./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1511504989 <...> forked to background, child pid 192 no interfaces have a carrier Starting sshd: OK syzkaller syzkaller login: [ 14.580482][ T22] kauditd_printk_skb: 60 callbacks suppressed [ 14.580488][ T22] audit: type=1400 audit(1675727130.859:71): avc: denied { transition } for pid=265 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.586858][ T22] audit: type=1400 audit(1675727130.869:72): avc: denied { write } for pid=265 comm="sh" path="pipe:[10458]" dev="pipefs" ino=10458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.0.224' (ECDSA) to the list of known hosts. execve("./syz-executor1511504989", ["./syz-executor1511504989"], 0x7ffeb803d890 /* 10 vars */) = 0 brk(NULL) = 0x5555557f6000 brk(0x5555557f6c40) = 0x5555557f6c40 arch_prctl(ARCH_SET_FS, 0x5555557f6300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555557f65d0) = 304 set_robust_list(0x5555557f65e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7faaaf5bb7b0, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7faaaf5bbe80}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7faaaf5bb850, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7faaaf5bbe80}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1511504989", 4096) = 28 brk(0x555555817c40) = 0x555555817c40 brk(0x555555818000) = 0x555555818000 mprotect(0x7faaaf682000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 305 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 306 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 307 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 308 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 309 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 310 ./strace-static-x86_64: Process 310 attached [pid 310] set_robust_list(0x5555557f65e0, 24) = 0 [pid 310] getpid(./strace-static-x86_64: Process 308 attached [pid 308] set_robust_list(0x5555557f65e0, 24) = 0 [pid 310] <... getpid resumed>) = 310 [pid 308] getpid( [pid 310] mkdir("./syzkaller.dzRCjE", 0700) = 0 [pid 308] <... getpid resumed>) = 308 [pid 308] mkdir("./syzkaller.UPbSju", 0700) = 0 [pid 308] chmod("./syzkaller.UPbSju", 0777) = 0 [pid 308] chdir("./syzkaller.UPbSju") = 0 [pid 308] mkdir("./0", 0777 [pid 310] chmod("./syzkaller.dzRCjE", 0777) = 0 [pid 308] <... mkdir resumed>) = 0 [pid 310] chdir("./syzkaller.dzRCjE") = 0 [pid 310] mkdir("./0", 0777) = 0 ./strace-static-x86_64: Process 306 attached [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 306] set_robust_list(0x5555557f65e0, 24) = 0 [pid 306] getpid( [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] <... getpid resumed>) = 306 [pid 306] mkdir("./syzkaller.pwy63l", 0700) = 0 [pid 310] close(3./strace-static-x86_64: Process 309 attached ./strace-static-x86_64: Process 307 attached ./strace-static-x86_64: Process 305 attached [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] <... close resumed>) = 0 [pid 308] close(3) = 0 [pid 307] set_robust_list(0x5555557f65e0, 24) = 0 [pid 307] getpid() = 307 [pid 307] mkdir("./syzkaller.ThHZsr", 0700) = 0 [pid 307] chmod("./syzkaller.ThHZsr", 0777) = 0 [pid 307] chdir("./syzkaller.ThHZsr") = 0 [pid 307] mkdir("./0", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 312 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] chmod("./syzkaller.pwy63l", 0777) = 0 [pid 306] chdir("./syzkaller.pwy63l") = 0 [pid 308] <... clone resumed>, child_tidptr=0x5555557f65d0) = 314 [pid 306] mkdir("./0", 0777 [pid 310] <... clone resumed>, child_tidptr=0x5555557f65d0) = 313 [pid 306] <... mkdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 315 ./strace-static-x86_64: Process 313 attached [pid 313] set_robust_list(0x5555557f65e0, 24) = 0 [pid 313] chdir("./0") = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0 [pid 309] set_robust_list(0x5555557f65e0, 24 [pid 305] set_robust_list(0x5555557f65e0, 24./strace-static-x86_64: Process 314 attached ./strace-static-x86_64: Process 312 attached [pid 309] <... set_robust_list resumed>) = 0 [pid 305] <... set_robust_list resumed>) = 0 [pid 309] getpid( [pid 305] getpid( [pid 309] <... getpid resumed>) = 309 [pid 305] <... getpid resumed>) = 305 [pid 309] mkdir("./syzkaller.khK7Lz", 0700 [pid 312] set_robust_list(0x5555557f65e0, 24 [pid 305] mkdir("./syzkaller.eSoh3f", 0700 [pid 313] <... setpgid resumed>) = 0 [pid 309] <... mkdir resumed>) = 0 [pid 314] set_robust_list(0x5555557f65e0, 24 [pid 312] <... set_robust_list resumed>) = 0 [pid 309] chmod("./syzkaller.khK7Lz", 0777 [pid 305] <... mkdir resumed>) = 0 [pid 309] <... chmod resumed>) = 0 [pid 309] chdir("./syzkaller.khK7Lz" [pid 305] chmod("./syzkaller.eSoh3f", 0777 [pid 314] <... set_robust_list resumed>) = 0 [pid 312] chdir("./0" [pid 309] <... chdir resumed>) = 0 [pid 305] <... chmod resumed>) = 0 [pid 309] mkdir("./0", 0777 [pid 305] chdir("./syzkaller.eSoh3f" [pid 312] <... chdir resumed>) = 0 [pid 309] <... mkdir resumed>) = 0 [pid 314] chdir("./0" [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... chdir resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 305] mkdir("./0", 0777 [pid 309] <... openat resumed>) = 3 [pid 312] <... prctl resumed>) = 0 [pid 309] ioctl(3, LOOP_CLR_FD [pid 305] <... mkdir resumed>) = 0 [pid 314] <... chdir resumed>) = 0 [pid 312] setpgid(0, 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 312] <... setpgid resumed>) = 0 [pid 309] close(3) = 0 [pid 305] <... openat resumed>) = 3 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] ioctl(3, LOOP_CLR_FD [pid 314] <... prctl resumed>) = 0 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] <... clone resumed>, child_tidptr=0x5555557f65d0) = 316 [pid 305] close(3 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... close resumed>) = 0 [pid 314] setpgid(0, 0 [pid 312] <... openat resumed>) = 3 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 314] <... setpgid resumed>) = 0 [pid 312] write(3, "1000", 4 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 312] <... write resumed>) = 4 [pid 305] <... clone resumed>, child_tidptr=0x5555557f65d0) = 317 [pid 312] close(3) = 0 [pid 312] symlink("/dev/binderfs", "./binderfs" [pid 314] <... openat resumed>) = 3 [pid 313] <... openat resumed>) = 3 [pid 314] write(3, "1000", 4 [pid 312] <... symlink resumed>) = 0 [pid 314] <... write resumed>) = 4 [pid 312] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] close(3 [pid 312] <... futex resumed>) = 0 [pid 314] <... close resumed>) = 0 [pid 312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 314] symlink("/dev/binderfs", "./binderfs" [pid 312] <... mmap resumed>) = 0x7faaaf58a000 [pid 314] <... symlink resumed>) = 0 [pid 312] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE [pid 313] write(3, "1000", 4) = 4 [pid 312] <... mprotect resumed>) = 0 [pid 314] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 ./strace-static-x86_64: Process 317 attached [pid 314] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE [pid 313] close(3) = 0 [pid 313] symlink("/dev/binderfs", "./binderfs" [pid 314] <... mprotect resumed>) = 0 [pid 312] <... clone resumed>, parent_tid=[318], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 318 [pid 317] set_robust_list(0x5555557f65e0, 24 [pid 314] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 312] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] <... set_robust_list resumed>) = 0 [pid 312] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 314] <... clone resumed>, parent_tid=[319], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 319 [pid 317] chdir("./0" [pid 314] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 318 attached ./strace-static-x86_64: Process 319 attached [pid 317] <... chdir resumed>) = 0 [pid 314] <... futex resumed>) = 0 [ 23.504322][ T22] audit: type=1400 audit(1675727139.779:73): avc: denied { execmem } for pid=304 comm="syz-executor151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.524122][ T22] audit: type=1400 audit(1675727139.799:74): avc: denied { read write } for pid=308 comm="syz-executor151" name="loop3" dev="devtmpfs" ino=9280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 313] <... symlink resumed>) = 0 [pid 313] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 313] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 313] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[320], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 320 [pid 313] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 315 attached [pid 315] set_robust_list(0x5555557f65e0, 24) = 0 [pid 315] chdir("./0") = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 316 attached ) = 0 [pid 316] set_robust_list(0x5555557f65e0, 24 [pid 315] setpgid(0, 0 [pid 316] <... set_robust_list resumed>) = 0 [pid 315] <... setpgid resumed>) = 0 [pid 316] chdir("./0" [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 316] <... chdir resumed>) = 0 [pid 315] <... openat resumed>) = 3 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 315] write(3, "1000", 4 [pid 316] <... prctl resumed>) = 0 [pid 315] <... write resumed>) = 4 [pid 316] setpgid(0, 0 [pid 315] close(3 [pid 316] <... setpgid resumed>) = 0 [pid 315] <... close resumed>) = 0 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 315] symlink("/dev/binderfs", "./binderfs" [pid 316] <... openat resumed>) = 3 [pid 315] <... symlink resumed>) = 0 [pid 316] write(3, "1000", 4 [pid 315] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... write resumed>) = 4 [pid 315] <... futex resumed>) = 0 [pid 316] close(3 [pid 315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 316] <... close resumed>) = 0 [pid 315] <... mmap resumed>) = 0x7faaaf58a000 [pid 316] symlink("/dev/binderfs", "./binderfs" [pid 315] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE [pid 316] <... symlink resumed>) = 0 [pid 315] <... mprotect resumed>) = 0 [pid 316] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 316] <... futex resumed>) = 0 [pid 316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 315] <... clone resumed>, parent_tid=[322], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 322 [pid 316] <... mmap resumed>) = 0x7faaaf58a000 [pid 315] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE [pid 315] <... futex resumed>) = 0 [pid 316] <... mprotect resumed>) = 0 [pid 315] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 316] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[323], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 323 [pid 316] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 322 attached [pid 322] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 322] memfd_create("syzkaller", 0) = 3 [pid 322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 320 attached [pid 319] set_robust_list(0x7faaaf5aa9e0, 24 [pid 318] set_robust_list(0x7faaaf5aa9e0, 24 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 314] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 320] set_robust_list(0x7faaaf5aa9e0, 24 [pid 322] <... mmap resumed>) = 0x7faaa718a000 ./strace-static-x86_64: Process 323 attached [pid 323] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 323] memfd_create("syzkaller", 0) = 3 [pid 323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 318] <... set_robust_list resumed>) = 0 [pid 317] <... prctl resumed>) = 0 [pid 318] memfd_create("syzkaller", 0 [pid 317] setpgid(0, 0 [pid 318] <... memfd_create resumed>) = 3 [pid 317] <... setpgid resumed>) = 0 [pid 318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 23.558807][ T22] audit: type=1400 audit(1675727139.799:75): avc: denied { open } for pid=308 comm="syz-executor151" path="/dev/loop3" dev="devtmpfs" ino=9280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 318] <... mmap resumed>) = 0x7faaa718a000 [pid 317] <... openat resumed>) = 3 [pid 320] <... set_robust_list resumed>) = 0 [pid 319] <... set_robust_list resumed>) = 0 [pid 317] write(3, "1000", 4 [pid 320] memfd_create("syzkaller", 0 [pid 317] <... write resumed>) = 4 [pid 320] <... memfd_create resumed>) = 3 [pid 319] memfd_create("syzkaller", 0 [pid 317] close(3 [pid 320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 319] <... memfd_create resumed>) = 3 [pid 317] <... close resumed>) = 0 [pid 320] <... mmap resumed>) = 0x7faaa718a000 [pid 319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 317] symlink("/dev/binderfs", "./binderfs") = 0 [pid 317] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 317] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 317] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[324], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 324 [pid 317] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 319] <... mmap resumed>) = 0x7faaa718a000 [pid 324] memfd_create("syzkaller", 0) = 3 [pid 324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [ 23.583714][ T22] audit: type=1400 audit(1675727139.799:76): avc: denied { ioctl } for pid=310 comm="syz-executor151" path="/dev/loop5" dev="devtmpfs" ino=9282 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 322] <... write resumed>) = 20699119 [pid 322] munmap(0x7faaa718a000, 20699119) = 0 [pid 322] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 322] ioctl(4, LOOP_SET_FD, 3 [pid 320] <... write resumed>) = 20699119 [pid 320] munmap(0x7faaa718a000, 20699119 [pid 322] <... ioctl resumed>) = 0 [pid 320] <... munmap resumed>) = 0 [pid 322] close(3 [pid 320] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 322] <... close resumed>) = 0 [pid 320] <... openat resumed>) = 4 [pid 322] mkdir("./file0", 0777 [pid 320] ioctl(4, LOOP_SET_FD, 3 [pid 319] <... write resumed>) = 20699119 [pid 322] <... mkdir resumed>) = 0 [pid 319] munmap(0x7faaa718a000, 20699119 [pid 322] mount("/dev/loop1", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 319] <... munmap resumed>) = 0 [pid 319] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 320] <... ioctl resumed>) = 0 [pid 319] <... openat resumed>) = 4 [pid 320] close(3 [pid 319] ioctl(4, LOOP_SET_FD, 3 [pid 320] <... close resumed>) = 0 [pid 320] mkdir("./file0", 0777) = 0 [pid 320] mount("/dev/loop5", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 319] <... ioctl resumed>) = 0 [pid 319] close(3) = 0 [pid 319] mkdir("./file0", 0777) = 0 [ 24.174001][ T22] audit: type=1400 audit(1675727140.449:77): avc: denied { mounton } for pid=315 comm="syz-executor151" path="/root/syzkaller.pwy63l/0/file0" dev="sda1" ino=1156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 24.240285][ T320] F2FS-fs (loop5): Found nat_bits in checkpoint [ 24.248743][ T322] F2FS-fs (loop1): Found nat_bits in checkpoint [ 24.255126][ T319] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 319] mount("/dev/loop3", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 318] <... write resumed>) = 20699119 [pid 318] munmap(0x7faaa718a000, 20699119) = 0 [pid 318] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 318] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 318] close(3) = 0 [pid 318] mkdir("./file0", 0777) = 0 [pid 318] mount("/dev/loop2", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 323] <... write resumed>) = 20699119 [pid 323] munmap(0x7faaa718a000, 20699119) = 0 [pid 323] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 323] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 323] close(3) = 0 [pid 323] mkdir("./file0", 0777) = 0 [pid 323] mount("/dev/loop4", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 324] <... write resumed>) = 20699119 [pid 324] munmap(0x7faaa718a000, 20699119) = 0 [pid 324] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 324] ioctl(4, LOOP_SET_FD, 3 [pid 320] <... mount resumed>) = 0 [pid 320] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 320] chdir("./file0") = 0 [ 24.355627][ T322] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 24.364174][ T318] F2FS-fs (loop2): Found nat_bits in checkpoint [ 24.370938][ T320] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [pid 320] ioctl(4, LOOP_CLR_FD [pid 322] <... mount resumed>) = 0 [pid 322] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 322] chdir("./file0") = 0 [pid 322] ioctl(4, LOOP_CLR_FD [pid 324] <... ioctl resumed>) = 0 [pid 322] <... ioctl resumed>) = 0 [pid 320] <... ioctl resumed>) = 0 [pid 322] close(4 [pid 324] close(3 [pid 322] <... close resumed>) = 0 [pid 320] close(4 [pid 318] <... mount resumed>) = 0 [pid 322] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 322] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 318] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 318] chdir("./file0") = 0 [pid 318] ioctl(4, LOOP_CLR_FD) = 0 [pid 318] close(4) = 0 [pid 318] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] <... futex resumed>) = 1 [ 24.384120][ T22] audit: type=1400 audit(1675727140.659:78): avc: denied { mount } for pid=315 comm="syz-executor151" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 24.424834][ T318] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 24.426303][ T323] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 318] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 324] <... close resumed>) = 0 [pid 320] <... close resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 324] mkdir("./file0", 0777 [pid 320] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 320] <... futex resumed>) = 1 [pid 315] <... futex resumed>) = 1 [pid 313] <... futex resumed>) = 0 [pid 322] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 320] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 315] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 313] <... futex resumed>) = 0 [pid 320] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 313] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... open resumed>) = 4 [pid 320] <... open resumed>) = 4 [pid 324] <... mkdir resumed>) = 0 [pid 320] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 313] <... futex resumed>) = 0 [pid 320] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 313] <... futex resumed>) = 0 [pid 320] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 313] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] mount("/dev/loop0", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 318] <... open resumed>) = 4 [pid 318] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 318] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 322] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 322] <... futex resumed>) = 1 [pid 315] <... futex resumed>) = 0 [pid 312] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 315] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 1 [pid 322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 315] <... futex resumed>) = 0 [pid 312] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 315] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] <... futex resumed>) = 0 [ 24.433908][ T22] audit: type=1400 audit(1675727140.709:79): avc: denied { write } for pid=312 comm="syz-executor151" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.450310][ T319] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 24.470287][ T22] audit: type=1400 audit(1675727140.749:80): avc: denied { add_name } for pid=315 comm="syz-executor151" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 318] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 313] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 313] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 313] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 313] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[355], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 355 [pid 313] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 312] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 315] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = 0 [pid 315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 315] <... mmap resumed>) = 0x7faaa8527000 [pid 312] <... mmap resumed>) = 0x7faaa8527000 [pid 315] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE [pid 312] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE [pid 315] <... mprotect resumed>) = 0 [pid 315] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 312] <... mprotect resumed>) = 0 [pid 315] <... clone resumed>, parent_tid=[356], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 356 [ 24.513356][ T324] F2FS-fs (loop0): Found nat_bits in checkpoint [ 24.525983][ T22] audit: type=1400 audit(1675727140.749:81): avc: denied { create } for pid=315 comm="syz-executor151" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.551636][ T322] attempt to access beyond end of device [ 24.551636][ T322] loop1: rw=2049, want=81920, limit=40427 ./strace-static-x86_64: Process 356 attached ./strace-static-x86_64: Process 355 attached [pid 315] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 312] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 315] <... futex resumed>) = 0 [pid 313] futex(0x7faaaf6887cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... futex resumed>) = 0 [pid 356] set_robust_list(0x7faaa85479e0, 24 [pid 355] set_robust_list(0x7faaa85479e0, 24 [pid 313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 356] <... set_robust_list resumed>) = 0 [pid 355] <... set_robust_list resumed>) = 0 [pid 313] <... mmap resumed>) = 0x7faaa8506000 [pid 312] <... clone resumed>, parent_tid=[358], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 358 [pid 356] open(".", O_RDONLY [pid 355] open(".", O_RDONLY [pid 313] mprotect(0x7faaa8507000, 131072, PROT_READ|PROT_WRITE [pid 312] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... open resumed>) = 5 [pid 355] <... open resumed>) = 5 [pid 313] <... mprotect resumed>) = 0 [pid 312] <... futex resumed>) = 0 [pid 356] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] clone(child_stack=0x7faaa85263f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[359], tls=0x7faaa8526700, child_tidptr=0x7faaa85269d0) = 359 [pid 313] futex(0x7faaaf6887c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] futex(0x7faaaf6887cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 358 attached [pid 358] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 358] open(".", O_RDONLY) = 5 [pid 358] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 358] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 359 attached [pid 359] set_robust_list(0x7faaa85269e0, 24) = 0 [pid 359] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 359] futex(0x7faaaf6887cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = 0 [pid 313] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] <... futex resumed>) = 1 [pid 359] futex(0x7faaaf6887c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 356] <... futex resumed>) = 1 [pid 355] <... futex resumed>) = 1 [pid 315] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 356] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 355] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 315] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=46000000} [pid 312] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 315] <... futex resumed>) = 0 [pid 355] <... mkdirat resumed>) = 0 [pid 358] <... futex resumed>) = 0 [pid 356] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 355] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 1 [pid 358] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 356] <... symlinkat resumed>) = 0 [pid 355] <... futex resumed>) = 1 [pid 313] <... futex resumed>) = 0 [pid 312] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... symlinkat resumed>) = 0 [pid 356] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = 0 [pid 358] <... futex resumed>) = 1 [pid 313] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 0 [pid 358] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] <... futex resumed>) = 0 [pid 358] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 312] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... mkdirat resumed>) = 0 [pid 358] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 312] <... futex resumed>) = 0 [pid 358] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] <... futex resumed>) = 0 [pid 358] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 312] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... renameat2 resumed>) = 0 [pid 358] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 312] <... futex resumed>) = 0 [pid 358] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] <... futex resumed>) = 0 [pid 358] open(".", O_RDONLY [ 24.561915][ T320] attempt to access beyond end of device [ 24.561915][ T320] loop5: rw=2049, want=81920, limit=40427 [ 24.563179][ T323] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 24.585035][ T322] attempt to access beyond end of device [ 24.585035][ T322] loop1: rw=2049, want=51272, limit=40427 [pid 312] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... open resumed>) = 6 [pid 358] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 1 [pid 355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 323] <... mount resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 358] <... futex resumed>) = 1 [pid 356] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 355] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 323] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 319] <... mount resumed>) = 0 [pid 315] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 358] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 355] <... renameat2 resumed>) = 0 [pid 323] <... openat resumed>) = 3 [pid 319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 315] <... futex resumed>) = 0 [pid 312] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 356] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 355] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] chdir("./file0" [pid 315] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 0 [pid 358] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 356] <... mkdirat resumed>) = 0 [pid 355] <... futex resumed>) = 1 [pid 323] <... chdir resumed>) = 0 [pid 319] <... openat resumed>) = 3 [pid 313] <... futex resumed>) = 0 [pid 312] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... symlinkat resumed>) = 0 [pid 356] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 323] ioctl(4, LOOP_CLR_FD [pid 319] chdir("./file0" [pid 313] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 1 [pid 355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 323] <... ioctl resumed>) = 0 [pid 319] <... chdir resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = 0 [pid 358] <... futex resumed>) = 1 [pid 356] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 355] open(".", O_RDONLY [pid 323] close(4 [pid 319] ioctl(4, LOOP_CLR_FD [pid 315] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 0 [pid 358] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 355] <... open resumed>) = 6 [pid 323] <... close resumed>) = 0 [pid 319] <... ioctl resumed>) = 0 [pid 312] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] <... futex resumed>) = 0 [pid 358] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 312] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... ioctl resumed>) = 0 [pid 358] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 312] <... futex resumed>) = 0 [pid 358] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 356] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 355] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] close(4 [pid 315] <... futex resumed>) = 0 [pid 312] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] <... futex resumed>) = 0 [ 24.601163][ T22] audit: type=1400 audit(1675727140.749:82): avc: denied { create } for pid=313 comm="syz-executor151" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.628337][ T318] attempt to access beyond end of device [ 24.628337][ T318] loop2: rw=2049, want=81920, limit=40427 [ 24.639707][ T322] attempt to access beyond end of device [ 24.639707][ T322] loop1: rw=2049, want=51256, limit=40427 [ 24.641581][ T340] attempt to access beyond end of device [ 24.641581][ T340] loop2: rw=2049, want=45120, limit=40427 [pid 358] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 312] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 356] <... renameat2 resumed>) = 0 [pid 355] <... futex resumed>) = 1 [pid 323] <... futex resumed>) = 1 [pid 322] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 319] <... close resumed>) = 0 [pid 316] <... futex resumed>) = 0 [pid 315] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... futex resumed>) = 0 [pid 316] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = 0 [pid 316] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 356] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 323] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 322] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 358] <... renameat2 resumed>) = 0 [pid 358] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 312] <... futex resumed>) = 0 [pid 358] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 355] <... symlinkat resumed>) = 0 [pid 355] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 313] <... futex resumed>) = 0 [pid 355] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 313] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] <... ioctl resumed>) = 0 [pid 313] <... futex resumed>) = 0 [pid 355] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 355] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 313] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] <... open resumed>) = 4 [pid 322] <... futex resumed>) = 0 [pid 319] <... futex resumed>) = 1 [pid 315] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = 0 [pid 313] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... renameat2 resumed>) = 0 [pid 355] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 313] <... futex resumed>) = 0 [pid 355] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 320] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 320] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] exit_group(0 [pid 359] <... futex resumed>) = ? [pid 355] <... futex resumed>) = ? [pid 313] <... exit_group resumed>) = ? [pid 359] +++ exited with 0 +++ [pid 355] +++ exited with 0 +++ [pid 320] +++ exited with 0 +++ [pid 313] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=10, si_stime=12} --- [pid 310] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 310] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 310] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./0/binderfs" [pid 323] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] open(".", O_RDONLY [pid 319] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 318] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 315] <... futex resumed>) = 0 [pid 314] <... futex resumed>) = 0 [pid 310] <... unlink resumed>) = 0 [pid 323] <... futex resumed>) = 1 [pid 322] <... open resumed>) = 6 [pid 315] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 322] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... futex resumed>) = 0 [pid 314] <... futex resumed>) = 1 [pid 322] <... futex resumed>) = 1 [pid 319] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 315] <... futex resumed>) = 0 [pid 314] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 319] <... open resumed>) = 4 [pid 315] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... symlinkat resumed>) = 0 [pid 319] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... futex resumed>) = 0 [pid 322] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... futex resumed>) = 1 [pid 315] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] <... futex resumed>) = 0 [pid 322] <... futex resumed>) = 0 [pid 319] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 314] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 318] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 315] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 322] <... ioctl resumed>) = 0 [pid 316] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... futex resumed>) = 0 [pid 314] <... futex resumed>) = 0 [pid 312] exit_group(0 [pid 358] <... futex resumed>) = ? [pid 323] <... futex resumed>) = 0 [pid 322] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 1 [pid 315] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... exit_group resumed>) = ? [pid 358] +++ exited with 0 +++ [pid 323] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 322] <... futex resumed>) = 0 [pid 316] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 24.657742][ T320] attempt to access beyond end of device [ 24.657742][ T320] loop5: rw=2049, want=51272, limit=40427 [ 24.674502][ T320] attempt to access beyond end of device [ 24.674502][ T320] loop5: rw=2049, want=51256, limit=40427 [ 24.685994][ T330] attempt to access beyond end of device [ 24.685994][ T330] loop5: rw=2049, want=45120, limit=40427 [ 24.686368][ T318] attempt to access beyond end of device [ 24.686368][ T318] loop2: rw=2049, want=51272, limit=40427 [pid 322] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 315] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 315] <... futex resumed>) = 0 [pid 322] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 315] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... renameat2 resumed>) = 0 [pid 322] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 315] <... futex resumed>) = 0 [pid 322] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 315] exit_group(0 [pid 356] <... futex resumed>) = ? [pid 322] <... futex resumed>) = ? [pid 315] <... exit_group resumed>) = ? [pid 356] +++ exited with 0 +++ [pid 322] +++ exited with 0 +++ [pid 324] <... mount resumed>) = 0 [pid 324] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 315] +++ exited with 0 +++ [pid 318] <... futex resumed>) = ? [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=11, si_stime=20} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 318] +++ exited with 0 +++ [pid 312] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=312, si_uid=0, si_status=0, si_utime=9, si_stime=19} --- [pid 306] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... openat resumed>) = 3 [pid 307] <... openat resumed>) = 3 [pid 306] fstat(3, [pid 307] fstat(3, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, [pid 307] getdents64(3, [pid 306] <... getdents64 resumed>0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 307] <... getdents64 resumed>0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 306] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./0/binderfs", [pid 307] lstat("./0/binderfs", [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./0/binderfs" [pid 307] unlink("./0/binderfs" [pid 306] <... unlink resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 306] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 319] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 307] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 324] <... openat resumed>) = 3 [pid 324] chdir("./file0") = 0 [pid 324] ioctl(4, LOOP_CLR_FD) = 0 [pid 324] close(4 [pid 319] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 314] <... futex resumed>) = 0 [pid 319] open(".", O_RDONLY [pid 314] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... open resumed>) = 5 [pid 314] <... futex resumed>) = 0 [pid 319] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... futex resumed>) = 0 [pid 314] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 319] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 314] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... symlinkat resumed>) = 0 [pid 319] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 314] <... futex resumed>) = 0 [pid 319] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 314] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... mkdirat resumed>) = 0 [pid 324] <... close resumed>) = 0 [pid 319] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 314] <... futex resumed>) = 0 [pid 319] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 314] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 319] <... renameat2 resumed>) = 0 [pid 314] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 319] <... futex resumed>) = 1 [pid 314] <... futex resumed>) = 0 [pid 319] open(".", O_RDONLY [pid 317] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 314] <... futex resumed>) = 0 [pid 319] <... open resumed>) = 6 [pid 317] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 1 [pid 324] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 319] <... futex resumed>) = 1 [pid 314] <... futex resumed>) = 0 [pid 319] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 314] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... symlinkat resumed>) = 0 [pid 324] <... open resumed>) = 4 [pid 319] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 314] <... futex resumed>) = 0 [pid 319] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 314] <... futex resumed>) = 0 [pid 319] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 314] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... ioctl resumed>) = 0 [pid 319] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 314] <... futex resumed>) = 0 [pid 319] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 314] <... futex resumed>) = 0 [pid 319] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 314] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... renameat2 resumed>) = 0 [pid 319] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 314] <... futex resumed>) = 0 [pid 319] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] exit_group(0) = ? [pid 319] <... futex resumed>) = 231 [pid 324] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 1 [pid 317] <... futex resumed>) = 0 [pid 324] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 319] +++ exited with 0 +++ [pid 317] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] +++ exited with 0 +++ [pid 316] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=3, si_stime=20} --- [pid 316] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] restart_syscall(<... resuming interrupted clone ...