879566][ T1202] ? ext4_write_inline_data_end+0xa85/0xa90 [ 40.885290][ T1202] ? ext4_write_inline_data_end+0xa85/0xa90 [ 40.891018][ T1202] ? put_page+0xc0/0xc0 [ 40.895010][ T1202] ? copy_page_from_iter_atomic+0x43b/0x10b0 [ 40.900826][ T1202] ext4_write_end+0x395/0x910 [ 40.905448][ T1202] ext4_da_write_end+0x88/0x9a0 [ 40.910135][ T1202] ? ext4_da_write_begin+0x920/0x920 [ 40.915254][ T1202] generic_perform_write+0x3e6/0x5c0 [ 40.920376][ T1202] ? generic_file_direct_write+0x6b0/0x6b0 [ 40.926024][ T1202] ? generic_write_checks_count+0x490/0x490 [ 40.931833][ T1202] ? __this_cpu_preempt_check+0x13/0x20 [ 40.937213][ T1202] ? xfd_validate_state+0x6f/0x170 [ 40.942289][ T1202] ext4_buffered_write_iter+0x360/0x640 [ 40.947668][ T1202] ext4_file_write_iter+0x194/0x1cf0 [ 40.952785][ T1202] ? compat_start_thread+0x20/0x20 [ 40.957733][ T1202] ? avc_policy_seqno+0x1b/0x70 [ 40.962425][ T1202] ? ext4_file_read_iter+0x470/0x470 [ 40.967537][ T1202] ? fsnotify_perm+0x6a/0x5d0 [ 40.972053][ T1202] vfs_write+0x902/0xeb0 [ 40.976132][ T1202] ? file_end_write+0x1c0/0x1c0 [ 40.980814][ T1202] ? mutex_lock+0xb1/0x1e0 [ 40.985416][ T1202] ? bit_wait_io_timeout+0x120/0x120 [ 40.990539][ T1202] ? __fdget_pos+0x22e/0x2c0 [ 40.994968][ T1202] ? ksys_write+0x77/0x2c0 [ 40.999217][ T1202] ksys_write+0x199/0x2c0 [ 41.003383][ T1202] ? do_notify_parent+0xa20/0xa20 [ 41.008245][ T1202] ? __ia32_sys_read+0x90/0x90 [ 41.012841][ T1202] ? fpregs_restore_userregs+0x130/0x290 [ 41.018313][ T1202] __x64_sys_write+0x7b/0x90 [ 41.022740][ T1202] do_syscall_64+0x3d/0xb0 [ 41.026990][ T1202] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.032720][ T1202] RIP: 0033:0x7f2089f11ed9 [ 41.036973][ T1202] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.056420][ T1202] RSP: 002b:00007f2089ece218 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.064673][ T1202] RAX: ffffffffffffffda RBX: 00007f2089f9a6c8 RCX: 00007f2089f11ed9 [ 41.072484][ T1202] RDX: 0000000000000007 RSI: 0000000020000180 RDI: 0000000000000004 [ 41.080371][ T1202] RBP: 0000000000000018 R08: 0000000000000000 R09: 0000000000000000 [pid 1201] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 41.088187][ T1202] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2089f9a6c0 [ 41.095996][ T1202] R13: 00007f2089f98100 R14: 00007f2089f66650 R15: 00007f2089f6606b [ 41.103808][ T1202] [ 41.106667][ T1202] Modules linked in: [ 41.110534][ T1202] ---[ end trace 0000000000000000 ]--- [ 41.115906][ T1202] RIP: 0010:ext4_write_inline_data_end+0xa85/0xa90 [ 41.122455][ T1202] Code: f8 ff ff 44 89 e9 80 e1 07 fe c1 38 c1 0f 8c 17 fb ff ff 4c 89 ef e8 7a 0d cb ff e9 0a fb ff ff e8 a0 29 05 03 e8 bb 84 84 ff <0f> 0b e8 b4 84 84 ff 0f 0b 66 90 55 48 89 e5 41 57 41 56 41 55 41 [ 41.141917][ T1202] RSP: 0018:ffffc90001aa76e0 EFLAGS: 00010293 [ 41.147787][ T1202] RAX: ffffffff81f07815 RBX: 0000000000000000 RCX: ffff888112772880 [ 41.155588][ T1202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.163418][ T1202] RBP: ffffc90001aa77f8 R08: ffffffff81f07003 R09: ffffed10200b0b7b [ 41.171224][ T1202] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000004c00000000 [ 41.179033][ T1202] R13: ffff888112772880 R14: ffff888100585bd0 R15: ffff888100585ce8 [ 41.186968][ T1202] FS: 00007f2089ece6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.195717][ T1202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.202186][ T1202] CR2: 0000000020000180 CR3: 000000011972d000 CR4: 00000000003506b0 [ 41.209997][ T1202] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.217787][ T1202] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.225575][ T1202] Kernel panic - not syncing: Fatal exception [ 41.231666][ T1202] Kernel Offset: disabled [ 41.235788][ T1202] Rebooting in 86400 seconds..