> [pid 316] <... futex resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 316] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE [pid 308] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 316] <... mprotect resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 308] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 316] <... clone resumed>, parent_tid=[362], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 362 [pid 308] fstat(3, [pid 316] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 316] <... futex resumed>) = 0 [pid 308] getdents64(3, [pid 316] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... getdents64 resumed>0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 308] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 24.728086][ T324] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 308] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./0/binderfs") = 0 [pid 308] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 324] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 324] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... futex resumed>) = 1 [pid 324] open(".", O_RDONLY) = 5 [pid 324] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... futex resumed>) = 1 [pid 324] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 324] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... futex resumed>) = 1 [pid 324] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 324] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... futex resumed>) = 1 [pid 324] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 324] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... futex resumed>) = 1 [pid 324] open(".", O_RDONLY) = 6 [pid 324] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... futex resumed>) = 1 [pid 324] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0"./strace-static-x86_64: Process 362 attached [pid 362] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 362] open(".", O_RDONLY [pid 324] <... symlinkat resumed>) = 0 [pid 324] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... open resumed>) = 5 [pid 362] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 323] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 324] <... futex resumed>) = 1 [pid 324] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 362] <... symlinkat resumed>) = 0 [pid 323] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... futex resumed>) = 1 [pid 362] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] <... futex resumed>) = 0 [pid 362] <... futex resumed>) = 1 [pid 323] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 316] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 323] <... futex resumed>) = 0 [pid 323] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 324] <... renameat2 resumed>) = 0 [pid 323] <... mkdirat resumed>) = 0 [pid 324] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] exit_group(0) = ? [pid 323] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 316] <... futex resumed>) = 0 [pid 323] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 316] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 323] <... renameat2 resumed>) = 0 [pid 316] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... futex resumed>) = ? [pid 323] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 316] <... futex resumed>) = 0 [pid 323] open(".", O_RDONLY [pid 316] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] <... open resumed>) = 6 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] +++ exited with 0 +++ [pid 317] +++ exited with 0 +++ [pid 323] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=317, si_uid=0, si_status=0, si_utime=8, si_stime=14} --- [pid 323] <... futex resumed>) = 1 [pid 316] <... futex resumed>) = 0 [pid 323] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 316] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 316] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 323] <... symlinkat resumed>) = 0 [pid 305] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 323] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... openat resumed>) = 3 [pid 323] <... futex resumed>) = 1 [pid 305] fstat(3, [pid 323] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 316] <... futex resumed>) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 316] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] getdents64(3, [pid 323] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 316] <... futex resumed>) = 0 [pid 305] <... getdents64 resumed>0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 323] <... ioctl resumed>) = 0 [pid 305] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 323] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 323] <... futex resumed>) = 0 [pid 305] lstat("./0/binderfs", [pid 323] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 316] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] unlink("./0/binderfs" [pid 316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 316] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... unlink resumed>) = 0 [pid 323] <... futex resumed>) = 0 [pid 316] <... futex resumed>) = 1 [pid 305] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 323] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 316] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... renameat2 resumed>) = 0 [pid 323] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 316] <... futex resumed>) = 0 [pid 323] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 316] exit_group(0 [pid 323] <... futex resumed>) = ? [pid 316] <... exit_group resumed>) = ? [pid 362] <... futex resumed>) = ? [pid 362] +++ exited with 0 +++ [pid 323] +++ exited with 0 +++ [pid 316] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=316, si_uid=0, si_status=0, si_utime=3, si_stime=19} --- [pid 309] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 309] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 309] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./0/binderfs") = 0 [pid 309] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./0/file0") = 0 [pid 305] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./0") = 0 [pid 305] mkdir("./1", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 366 ./strace-static-x86_64: Process 366 attached [pid 366] set_robust_list(0x5555557f65e0, 24) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./0/file0", [pid 366] chdir("./1") = 0 [pid 366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 366] setpgid(0, 0) = 0 [pid 366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 366] write(3, "1000", 4) = 4 [pid 366] close(3 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 366] <... close resumed>) = 0 [pid 366] symlink("/dev/binderfs", "./binderfs" [pid 310] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 366] <... symlink resumed>) = 0 [pid 366] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 366] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 366] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 366] <... clone resumed>, parent_tid=[367], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 367 [pid 310] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 366] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 310] <... openat resumed>) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./0/file0") = 0 [pid 310] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./0") = 0 [pid 310] mkdir("./1", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 367 attached [pid 367] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 367] memfd_create("syzkaller", 0) = 3 [pid 367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 307] <... umount2 resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 368 [pid 307] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./0/file0") = 0 [pid 307] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./0") = 0 [pid 307] mkdir("./1", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x5555557f65e0, 24) = 0 [pid 368] chdir("./1") = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 368] setpgid(0, 0) = 0 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 368] write(3, "1000", 4) = 4 [pid 368] close(3) = 0 [pid 368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 368] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 368] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 368] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[369], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 369 [pid 368] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 369] memfd_create("syzkaller", 0) = 3 [pid 369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 308] <... umount2 resumed>) = 0 [pid 367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 308] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./0/file0") = 0 [pid 308] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./0") = 0 [pid 308] mkdir("./1", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 307] <... openat resumed>) = 3 [pid 307] ioctl(3, LOOP_CLR_FD [pid 308] ioctl(3, LOOP_CLR_FD [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] close(3 [pid 307] close(3 [pid 308] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x5555557f65d0) = 370 [pid 307] <... clone resumed>, child_tidptr=0x5555557f65d0) = 371 ./strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x5555557f65e0, 24) = 0 [pid 370] chdir("./1") = 0 [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 370] setpgid(0, 0) = 0 [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 370] write(3, "1000", 4) = 4 [pid 370] close(3) = 0 [pid 370] symlink("/dev/binderfs", "./binderfs") = 0 [pid 370] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 370] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 371 attached ) = 0 [pid 371] set_robust_list(0x5555557f65e0, 24) = 0 [pid 371] chdir("./1") = 0 [pid 371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 371] setpgid(0, 0) = 0 [pid 371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 371] write(3, "1000", 4) = 4 [pid 370] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 371] close(3) = 0 [pid 371] symlink("/dev/binderfs", "./binderfs" [pid 370] <... clone resumed>, parent_tid=[372], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 372 [pid 371] <... symlink resumed>) = 0 [pid 370] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 371] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 371] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 371] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[373], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 373 [pid 371] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 372 attached [pid 372] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 372] memfd_create("syzkaller", 0) = 3 [pid 372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 ./strace-static-x86_64: Process 373 attached [pid 373] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 373] memfd_create("syzkaller", 0) = 3 [pid 373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 367] <... write resumed>) = 20699119 [pid 367] munmap(0x7faaa718a000, 20699119) = 0 [pid 367] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 367] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 367] close(3) = 0 [pid 367] mkdir("./file0", 0777) = 0 [pid 367] mount("/dev/loop0", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, [pid 306] <... umount2 resumed>) = 0 [pid 309] <... getdents64 resumed>0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 306] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] getdents64(4, [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... getdents64 resumed>0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 309] close(4 [pid 306] lstat("./0/file0", [pid 309] <... close resumed>) = 0 [pid 309] rmdir("./0/file0" [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 306] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] getdents64(3, [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... getdents64 resumed>0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 306] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] close(3) = 0 [pid 306] <... openat resumed>) = 4 [pid 309] rmdir("./0" [pid 306] fstat(4, [pid 309] <... rmdir resumed>) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] mkdir("./1", 0777 [pid 306] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 309] <... mkdir resumed>) = 0 [pid 306] getdents64(4, [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 306] <... getdents64 resumed>0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 309] <... openat resumed>) = 3 [pid 306] close(4 [pid 309] ioctl(3, LOOP_CLR_FD [pid 306] <... close resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] rmdir("./0/file0" [pid 309] close(3 [pid 306] <... rmdir resumed>) = 0 [pid 306] getdents64(3, [pid 309] <... close resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... getdents64 resumed>0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 306] close(3 [pid 309] <... clone resumed>, child_tidptr=0x5555557f65d0) = 378 [pid 306] <... close resumed>) = 0 [pid 306] rmdir("./0") = 0 [pid 306] mkdir("./1", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 379 ./strace-static-x86_64: Process 378 attached [pid 378] set_robust_list(0x5555557f65e0, 24) = 0 [pid 378] chdir("./1") = 0 [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 378] setpgid(0, 0) = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 [pid 378] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 379 attached [pid 378] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] set_robust_list(0x5555557f65e0, 24 [ 25.680564][ T367] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 378] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 379] <... set_robust_list resumed>) = 0 [pid 379] chdir("./1" [pid 378] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 379] <... chdir resumed>) = 0 [pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 378] <... clone resumed>, parent_tid=[380], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 380 [pid 379] <... prctl resumed>) = 0 [pid 378] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] setpgid(0, 0 [pid 378] <... futex resumed>) = 0 [pid 379] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 380 attached [pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 378] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 380] set_robust_list(0x7faaaf5aa9e0, 24 [pid 379] <... openat resumed>) = 3 [pid 380] <... set_robust_list resumed>) = 0 [pid 379] write(3, "1000", 4 [pid 380] memfd_create("syzkaller", 0 [pid 379] <... write resumed>) = 4 [pid 380] <... memfd_create resumed>) = 3 [pid 379] close(3 [pid 380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 379] <... close resumed>) = 0 [pid 379] symlink("/dev/binderfs", "./binderfs") = 0 [pid 379] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 379] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 379] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[381], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 381 [pid 379] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 381 attached [pid 381] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 381] memfd_create("syzkaller", 0) = 3 [pid 381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 367] <... mount resumed>) = 0 [pid 367] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 367] chdir("./file0") = 0 [pid 367] ioctl(4, LOOP_CLR_FD) = 0 [pid 367] close(4) = 0 [pid 367] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 367] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... futex resumed>) = 0 [pid 367] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 367] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [ 25.831997][ T367] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 366] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 366] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 369] <... write resumed>) = 20699119 [pid 366] <... mmap resumed>) = 0x7faaa8527000 [pid 369] munmap(0x7faaa718a000, 20699119 [pid 366] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE [pid 369] <... munmap resumed>) = 0 [pid 366] <... mprotect resumed>) = 0 [pid 366] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 369] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 366] <... clone resumed>, parent_tid=[383], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 383 [pid 366] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] <... openat resumed>) = 4 [pid 366] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 383 attached [pid 383] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 383] open(".", O_RDONLY) = 5 [pid 383] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] <... ioctl resumed>) = 0 [pid 366] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] close(3) = 0 [pid 369] mkdir("./file0", 0777) = 0 [pid 369] mount("/dev/loop5", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 383] <... futex resumed>) = 1 [pid 383] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 383] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... futex resumed>) = 1 [pid 366] <... futex resumed>) = 0 [pid 383] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 366] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... mkdirat resumed>) = 0 [pid 383] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 383] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 366] <... futex resumed>) = 0 [pid 383] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 366] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... renameat2 resumed>) = 0 [pid 383] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 383] open(".", O_RDONLY [pid 366] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... open resumed>) = 6 [pid 366] <... futex resumed>) = 0 [pid 383] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 0 [pid 366] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 366] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... symlinkat resumed>) = 0 [pid 366] <... futex resumed>) = 0 [pid 383] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 0 [pid 366] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 366] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... ioctl resumed>) = 0 [pid 366] <... futex resumed>) = 0 [pid 383] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 0 [pid 366] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 366] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] <... renameat2 resumed>) = 0 [pid 366] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 383] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 367] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] exit_group(0 [pid 383] <... futex resumed>) = ? [pid 366] <... exit_group resumed>) = ? [pid 383] +++ exited with 0 +++ [pid 367] <... futex resumed>) = ? [pid 367] +++ exited with 0 +++ [pid 366] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=366, si_uid=0, si_status=0, si_utime=6, si_stime=15} --- [pid 305] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 305] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 305] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./1/binderfs") = 0 [ 25.973871][ T369] F2FS-fs (loop5): Found nat_bits in checkpoint [pid 305] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 372] <... write resumed>) = 20699119 [pid 369] <... mount resumed>) = 0 [pid 372] munmap(0x7faaa718a000, 20699119) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 372] ioctl(4, LOOP_SET_FD, 3 [pid 369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 369] chdir("./file0") = 0 [pid 369] ioctl(4, LOOP_CLR_FD [pid 372] <... ioctl resumed>) = 0 [pid 369] <... ioctl resumed>) = 0 [pid 372] close(3 [pid 369] close(4 [pid 372] <... close resumed>) = 0 [pid 369] <... close resumed>) = 0 [pid 372] mkdir("./file0", 0777 [pid 369] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... mkdir resumed>) = 0 [pid 369] <... futex resumed>) = 1 [pid 368] <... futex resumed>) = 0 [pid 372] mount("/dev/loop3", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 369] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 368] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... open resumed>) = 4 [pid 369] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 368] <... futex resumed>) = 1 [pid 369] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [ 26.086773][ T369] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [pid 368] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... write resumed>) = 20699119 [pid 373] munmap(0x7faaa718a000, 20699119 [pid 381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 373] <... munmap resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 373] ioctl(4, LOOP_SET_FD, 3 [pid 368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 368] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 368] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 368] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[394], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 394 [pid 368] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... ioctl resumed>) = 0 [pid 373] close(3) = 0 [pid 373] mkdir("./file0", 0777) = 0 [pid 373] mount("/dev/loop2", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime,"./strace-static-x86_64: Process 394 attached [pid 394] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 394] open(".", O_RDONLY) = 5 [pid 394] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 1 [pid 394] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 394] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 1 [pid 394] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 369] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 369] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [ 26.153141][ T372] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 368] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] <... futex resumed>) = 0 [pid 368] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 394] <... futex resumed>) = 1 [pid 369] <... renameat2 resumed>) = 0 [pid 394] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 369] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] open(".", O_RDONLY [pid 368] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... open resumed>) = 6 [pid 369] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 368] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... symlinkat resumed>) = 0 [pid 369] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 368] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... ioctl resumed>) = 0 [pid 369] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 368] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... renameat2 resumed>) = 0 [pid 369] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] exit_group(0 [pid 394] <... futex resumed>) = ? [pid 369] <... futex resumed>) = ? [pid 368] <... exit_group resumed>) = ? [pid 394] +++ exited with 0 +++ [pid 369] +++ exited with 0 +++ [pid 368] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=368, si_uid=0, si_status=0, si_utime=7, si_stime=16} --- [pid 310] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 310] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./1/binderfs") = 0 [ 26.214966][ T373] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 310] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... mount resumed>) = 0 [pid 372] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 372] chdir("./file0") = 0 [pid 372] ioctl(4, LOOP_CLR_FD) = 0 [pid 372] close(4) = 0 [pid 372] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 372] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 370] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] <... open resumed>) = 4 [pid 370] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = 1 [pid 372] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 370] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... mount resumed>) = 0 [pid 373] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 373] chdir("./file0") = 0 [pid 373] ioctl(4, LOOP_CLR_FD) = 0 [pid 373] close(4) = 0 [pid 373] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 0 [pid 373] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 373] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 370] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 370] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 370] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 370] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 370] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 370] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 370] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[400], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 400 [pid 370] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 400 attached [pid 400] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 400] open(".", O_RDONLY) = 5 [pid 400] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = 1 [pid 370] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 370] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 400] <... symlinkat resumed>) = 0 [pid 372] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = 1 [pid 372] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 26.271779][ T372] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 26.301496][ T373] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 372] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 372] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 372] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 372] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 370] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... renameat2 resumed>) = 0 [pid 372] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 372] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 372] open(".", O_RDONLY [pid 370] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... open resumed>) = 6 [pid 372] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 372] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 372] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 370] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... symlinkat resumed>) = 0 [pid 372] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 372] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 372] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 370] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... ioctl resumed>) = 0 [pid 372] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 372] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 372] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 370] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... renameat2 resumed>) = 0 [pid 372] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 372] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] exit_group(0 [pid 400] <... futex resumed>) = ? [pid 372] <... futex resumed>) = ? [pid 370] <... exit_group resumed>) = ? [pid 400] +++ exited with 0 +++ [pid 372] +++ exited with 0 +++ [pid 370] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=370, si_uid=0, si_status=0, si_utime=10, si_stime=12} --- [pid 308] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 308] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 308] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./1/binderfs") = 0 [pid 308] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 371] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 371] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 371] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 371] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 371] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 371] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[401], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 401 [pid 371] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 401 attached [pid 401] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 401] open(".", O_RDONLY) = 5 [pid 401] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... symlinkat resumed>) = 0 [pid 401] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... mkdirat resumed>) = 0 [pid 401] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 401] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 371] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... renameat2 resumed>) = 0 [pid 401] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] open(".", O_RDONLY [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... open resumed>) = 6 [pid 401] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 401] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 401] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 371] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... symlinkat resumed>) = 0 [pid 401] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 401] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 401] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 371] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... ioctl resumed>) = 0 [pid 401] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 401] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 401] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 371] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... renameat2 resumed>) = 0 [pid 401] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 401] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] <... write resumed>) = 20699119 [pid 380] munmap(0x7faaa718a000, 20699119 [pid 373] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 380] <... munmap resumed>) = 0 [pid 373] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 371] exit_group(0 [pid 401] <... futex resumed>) = ? [pid 373] <... futex resumed>) = ? [pid 371] <... exit_group resumed>) = ? [pid 401] +++ exited with 0 +++ [pid 373] +++ exited with 0 +++ [pid 371] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=371, si_uid=0, si_status=0, si_utime=9, si_stime=12} --- [pid 307] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 307] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./1/binderfs") = 0 [pid 307] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 381] <... write resumed>) = 20699119 [pid 381] munmap(0x7faaa718a000, 20699119) = 0 [pid 381] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 380] <... openat resumed>) = 4 [pid 380] ioctl(4, LOOP_SET_FD, 3 [pid 381] <... openat resumed>) = 4 [pid 380] <... ioctl resumed>) = 0 [pid 381] ioctl(4, LOOP_SET_FD, 3 [pid 380] close(3) = 0 [pid 380] mkdir("./file0", 0777) = 0 [pid 380] mount("/dev/loop4", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 381] <... ioctl resumed>) = 0 [pid 381] close(3) = 0 [pid 381] mkdir("./file0", 0777) = 0 [ 26.506080][ T381] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 381] mount("/dev/loop1", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./1/file0") = 0 [pid 305] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./1") = 0 [pid 305] mkdir("./2", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 410 ./strace-static-x86_64: Process 410 attached [pid 410] set_robust_list(0x5555557f65e0, 24) = 0 [pid 410] chdir("./2") = 0 [pid 410] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 410] setpgid(0, 0) = 0 [pid 410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 26.553268][ T380] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 410] write(3, "1000", 4) = 4 [pid 410] close(3) = 0 [pid 410] symlink("/dev/binderfs", "./binderfs") = 0 [pid 410] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 410] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 410] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[412], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 412 [pid 410] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 381] <... mount resumed>) = 0 [pid 381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 381] chdir("./file0") = 0 [pid 381] ioctl(4, LOOP_CLR_FD) = 0 [pid 381] close(4./strace-static-x86_64: Process 412 attached [pid 412] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 412] memfd_create("syzkaller", 0 [pid 381] <... close resumed>) = 0 [pid 381] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] <... futex resumed>) = 0 [pid 381] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] <... futex resumed>) = 0 [pid 381] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 379] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... open resumed>) = 4 [pid 381] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] <... futex resumed>) = 0 [pid 381] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] <... futex resumed>) = 0 [pid 381] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 379] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... memfd_create resumed>) = 3 [pid 412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [ 26.594644][ T381] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 310] <... umount2 resumed>) = 0 [pid 381] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 381] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 381] <... futex resumed>) = 1 [pid 379] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 381] open(".", O_RDONLY [pid 379] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... open resumed>) = 5 [pid 379] <... futex resumed>) = 0 [pid 310] lstat("./1/file0", [pid 381] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 381] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 379] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 379] <... futex resumed>) = 0 [pid 379] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, [pid 381] <... symlinkat resumed>) = 0 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 381] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 381] <... futex resumed>) = 1 [pid 379] <... futex resumed>) = 0 [pid 310] getdents64(4, [pid 381] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] <... futex resumed>) = 0 [pid 310] <... getdents64 resumed>0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 381] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 379] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] close(4 [pid 381] <... mkdirat resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 381] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] rmdir("./1/file0" [pid 381] <... futex resumed>) = 1 [pid 379] <... futex resumed>) = 0 [pid 381] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 379] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... rmdir resumed>) = 0 [pid 381] <... renameat2 resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 381] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] getdents64(3, [pid 379] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 0 [pid 310] <... getdents64 resumed>0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 381] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] close(3 [pid 379] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... close resumed>) = 0 [pid 381] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 1 [pid 310] rmdir("./1" [pid 381] open(".", O_RDONLY [pid 379] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... open resumed>) = 6 [pid 310] <... rmdir resumed>) = 0 [pid 381] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] mkdir("./2", 0777 [pid 381] <... futex resumed>) = 1 [pid 379] <... futex resumed>) = 0 [pid 381] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 379] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... mkdir resumed>) = 0 [pid 381] <... symlinkat resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 381] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 381] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] <... futex resumed>) = 0 [pid 381] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 379] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... ioctl resumed>) = 0 [pid 381] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] <... futex resumed>) = 0 [pid 381] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] <... futex resumed>) = 0 [pid 381] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 379] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... renameat2 resumed>) = 0 [pid 381] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] <... futex resumed>) = 0 [pid 381] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] exit_group(0 [pid 381] <... futex resumed>) = ? [pid 379] <... exit_group resumed>) = ? [pid 381] +++ exited with 0 +++ [pid 379] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=379, si_uid=0, si_status=0, si_utime=8, si_stime=17} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 306] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./1/binderfs") = 0 [pid 306] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 380] <... mount resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 310] ioctl(3, LOOP_CLR_FD [pid 380] <... openat resumed>) = 3 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 380] chdir("./file0" [pid 310] close(3 [pid 380] <... chdir resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 380] ioctl(4, LOOP_CLR_FD) = 0 [pid 380] close(4) = 0 [pid 380] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 380] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 378] <... futex resumed>) = 0 [pid 380] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 378] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... open resumed>) = 4 [pid 380] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 380] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 378] <... futex resumed>) = 0 [pid 380] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 378] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... clone resumed>, child_tidptr=0x5555557f65d0) = 414 ./strace-static-x86_64: Process 414 attached [pid 414] set_robust_list(0x5555557f65e0, 24) = 0 [pid 414] chdir("./2") = 0 [pid 414] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 414] setpgid(0, 0) = 0 [pid 414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 414] write(3, "1000", 4) = 4 [pid 414] close(3) = 0 [pid 414] symlink("/dev/binderfs", "./binderfs") = 0 [pid 414] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 414] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 414] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[415], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 415 [pid 414] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 415 attached [pid 415] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 415] memfd_create("syzkaller", 0) = 3 [pid 415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [ 26.717126][ T380] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 378] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 378] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 378] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[416], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 416 [pid 378] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 380] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 416 attached [pid 416] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 416] open(".", O_RDONLY) = 5 [pid 416] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 0 [pid 380] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 380] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 380] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 380] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] open(".", O_RDONLY) = 6 [pid 380] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 380] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 380] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 380] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] exit_group(0) = ? [pid 380] <... futex resumed>) = ? [pid 380] +++ exited with 0 +++ [pid 416] <... futex resumed>) = ? [pid 416] +++ exited with 0 +++ [pid 378] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=378, si_uid=0, si_status=0, si_utime=4, si_stime=18} --- [pid 309] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 309] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 309] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./1/binderfs") = 0 [pid 309] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... umount2 resumed>) = 0 [pid 308] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./1/file0") = 0 [pid 308] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./1") = 0 [pid 308] mkdir("./2", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 417 ./strace-static-x86_64: Process 417 attached [pid 417] set_robust_list(0x5555557f65e0, 24) = 0 [pid 417] chdir("./2") = 0 [pid 417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 417] setpgid(0, 0) = 0 [pid 417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 417] write(3, "1000", 4) = 4 [pid 417] close(3) = 0 [pid 417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 417] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 417] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 417] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[418], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 418 [pid 417] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 418 attached [pid 418] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 418] memfd_create("syzkaller", 0) = 3 [pid 418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 307] <... umount2 resumed>) = 0 [pid 307] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 412] <... write resumed>) = 20699119 [pid 412] munmap(0x7faaa718a000, 20699119 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 412] <... munmap resumed>) = 0 [pid 307] <... openat resumed>) = 4 [pid 412] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 412] ioctl(4, LOOP_SET_FD, 3 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./1/file0") = 0 [pid 412] <... ioctl resumed>) = 0 [pid 412] close(3) = 0 [pid 412] mkdir("./file0", 0777 [pid 307] getdents64(3, [pid 412] <... mkdir resumed>) = 0 [pid 412] mount("/dev/loop0", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 307] <... getdents64 resumed>0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 307] close(3 [pid 415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 307] <... close resumed>) = 0 [pid 307] rmdir("./1") = 0 [pid 307] mkdir("./2", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 422 ./strace-static-x86_64: Process 422 attached [pid 422] set_robust_list(0x5555557f65e0, 24) = 0 [pid 422] chdir("./2") = 0 [pid 422] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 422] setpgid(0, 0) = 0 [pid 422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 422] write(3, "1000", 4) = 4 [pid 422] close(3) = 0 [pid 422] symlink("/dev/binderfs", "./binderfs") = 0 [pid 422] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 422] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 422] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[424], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 424 [pid 422] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 424 attached [pid 424] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 424] memfd_create("syzkaller", 0) = 3 [pid 424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [ 27.105167][ T412] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 412] <... mount resumed>) = 0 [pid 412] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 412] chdir("./file0") = 0 [pid 412] ioctl(4, LOOP_CLR_FD) = 0 [pid 412] close(4) = 0 [pid 412] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 410] <... futex resumed>) = 1 [pid 412] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 410] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... open resumed>) = 4 [pid 412] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 412] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 412] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [ 27.167553][ T412] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 410] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 412] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... futex resumed>) = 0 [pid 412] open(".", O_RDONLY) = 5 [pid 412] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 412] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 412] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 410] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... symlinkat resumed>) = 0 [pid 412] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 412] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 412] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 410] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... mkdirat resumed>) = 0 [pid 412] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 412] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 412] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 410] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... renameat2 resumed>) = 0 [pid 412] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 412] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 412] open(".", O_RDONLY [pid 410] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... open resumed>) = 6 [pid 412] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 412] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 412] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 410] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... symlinkat resumed>) = 0 [pid 412] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 412] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 412] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 410] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... ioctl resumed>) = 0 [pid 412] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 412] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 412] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 410] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... renameat2 resumed>) = 0 [pid 412] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 412] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] exit_group(0 [pid 412] <... futex resumed>) = ? [pid 410] <... exit_group resumed>) = ? [pid 412] +++ exited with 0 +++ [pid 410] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=410, si_uid=0, si_status=0, si_utime=9, si_stime=19} --- [pid 305] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 305] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./2/binderfs" [pid 418] <... write resumed>) = 20699119 [pid 305] <... unlink resumed>) = 0 [pid 418] munmap(0x7faaa718a000, 20699119 [pid 305] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 418] <... munmap resumed>) = 0 [pid 418] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 415] <... write resumed>) = 20699119 [pid 418] ioctl(4, LOOP_SET_FD, 3 [pid 415] munmap(0x7faaa718a000, 20699119) = 0 [pid 415] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 418] <... ioctl resumed>) = 0 [pid 415] <... openat resumed>) = 4 [pid 418] close(3 [pid 415] ioctl(4, LOOP_SET_FD, 3 [pid 418] <... close resumed>) = 0 [pid 418] mkdir("./file0", 0777) = 0 [pid 418] mount("/dev/loop3", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 306] <... umount2 resumed>) = 0 [pid 306] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./1/file0") = 0 [pid 306] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./1") = 0 [pid 306] mkdir("./2", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 415] <... ioctl resumed>) = 0 [pid 415] close(3 [pid 306] <... openat resumed>) = 3 [pid 415] <... close resumed>) = 0 [pid 306] ioctl(3, LOOP_CLR_FD [pid 415] mkdir("./file0", 0777 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 415] <... mkdir resumed>) = 0 [pid 306] close(3 [pid 415] mount("/dev/loop5", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 306] <... close resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 428 ./strace-static-x86_64: Process 428 attached [pid 428] set_robust_list(0x5555557f65e0, 24) = 0 [pid 428] chdir("./2") = 0 [pid 428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 428] setpgid(0, 0) = 0 [pid 428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 428] write(3, "1000", 4) = 4 [pid 428] close(3) = 0 [pid 428] symlink("/dev/binderfs", "./binderfs") = 0 [pid 428] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 428] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 428] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[431], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 431 [pid 428] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 431 attached [pid 431] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 431] memfd_create("syzkaller", 0) = 3 [pid 431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [ 27.405855][ T415] F2FS-fs (loop5): Found nat_bits in checkpoint [ 27.416628][ T418] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./1/file0") = 0 [pid 309] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./1") = 0 [pid 309] mkdir("./2", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 437 [pid 415] <... mount resumed>) = 0 [pid 415] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 415] chdir("./file0") = 0 [pid 415] ioctl(4, LOOP_CLR_FD) = 0 [pid 415] close(4./strace-static-x86_64: Process 437 attached [pid 437] set_robust_list(0x5555557f65e0, 24) = 0 [pid 437] chdir("./2" [pid 415] <... close resumed>) = 0 [pid 415] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 415] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] <... futex resumed>) = 0 [pid 414] <... futex resumed>) = 1 [pid 437] <... chdir resumed>) = 0 [pid 415] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 414] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 415] <... open resumed>) = 4 [pid 415] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 415] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] <... prctl resumed>) = 0 [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 414] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] setpgid(0, 0 [pid 414] <... futex resumed>) = 1 [pid 437] <... setpgid resumed>) = 0 [pid 415] <... futex resumed>) = 0 [pid 415] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 414] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 437] write(3, "1000", 4) = 4 [pid 437] close(3) = 0 [pid 437] symlink("/dev/binderfs", "./binderfs") = 0 [pid 437] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 437] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 437] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[438], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 438 [pid 437] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 27.539156][ T415] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [pid 437] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 438 attached [pid 438] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 438] memfd_create("syzkaller", 0) = 3 [pid 438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 418] <... mount resumed>) = 0 [pid 418] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 418] chdir("./file0") = 0 [pid 418] ioctl(4, LOOP_CLR_FD) = 0 [pid 414] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 414] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 418] close(4) = 0 [pid 414] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 418] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] <... futex resumed>) = 1 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 414] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 418] <... open resumed>) = 4 [pid 414] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 418] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 414] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 414] <... clone resumed>, parent_tid=[440], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 440 [pid 414] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 27.595154][ T418] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 414] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 440 attached [pid 440] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 440] open(".", O_RDONLY) = 5 [pid 440] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 414] <... futex resumed>) = 0 [pid 440] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 414] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... symlinkat resumed>) = 0 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 440] <... futex resumed>) = 0 [pid 414] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 414] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... mkdirat resumed>) = 0 [pid 440] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 414] <... futex resumed>) = 0 [pid 440] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 414] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] <... renameat2 resumed>) = 0 [pid 414] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] open(".", O_RDONLY [pid 414] <... futex resumed>) = 0 [pid 440] <... open resumed>) = 6 [pid 414] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 414] <... futex resumed>) = 0 [pid 440] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 414] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] <... symlinkat resumed>) = 0 [pid 414] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... ioctl resumed>) = 0 [pid 440] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 414] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... renameat2 resumed>) = 0 [pid 440] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 414] <... futex resumed>) = 0 [pid 440] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 417] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 417] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 417] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 417] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 417] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[441], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 441 [pid 417] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 415] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 415] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 414] exit_group(0 [pid 440] <... futex resumed>) = ? [pid 414] <... exit_group resumed>) = ? [pid 440] +++ exited with 0 +++ [pid 415] <... futex resumed>) = ? [pid 415] +++ exited with 0 +++ [pid 414] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=414, si_uid=0, si_status=0, si_utime=9, si_stime=15} --- [pid 310] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 310] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 310] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./2/binderfs" [pid 418] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 310] <... unlink resumed>) = 0 [pid 310] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 441 attached [pid 441] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 441] open(".", O_RDONLY) = 5 [pid 441] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 441] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 417] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] <... symlinkat resumed>) = 0 [pid 417] <... futex resumed>) = 0 [pid 441] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 0 [pid 417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 417] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] <... mkdirat resumed>) = 0 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 441] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 417] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] <... renameat2 resumed>) = 0 [pid 418] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 441] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 0 [pid 417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... futex resumed>) = 1 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] open(".", O_RDONLY) = 6 [pid 418] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 418] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 418] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 417] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 418] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] <... futex resumed>) = 0 [pid 417] exit_group(0 [pid 441] <... futex resumed>) = ? [pid 417] <... exit_group resumed>) = ? [pid 441] +++ exited with 0 +++ [pid 418] +++ exited with 0 +++ [pid 417] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=417, si_uid=0, si_status=0, si_utime=7, si_stime=10} --- [pid 308] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 308] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 308] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./2/binderfs") = 0 [pid 308] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 431] <... write resumed>) = 20699119 [pid 431] munmap(0x7faaa718a000, 20699119) = 0 [pid 431] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 431] ioctl(4, LOOP_SET_FD, 3 [pid 424] <... write resumed>) = 20699119 [pid 431] <... ioctl resumed>) = 0 [pid 431] close(3) = 0 [pid 431] mkdir("./file0", 0777) = 0 [pid 431] mount("/dev/loop1", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, [pid 424] munmap(0x7faaa718a000, 20699119 [pid 305] <... getdents64 resumed>0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./2/file0") = 0 [pid 305] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./2") = 0 [pid 424] <... munmap resumed>) = 0 [pid 305] mkdir("./3", 0777 [pid 424] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 424] ioctl(4, LOOP_SET_FD, 3 [pid 305] <... mkdir resumed>) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 424] <... ioctl resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 424] close(3 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 424] <... close resumed>) = 0 [pid 424] mkdir("./file0", 0777 [pid 305] <... clone resumed>, child_tidptr=0x5555557f65d0) = 447 [pid 424] <... mkdir resumed>) = 0 [pid 424] mount("/dev/loop2", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime,"./strace-static-x86_64: Process 447 attached [pid 447] set_robust_list(0x5555557f65e0, 24) = 0 [pid 447] chdir("./3") = 0 [pid 447] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 447] setpgid(0, 0) = 0 [pid 447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 447] write(3, "1000", 4) = 4 [pid 447] close(3) = 0 [pid 447] symlink("/dev/binderfs", "./binderfs") = 0 [pid 447] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 447] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 447] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[449], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 449 [pid 447] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 449 attached [pid 449] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 449] memfd_create("syzkaller", 0) = 3 [pid 449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [ 27.843124][ T431] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.885606][ T424] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 431] <... mount resumed>) = 0 [pid 431] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 431] chdir("./file0") = 0 [pid 431] ioctl(4, LOOP_CLR_FD) = 0 [pid 431] close(4) = 0 [pid 431] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 428] <... futex resumed>) = 0 [pid 431] <... open resumed>) = 4 [pid 428] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 431] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 428] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 27.938800][ T431] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 431] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 424] <... mount resumed>) = 0 [pid 424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 424] chdir("./file0") = 0 [pid 424] ioctl(4, LOOP_CLR_FD) = 0 [pid 424] close(4 [pid 431] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 431] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] open(".", O_RDONLY [pid 428] <... futex resumed>) = 0 [pid 431] <... open resumed>) = 5 [pid 428] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 428] <... futex resumed>) = 0 [pid 431] <... symlinkat resumed>) = 0 [pid 428] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 428] <... futex resumed>) = 0 [pid 431] <... mkdirat resumed>) = 0 [pid 428] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 431] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] open(".", O_RDONLY [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... open resumed>) = 6 [pid 431] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] <... futex resumed>) = 0 [pid 431] <... futex resumed>) = 1 [pid 428] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... symlinkat resumed>) = 0 [pid 431] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 428] <... futex resumed>) = 0 [pid 431] <... ioctl resumed>) = 0 [pid 428] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... renameat2 resumed>) = 0 [pid 431] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 431] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] exit_group(0) = ? [pid 431] <... futex resumed>) = ? [pid 431] +++ exited with 0 +++ [pid 428] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=428, si_uid=0, si_status=0, si_utime=7, si_stime=13} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 306] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./2/binderfs") = 0 [ 27.990072][ T424] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 306] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 424] <... close resumed>) = 0 [pid 424] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 424] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 424] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 424] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 422] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 422] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 422] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 422] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 422] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[454], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 454 [pid 422] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 454 attached [pid 424] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 424] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] set_robust_list(0x7faaa85479e0, 24 [pid 424] <... futex resumed>) = 0 [pid 454] <... set_robust_list resumed>) = 0 [pid 424] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] open(".", O_RDONLY) = 5 [pid 454] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 454] <... futex resumed>) = 1 [pid 422] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 424] <... futex resumed>) = 0 [pid 422] <... futex resumed>) = 1 [pid 422] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 424] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 424] <... futex resumed>) = 1 [pid 422] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 424] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 424] <... futex resumed>) = 1 [pid 422] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 424] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 424] <... futex resumed>) = 1 [pid 422] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] open(".", O_RDONLY) = 6 [pid 424] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 424] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 424] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 424] <... futex resumed>) = 1 [pid 422] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 424] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 424] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 422] <... futex resumed>) = 0 [pid 422] exit_group(0 [pid 454] <... futex resumed>) = ? [pid 422] <... exit_group resumed>) = ? [pid 454] +++ exited with 0 +++ [pid 424] +++ exited with 0 +++ [pid 422] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=422, si_uid=0, si_status=0, si_utime=8, si_stime=17} --- [pid 307] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 307] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 307] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./2/binderfs") = 0 [pid 307] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 438] <... write resumed>) = 20699119 [pid 438] munmap(0x7faaa718a000, 20699119) = 0 [pid 438] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 438] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 438] close(3) = 0 [pid 438] mkdir("./file0", 0777) = 0 [pid 438] mount("/dev/loop4", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./2/file0") = 0 [pid 310] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./2") = 0 [pid 310] mkdir("./3", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 459 ./strace-static-x86_64: Process 459 attached [pid 459] set_robust_list(0x5555557f65e0, 24) = 0 [pid 459] chdir("./3") = 0 [pid 459] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 459] setpgid(0, 0) = 0 [pid 459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 459] write(3, "1000", 4) = 4 [pid 459] close(3) = 0 [pid 459] symlink("/dev/binderfs", "./binderfs") = 0 [pid 459] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 459] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 459] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[460], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 460 [pid 459] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 460 attached [pid 460] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 460] memfd_create("syzkaller", 0) = 3 [pid 460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [ 28.237908][ T438] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 449] <... write resumed>) = 20699119 [pid 449] munmap(0x7faaa718a000, 20699119) = 0 [pid 449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 449] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 449] close(3) = 0 [pid 449] mkdir("./file0", 0777) = 0 [pid 449] mount("/dev/loop0", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 438] <... mount resumed>) = 0 [pid 438] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 438] chdir("./file0") = 0 [pid 438] ioctl(4, LOOP_CLR_FD) = 0 [pid 438] close(4) = 0 [pid 438] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 438] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 437] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... open resumed>) = 4 [pid 437] <... futex resumed>) = 0 [pid 437] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 437] <... futex resumed>) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 308] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./2/file0") = 0 [pid 308] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./2") = 0 [pid 308] mkdir("./3", 0777 [pid 437] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... mkdir resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 466 [ 28.344832][ T438] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 28.353968][ T449] F2FS-fs (loop0): Found nat_bits in checkpoint ./strace-static-x86_64: Process 466 attached [pid 466] set_robust_list(0x5555557f65e0, 24) = 0 [pid 466] chdir("./3") = 0 [pid 466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 466] setpgid(0, 0) = 0 [pid 466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 466] write(3, "1000", 4) = 4 [pid 466] close(3) = 0 [pid 466] symlink("/dev/binderfs", "./binderfs") = 0 [pid 466] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 466] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 466] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[467], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 467 [pid 466] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 467 attached [pid 467] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 467] memfd_create("syzkaller", 0) = 3 [pid 467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 438] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 438] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 437] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] open(".", O_RDONLY [pid 437] <... futex resumed>) = 0 [pid 437] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... open resumed>) = 5 [pid 438] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 438] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 437] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... symlinkat resumed>) = 0 [pid 438] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 438] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 437] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... mkdirat resumed>) = 0 [pid 438] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 438] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 437] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... renameat2 resumed>) = 0 [pid 438] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 438] open(".", O_RDONLY [pid 437] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] <... open resumed>) = 6 [pid 437] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 438] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 437] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... symlinkat resumed>) = 0 [pid 438] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 437] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 438] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 437] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 438] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 437] exit_group(0) = ? [pid 438] +++ exited with 0 +++ [pid 437] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=437, si_uid=0, si_status=0, si_utime=9, si_stime=14} --- [pid 309] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 309] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 309] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./2/binderfs") = 0 [pid 309] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 460] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 449] <... mount resumed>) = 0 [pid 449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 449] chdir("./file0") = 0 [pid 449] ioctl(4, LOOP_CLR_FD) = 0 [pid 449] close(4) = 0 [pid 449] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = 0 [pid 447] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 449] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = 0 [pid 447] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [ 28.471085][ T449] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 449] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 447] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 447] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 447] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 447] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 447] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 447] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 447] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 447] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 447] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[469], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 469 [pid 447] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 469 attached [pid 469] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 469] open(".", O_RDONLY) = 5 [pid 469] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = 0 [pid 447] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 469] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = 0 [pid 447] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 469] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = 0 [pid 447] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 469] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = 0 [pid 447] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] open(".", O_RDONLY) = 6 [pid 469] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = 0 [pid 447] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 469] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = 0 [pid 447] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 469] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = 0 [pid 447] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 469] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = 0 [pid 469] <... futex resumed>) = 1 [pid 469] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 449] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 449] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 447] exit_group(0) = ? [pid 469] <... futex resumed>) = ? [pid 469] +++ exited with 0 +++ [pid 449] <... futex resumed>) = ? [pid 449] +++ exited with 0 +++ [pid 447] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=447, si_uid=0, si_status=0, si_utime=9, si_stime=25} --- [pid 305] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 305] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./3/binderfs") = 0 [pid 305] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = 0 [pid 306] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./2/file0") = 0 [pid 306] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./2") = 0 [pid 306] mkdir("./3", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 470 ./strace-static-x86_64: Process 470 attached [pid 470] set_robust_list(0x5555557f65e0, 24) = 0 [pid 470] chdir("./3") = 0 [pid 470] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 470] setpgid(0, 0) = 0 [pid 470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 470] write(3, "1000", 4) = 4 [pid 470] close(3) = 0 [pid 470] symlink("/dev/binderfs", "./binderfs") = 0 [pid 470] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 470] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 470] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[471], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 471 [pid 470] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 471 attached [pid 471] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 471] memfd_create("syzkaller", 0) = 3 [pid 471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 307] <... umount2 resumed>) = 0 [pid 460] <... write resumed>) = 20699119 [pid 460] munmap(0x7faaa718a000, 20699119 [pid 307] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 460] <... munmap resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 460] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 307] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 460] <... openat resumed>) = 4 [pid 307] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 460] ioctl(4, LOOP_SET_FD, 3 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 307] close(4) = 0 [pid 307] rmdir("./2/file0") = 0 [pid 307] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./2") = 0 [pid 307] mkdir("./3", 0777 [pid 460] <... ioctl resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 460] close(3 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 460] <... close resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 460] mkdir("./file0", 0777 [pid 307] ioctl(3, LOOP_CLR_FD [pid 460] <... mkdir resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 460] mount("/dev/loop5", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 473 ./strace-static-x86_64: Process 473 attached [pid 473] set_robust_list(0x5555557f65e0, 24) = 0 [pid 473] chdir("./3") = 0 [pid 473] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 473] setpgid(0, 0) = 0 [pid 473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 473] write(3, "1000", 4) = 4 [pid 473] close(3) = 0 [pid 473] symlink("/dev/binderfs", "./binderfs") = 0 [pid 473] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 473] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 473] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[474], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 474 [pid 473] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 474 attached [pid 474] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 474] memfd_create("syzkaller", 0) = 3 [pid 474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [ 28.821340][ T460] F2FS-fs (loop5): Found nat_bits in checkpoint [pid 474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 460] <... mount resumed>) = 0 [pid 460] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 460] chdir("./file0") = 0 [pid 460] ioctl(4, LOOP_CLR_FD [pid 471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 467] <... write resumed>) = 20699119 [pid 460] <... ioctl resumed>) = 0 [pid 460] close(4 [pid 467] munmap(0x7faaa718a000, 20699119 [pid 460] <... close resumed>) = 0 [pid 460] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] <... munmap resumed>) = 0 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 460] <... futex resumed>) = 0 [pid 459] <... futex resumed>) = 1 [pid 467] <... openat resumed>) = 4 [pid 460] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 459] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] <... open resumed>) = 4 [pid 467] ioctl(4, LOOP_SET_FD, 3 [pid 460] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [ 28.967148][ T460] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [pid 460] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... ioctl resumed>) = 0 [pid 467] close(3) = 0 [pid 467] mkdir("./file0", 0777) = 0 [pid 467] mount("/dev/loop3", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./2/file0") = 0 [pid 309] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./2") = 0 [pid 309] mkdir("./3", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3 [pid 459] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 459] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 459] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 459] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[483], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 483 [pid 459] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... close resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 484 ./strace-static-x86_64: Process 484 attached [pid 484] set_robust_list(0x5555557f65e0, 24) = 0 [pid 484] chdir("./3"./strace-static-x86_64: Process 483 attached [pid 483] set_robust_list(0x7faaa85479e0, 24 [pid 484] <... chdir resumed>) = 0 [pid 483] <... set_robust_list resumed>) = 0 [pid 484] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 483] open(".", O_RDONLY [pid 484] <... prctl resumed>) = 0 [pid 483] <... open resumed>) = 5 [pid 483] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 484] setpgid(0, 0) = 0 [pid 484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 484] write(3, "1000", 4) = 4 [pid 484] close(3 [pid 483] <... symlinkat resumed>) = 0 [pid 483] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 484] <... close resumed>) = 0 [pid 484] symlink("/dev/binderfs", "./binderfs") = 0 [pid 483] <... mkdirat resumed>) = 0 [pid 483] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 484] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 1 [pid 483] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 483] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] open(".", O_RDONLY) = 6 [pid 483] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 484] <... futex resumed>) = 0 [pid 484] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 483] <... symlinkat resumed>) = 0 [pid 483] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 483] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 459] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 459] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 484] <... mmap resumed>) = 0x7faaaf58a000 [pid 484] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 483] <... renameat2 resumed>) = 0 [pid 483] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 483] <... futex resumed>) = 1 [pid 483] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 484] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[485], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 485 [pid 460] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 484] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 460] <... futex resumed>) = 0 [pid 459] exit_group(0 [pid 483] <... futex resumed>) = ? [pid 459] <... exit_group resumed>) = ? [pid 483] +++ exited with 0 +++ [ 29.051374][ T467] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 460] +++ exited with 0 +++ [pid 459] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=459, si_uid=0, si_status=0, si_utime=6, si_stime=12} --- [pid 310] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 310] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./3/binderfs") = 0 [pid 310] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 485 attached [pid 485] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 485] memfd_create("syzkaller", 0) = 3 [pid 485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 474] <... write resumed>) = 20699119 [pid 474] munmap(0x7faaa718a000, 20699119) = 0 [pid 474] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 474] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 474] close(3) = 0 [pid 474] mkdir("./file0", 0777) = 0 [pid 474] mount("/dev/loop2", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 471] <... write resumed>) = 20699119 [pid 467] <... mount resumed>) = 0 [pid 471] munmap(0x7faaa718a000, 20699119 [pid 467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 467] chdir("./file0") = 0 [pid 467] ioctl(4, LOOP_CLR_FD) = 0 [pid 467] close(4 [pid 471] <... munmap resumed>) = 0 [pid 467] <... close resumed>) = 0 [pid 467] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 467] <... futex resumed>) = 1 [pid 471] <... openat resumed>) = 4 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 471] ioctl(4, LOOP_SET_FD, 3 [pid 467] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./3/file0") = 0 [pid 305] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./3") = 0 [pid 305] mkdir("./4", 0777) = 0 [ 29.177493][ T467] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.186008][ T474] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 471] <... ioctl resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3 [pid 471] close(3) = 0 [pid 305] <... close resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 492 [pid 471] mkdir("./file0", 0777) = 0 [pid 471] mount("/dev/loop1", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime,"./strace-static-x86_64: Process 492 attached [pid 492] set_robust_list(0x5555557f65e0, 24) = 0 [pid 492] chdir("./4") = 0 [pid 492] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 492] setpgid(0, 0) = 0 [pid 492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 492] write(3, "1000", 4) = 4 [pid 492] close(3) = 0 [pid 492] symlink("/dev/binderfs", "./binderfs") = 0 [pid 492] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 492] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 492] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[496], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 496 [pid 492] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 466] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 466] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 466] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 466] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[497], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 497 [pid 466] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 497 attached ./strace-static-x86_64: Process 496 attached [pid 497] set_robust_list(0x7faaa85479e0, 24 [pid 496] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 497] <... set_robust_list resumed>) = 0 [pid 496] memfd_create("syzkaller", 0 [pid 497] open(".", O_RDONLY) = 5 [pid 497] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... memfd_create resumed>) = 3 [pid 496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 497] <... futex resumed>) = 1 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 497] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 497] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 497] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] open(".", O_RDONLY) = 6 [pid 497] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 497] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 497] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... renameat2 resumed>) = 0 [pid 497] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] <... futex resumed>) = 0 [pid 497] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 467] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 466] exit_group(0) = ? [pid 497] <... futex resumed>) = ? [pid 467] <... futex resumed>) = ? [pid 497] +++ exited with 0 +++ [pid 467] +++ exited with 0 +++ [pid 466] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=466, si_uid=0, si_status=0, si_utime=9, si_stime=12} --- [pid 308] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 308] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./3/binderfs") = 0 [ 29.260369][ T471] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 308] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 474] <... mount resumed>) = 0 [pid 474] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 474] chdir("./file0") = 0 [pid 474] ioctl(4, LOOP_CLR_FD) = 0 [pid 474] close(4) = 0 [pid 474] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 474] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 29.324584][ T474] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 474] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 471] <... mount resumed>) = 0 [pid 471] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 471] chdir("./file0") = 0 [pid 471] ioctl(4, LOOP_CLR_FD) = 0 [pid 471] close(4 [pid 474] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 471] <... close resumed>) = 0 [pid 474] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] <... futex resumed>) = 1 [pid 473] <... futex resumed>) = 0 [pid 471] <... futex resumed>) = 1 [pid 470] <... futex resumed>) = 0 [pid 473] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = 0 [pid 470] <... futex resumed>) = 0 [pid 473] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 470] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 474] open(".", O_RDONLY [pid 471] <... open resumed>) = 4 [pid 474] <... open resumed>) = 5 [pid 471] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] <... futex resumed>) = 1 [pid 473] <... futex resumed>) = 0 [pid 470] <... futex resumed>) = 0 [pid 473] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = 0 [pid 470] <... futex resumed>) = 0 [pid 473] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 470] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 474] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 474] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 474] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 474] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] open(".", O_RDONLY) = 6 [pid 474] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 474] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 474] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 474] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 474] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] <... futex resumed>) = 0 [pid 473] exit_group(0) = ? [pid 474] +++ exited with 0 +++ [pid 473] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=473, si_uid=0, si_status=0, si_utime=4, si_stime=15} --- [pid 307] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 307] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 307] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./3/binderfs") = 0 [ 29.374929][ T471] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 307] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 470] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 470] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 470] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 470] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 470] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 470] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 470] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[500], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 500 [pid 470] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... pwritev2 resumed>) = -1 EIO (Input/output error) ./strace-static-x86_64: Process 500 attached [pid 500] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 500] open(".", O_RDONLY) = 5 [pid 500] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 470] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] <... symlinkat resumed>) = 0 [pid 500] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 470] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] <... mkdirat resumed>) = 0 [pid 500] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 500] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 470] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] open(".", O_RDONLY) = 6 [pid 500] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 500] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 470] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 500] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 470] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 500] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 500] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] <... futex resumed>) = 0 [pid 500] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 471] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] exit_group(0) = ? [pid 500] <... futex resumed>) = 230 [pid 500] +++ exited with 0 +++ [pid 471] <... futex resumed>) = ? [pid 471] +++ exited with 0 +++ [pid 470] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=470, si_uid=0, si_status=0, si_utime=5, si_stime=15} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 306] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./3/binderfs") = 0 [pid 306] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 29.482316][ T471] syz-executor151 (471) used greatest stack depth: 23512 bytes left [pid 485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119) = 20699119 [pid 485] munmap(0x7faaa718a000, 20699119) = 0 [pid 485] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 485] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 485] close(3) = 0 [pid 485] mkdir("./file0", 0777) = 0 [pid 485] mount("/dev/loop4", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./3/file0" [pid 496] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 310] <... rmdir resumed>) = 0 [pid 310] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./3") = 0 [pid 310] mkdir("./4", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 502 ./strace-static-x86_64: Process 502 attached [pid 502] set_robust_list(0x5555557f65e0, 24) = 0 [pid 502] chdir("./4") = 0 [pid 502] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 502] setpgid(0, 0) = 0 [pid 502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 502] write(3, "1000", 4) = 4 [pid 502] close(3) = 0 [pid 502] symlink("/dev/binderfs", "./binderfs") = 0 [pid 502] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 502] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 502] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[506], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 506 [pid 502] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 506 attached [pid 506] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 506] memfd_create("syzkaller", 0) = 3 [pid 506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [ 29.693893][ T485] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 308] <... umount2 resumed>) = 0 [pid 485] <... mount resumed>) = 0 [pid 308] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 485] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 485] chdir("./file0" [pid 308] lstat("./3/file0", [pid 485] <... chdir resumed>) = 0 [pid 485] ioctl(4, LOOP_CLR_FD [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./3/file0") = 0 [pid 308] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./3" [pid 496] <... write resumed>) = 20699119 [pid 308] <... rmdir resumed>) = 0 [pid 308] mkdir("./4", 0777) = 0 [pid 496] munmap(0x7faaa718a000, 20699119 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 496] <... munmap resumed>) = 0 [ 29.812651][ T485] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 496] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 485] <... ioctl resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 496] <... openat resumed>) = 4 [pid 485] close(4 [pid 308] ioctl(3, LOOP_CLR_FD [pid 496] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 485] <... close resumed>) = 0 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 485] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] close(3 [pid 496] close(3) = 0 [pid 496] mkdir("./file0", 0777) = 0 [pid 485] <... futex resumed>) = 1 [pid 308] <... close resumed>) = 0 [pid 484] <... futex resumed>) = 0 [pid 485] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 484] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] mount("/dev/loop0", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 485] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 308] <... clone resumed>, child_tidptr=0x5555557f65d0) = 509 [pid 485] <... open resumed>) = 4 [pid 307] <... umount2 resumed>) = 0 [pid 485] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 485] <... futex resumed>) = 1 [pid 484] <... futex resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 485] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 484] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 484] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 485] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 307] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 509 attached [pid 307] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 509] set_robust_list(0x5555557f65e0, 24) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./3/file0" [pid 509] chdir("./4") = 0 [pid 307] <... rmdir resumed>) = 0 [pid 509] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 509] setpgid(0, 0) = 0 [pid 509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 307] getdents64(3, [pid 509] write(3, "1000", 4 [pid 307] <... getdents64 resumed>0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 509] <... write resumed>) = 4 [pid 509] close(3) = 0 [pid 509] symlink("/dev/binderfs", "./binderfs") = 0 [pid 509] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 509] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE [pid 307] close(3 [pid 509] <... mprotect resumed>) = 0 [pid 509] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 307] <... close resumed>) = 0 [pid 509] <... clone resumed>, parent_tid=[512], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 512 [pid 509] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 307] rmdir("./3") = 0 [pid 307] mkdir("./4", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 514 ./strace-static-x86_64: Process 512 attached [pid 512] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 512] memfd_create("syzkaller", 0) = 3 [pid 512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 ./strace-static-x86_64: Process 514 attached [pid 514] set_robust_list(0x5555557f65e0, 24) = 0 [pid 514] chdir("./4") = 0 [pid 514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 514] setpgid(0, 0) = 0 [pid 514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 514] write(3, "1000", 4) = 4 [pid 514] close(3) = 0 [pid 514] symlink("/dev/binderfs", "./binderfs") = 0 [pid 514] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 514] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 514] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[515], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 515 [pid 514] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 515 attached [pid 484] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 515] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 515] memfd_create("syzkaller", 0 [pid 484] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 515] <... memfd_create resumed>) = 3 [pid 484] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 484] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 484] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 484] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 484] <... clone resumed>, parent_tid=[516], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 516 [pid 484] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 515] <... mmap resumed>) = 0x7faaa718a000 [pid 484] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 516 attached [pid 516] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 516] open(".", O_RDONLY) = 5 [pid 516] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 516] <... futex resumed>) = 1 [pid 516] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 516] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 516] <... futex resumed>) = 1 [pid 516] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 516] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 516] <... futex resumed>) = 1 [pid 516] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 516] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 516] <... futex resumed>) = 1 [pid 516] open(".", O_RDONLY) = 6 [pid 516] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 516] <... futex resumed>) = 1 [pid 516] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 516] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 516] <... futex resumed>) = 1 [pid 516] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 516] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 516] <... futex resumed>) = 1 [ 29.933795][ T496] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 516] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 484] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 516] <... renameat2 resumed>) = 0 [pid 516] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 29.977436][ T503] handle_bad_sector: 78 callbacks suppressed [ 29.977446][ T503] attempt to access beyond end of device [ 29.977446][ T503] loop4: rw=2049, want=45120, limit=40427 [ 29.986033][ T485] attempt to access beyond end of device [ 29.986033][ T485] loop4: rw=2049, want=80808, limit=40427 [pid 516] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 306] <... umount2 resumed>) = 0 [pid 306] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./3/file0", [pid 496] <... mount resumed>) = 0 [pid 496] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 496] chdir("./file0") = 0 [pid 496] ioctl(4, LOOP_CLR_FD) = 0 [pid 496] close(4 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 496] <... close resumed>) = 0 [pid 306] <... openat resumed>) = 4 [pid 496] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 496] <... futex resumed>) = 1 [pid 496] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, [pid 496] <... open resumed>) = 4 [pid 496] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 496] <... futex resumed>) = 1 [pid 496] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 306] <... getdents64 resumed>0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./3/file0") = 0 [pid 306] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./3") = 0 [pid 306] mkdir("./4", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3 [pid 485] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 306] <... close resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 485] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] exit_group(0 [pid 516] <... futex resumed>) = ? [pid 484] <... exit_group resumed>) = ? [pid 516] +++ exited with 0 +++ [pid 306] <... clone resumed>, child_tidptr=0x5555557f65d0) = 518 [pid 485] <... futex resumed>) = ? [ 30.050888][ T485] attempt to access beyond end of device [ 30.050888][ T485] loop4: rw=2049, want=51264, limit=40427 [ 30.079492][ T496] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 30.087383][ T485] attempt to access beyond end of device [ 30.087383][ T485] loop4: rw=2049, want=80816, limit=40427 [pid 485] +++ exited with 0 +++ [pid 484] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=484, si_uid=0, si_status=0, si_utime=6, si_stime=15} --- [pid 309] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 309] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 309] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./3/binderfs") = 0 [pid 309] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 518 attached [pid 518] set_robust_list(0x5555557f65e0, 24) = 0 [pid 518] chdir("./4") = 0 [pid 518] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 518] setpgid(0, 0) = 0 [pid 518] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 518] write(3, "1000", 4) = 4 [pid 518] close(3) = 0 [pid 518] symlink("/dev/binderfs", "./binderfs") = 0 [pid 518] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 518] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 518] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[519], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 519 [pid 518] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 519 attached [pid 519] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 519] memfd_create("syzkaller", 0) = 3 [pid 519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 492] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 492] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 492] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 492] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 492] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 492] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 492] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[521], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 521 [pid 492] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 521 attached [pid 521] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 521] open(".", O_RDONLY) = 5 [pid 521] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... futex resumed>) = 1 [pid 521] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 521] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... futex resumed>) = 1 [pid 521] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 521] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... futex resumed>) = 1 [pid 521] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 521] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... futex resumed>) = 1 [pid 521] open(".", O_RDONLY) = 6 [pid 521] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... futex resumed>) = 1 [pid 521] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 521] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... futex resumed>) = 1 [pid 521] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 521] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... futex resumed>) = 1 [pid 521] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 521] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [ 30.181573][ T496] attempt to access beyond end of device [ 30.181573][ T496] loop0: rw=2049, want=81920, limit=40427 [ 30.198222][ T510] attempt to access beyond end of device [ 30.198222][ T510] loop0: rw=2049, want=45120, limit=40427 [pid 521] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 506] <... write resumed>) = 20699119 [pid 506] munmap(0x7faaa718a000, 20699119) = 0 [pid 506] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 506] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 506] close(3) = 0 [pid 506] mkdir("./file0", 0777) = 0 [ 30.228407][ T496] attempt to access beyond end of device [ 30.228407][ T496] loop0: rw=2049, want=51264, limit=40427 [ 30.259126][ T496] attempt to access beyond end of device [ 30.259126][ T496] loop0: rw=2049, want=49160, limit=40427 [pid 506] mount("/dev/loop5", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 512] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 496] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 496] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 492] exit_group(0 [pid 521] <... futex resumed>) = ? [pid 492] <... exit_group resumed>) = ? [pid 521] +++ exited with 0 +++ [pid 496] <... futex resumed>) = ? [pid 496] +++ exited with 0 +++ [pid 492] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=492, si_uid=0, si_status=0, si_utime=7, si_stime=22} --- [pid 305] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 305] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 305] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./4/binderfs") = 0 [ 30.289629][ T506] F2FS-fs (loop5): Found nat_bits in checkpoint [pid 305] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 506] <... mount resumed>) = 0 [pid 506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 506] chdir("./file0") = 0 [pid 506] ioctl(4, LOOP_CLR_FD) = 0 [ 30.381835][ T506] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [pid 506] close(4) = 0 [pid 506] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] <... futex resumed>) = 0 [pid 506] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 502] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 506] <... open resumed>) = 4 [pid 506] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] <... futex resumed>) = 0 [pid 506] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 502] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 502] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 502] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 502] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 502] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[527], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 527 [pid 502] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 527 attached [pid 527] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 527] open(".", O_RDONLY) = 5 [pid 527] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] <... futex resumed>) = 0 [pid 527] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 502] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... symlinkat resumed>) = 0 [pid 527] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] <... futex resumed>) = 0 [pid 502] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 527] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] <... futex resumed>) = 0 [pid 527] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 527] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 502] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] <... futex resumed>) = 0 [pid 502] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] open(".", O_RDONLY) = 6 [pid 527] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 527] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 502] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... symlinkat resumed>) = 0 [pid 527] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 527] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] <... futex resumed>) = 0 [pid 527] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 502] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... ioctl resumed>) = 0 [pid 527] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 527] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 502] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 512] <... write resumed>) = 20699119 [pid 512] munmap(0x7faaa718a000, 20699119) = 0 [pid 512] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 527] <... renameat2 resumed>) = 0 [pid 512] <... openat resumed>) = 4 [pid 527] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 527] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 512] close(3) = 0 [pid 512] mkdir("./file0", 0777) = 0 [ 30.520455][ T523] attempt to access beyond end of device [ 30.520455][ T523] loop5: rw=2049, want=45120, limit=40427 [ 30.532405][ T506] attempt to access beyond end of device [ 30.532405][ T506] loop5: rw=2049, want=81448, limit=40427 [pid 512] mount("/dev/loop3", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 506] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 506] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] exit_group(0 [pid 527] <... futex resumed>) = ? [pid 502] <... exit_group resumed>) = ? [pid 527] +++ exited with 0 +++ [pid 506] <... futex resumed>) = ? [pid 506] +++ exited with 0 +++ [pid 502] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=502, si_uid=0, si_status=0, si_utime=5, si_stime=17} --- [pid 310] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 310] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 310] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./4/binderfs") = 0 [pid 310] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./3/file0") = 0 [pid 309] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./3") = 0 [pid 309] mkdir("./4", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 532 [ 30.610191][ T512] F2FS-fs (loop3): Found nat_bits in checkpoint ./strace-static-x86_64: Process 532 attached [pid 532] set_robust_list(0x5555557f65e0, 24) = 0 [pid 532] chdir("./4") = 0 [pid 532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 532] setpgid(0, 0) = 0 [pid 532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 532] write(3, "1000", 4) = 4 [pid 532] close(3) = 0 [pid 532] symlink("/dev/binderfs", "./binderfs") = 0 [pid 532] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 532] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 532] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[533], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 533 [pid 532] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 533 attached [pid 533] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 533] memfd_create("syzkaller", 0) = 3 [pid 533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 515] <... write resumed>) = 20699119 [pid 515] munmap(0x7faaa718a000, 20699119) = 0 [pid 515] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 515] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 515] close(3) = 0 [pid 515] mkdir("./file0", 0777) = 0 [pid 515] mount("/dev/loop2", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 512] <... mount resumed>) = 0 [pid 512] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 512] chdir("./file0") = 0 [pid 512] ioctl(4, LOOP_CLR_FD) = 0 [pid 512] close(4 [pid 519] <... write resumed>) = 20699119 [pid 512] <... close resumed>) = 0 [pid 512] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 519] munmap(0x7faaa718a000, 20699119 [pid 512] <... futex resumed>) = 1 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 512] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 512] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 512] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 519] <... munmap resumed>) = 0 [pid 519] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 519] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 519] close(3) = 0 [pid 519] mkdir("./file0", 0777) = 0 [ 30.738281][ T512] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 30.756021][ T515] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 519] mount("/dev/loop1", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 509] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 509] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 509] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 509] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 509] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[543], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 543 [pid 509] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 543 attached [pid 543] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 543] open(".", O_RDONLY) = 5 [pid 543] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 543] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 543] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 543] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] open(".", O_RDONLY) = 6 [pid 543] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 543] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 543] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 543] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 543] <... futex resumed>) = 1 [pid 543] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 512] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] exit_group(0) = ? [pid 543] <... futex resumed>) = ? [pid 543] +++ exited with 0 +++ [pid 512] +++ exited with 0 +++ [pid 509] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=509, si_uid=0, si_status=0, si_utime=7, si_stime=13} --- [pid 308] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 308] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 308] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./4/binderfs") = 0 [ 30.803588][ T519] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 308] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 515] <... mount resumed>) = 0 [pid 515] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 515] chdir("./file0") = 0 [pid 515] ioctl(4, LOOP_CLR_FD) = 0 [pid 515] close(4) = 0 [pid 515] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 515] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 519] <... mount resumed>) = 0 [pid 519] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 519] chdir("./file0") = 0 [pid 519] ioctl(4, LOOP_CLR_FD) = 0 [pid 519] close(4) = 0 [pid 519] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 519] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 514] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 514] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 514] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 514] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[546], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 546 [pid 514] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 30.872636][ T515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 30.908985][ T519] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 305] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./4/file0") = 0 [pid 305] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./4") = 0 [pid 305] mkdir("./5", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 547 ./strace-static-x86_64: Process 546 attached [pid 546] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 546] open(".", O_RDONLY) = 5 [pid 546] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0"./strace-static-x86_64: Process 547 attached [pid 547] set_robust_list(0x5555557f65e0, 24) = 0 [pid 547] chdir("./5") = 0 [pid 547] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 547] setpgid(0, 0) = 0 [pid 547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 547] write(3, "1000", 4) = 4 [pid 547] close(3) = 0 [pid 547] symlink("/dev/binderfs", "./binderfs" [pid 546] <... symlinkat resumed>) = 0 [pid 547] <... symlink resumed>) = 0 [pid 547] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 547] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 547] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 546] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 546] <... futex resumed>) = 1 [pid 514] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 547] <... clone resumed>, parent_tid=[548], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 548 [pid 547] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 546] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 546] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 514] <... futex resumed>) = 0 [pid 518] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 514] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 514] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 518] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 518] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 518] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[549], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 549 [pid 518] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... futex resumed>) = 1 [pid 546] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 ./strace-static-x86_64: Process 548 attached [pid 548] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 548] memfd_create("syzkaller", 0 [pid 546] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 546] <... futex resumed>) = 1 [pid 514] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] <... memfd_create resumed>) = 3 [pid 514] <... futex resumed>) = 0 [pid 546] open(".", O_RDONLY [pid 514] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... open resumed>) = 6 [pid 546] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 546] <... futex resumed>) = 1 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... symlinkat resumed>) = 0 [pid 546] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 546] <... futex resumed>) = 1 [pid 514] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 514] <... futex resumed>) = 0 [pid 546] <... ioctl resumed>) = 0 [pid 514] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 546] <... futex resumed>) = 1 [pid 514] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... renameat2 resumed>) = 0 ./strace-static-x86_64: Process 549 attached [pid 549] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 549] open(".", O_RDONLY) = 5 [pid 549] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = 0 [pid 546] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] <... futex resumed>) = 0 [pid 518] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 549] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 549] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 549] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] open(".", O_RDONLY) = 6 [pid 549] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 549] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 515] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 515] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 549] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 515] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 549] <... ioctl resumed>) = 0 [pid 549] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] exit_group(0 [pid 518] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... futex resumed>) = ? [pid 515] <... futex resumed>) = ? [pid 514] <... exit_group resumed>) = ? [pid 549] <... futex resumed>) = 1 [pid 549] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 546] +++ exited with 0 +++ [pid 549] <... renameat2 resumed>) = 0 [pid 549] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = 0 [pid 549] <... futex resumed>) = 1 [pid 549] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 515] +++ exited with 0 +++ [pid 514] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=514, si_uid=0, si_status=0, si_utime=11, si_stime=17} --- [pid 307] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 307] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 307] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./4/binderfs") = 0 [pid 307] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 519] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 519] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 518] exit_group(0 [pid 549] <... futex resumed>) = ? [pid 518] <... exit_group resumed>) = ? [pid 549] +++ exited with 0 +++ [pid 519] <... futex resumed>) = ? [pid 519] +++ exited with 0 +++ [pid 518] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=518, si_uid=0, si_status=0, si_utime=11, si_stime=15} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 306] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./4/binderfs") = 0 [pid 306] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 310] <... umount2 resumed>) = 0 [pid 548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 310] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./4/file0") = 0 [pid 310] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./4") = 0 [pid 310] mkdir("./5", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 550 ./strace-static-x86_64: Process 550 attached [pid 550] set_robust_list(0x5555557f65e0, 24) = 0 [pid 550] chdir("./5") = 0 [pid 550] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 550] setpgid(0, 0) = 0 [pid 550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 550] write(3, "1000", 4) = 4 [pid 550] close(3) = 0 [pid 550] symlink("/dev/binderfs", "./binderfs") = 0 [pid 550] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 550] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 550] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[551], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 551 [pid 550] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 551 attached [pid 551] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 551] memfd_create("syzkaller", 0) = 3 [pid 551] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 533] <... write resumed>) = 20699119 [pid 533] munmap(0x7faaa718a000, 20699119) = 0 [pid 533] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 533] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 533] close(3) = 0 [pid 533] mkdir("./file0", 0777) = 0 [pid 533] mount("/dev/loop4", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 548] <... write resumed>) = 20699119 [pid 548] munmap(0x7faaa718a000, 20699119) = 0 [pid 548] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 548] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 548] close(3) = 0 [pid 548] mkdir("./file0", 0777) = 0 [ 31.317321][ T533] F2FS-fs (loop4): Found nat_bits in checkpoint [ 31.348173][ T548] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 548] mount("/dev/loop0", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime,") = 0 [pid 548] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 548] chdir("./file0") = 0 [pid 548] ioctl(4, LOOP_CLR_FD) = 0 [pid 548] close(4) = 0 [pid 548] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] <... futex resumed>) = 0 [pid 547] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 548] <... futex resumed>) = 1 [pid 548] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 548] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] <... futex resumed>) = 0 [pid 547] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 548] <... futex resumed>) = 1 [pid 548] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 533] <... mount resumed>) = 0 [pid 533] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 533] chdir("./file0") = 0 [pid 533] ioctl(4, LOOP_CLR_FD) = 0 [pid 533] close(4) = 0 [pid 533] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 533] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 308] <... umount2 resumed>) = 0 [pid 308] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./4/file0") = 0 [pid 308] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./4") = 0 [pid 308] mkdir("./5", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 562 ./strace-static-x86_64: Process 562 attached [pid 562] set_robust_list(0x5555557f65e0, 24) = 0 [pid 562] chdir("./5") = 0 [pid 562] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 562] setpgid(0, 0) = 0 [pid 562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 562] write(3, "1000", 4) = 4 [pid 562] close(3) = 0 [pid 562] symlink("/dev/binderfs", "./binderfs") = 0 [ 31.392610][ T548] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.421015][ T533] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 562] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 562] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 562] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[563], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 563 [pid 562] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 547] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 547] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 547] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 547] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 547] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[564], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 564 [pid 547] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 564 attached [pid 564] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 564] open(".", O_RDONLY) = 5 [pid 564] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] <... futex resumed>) = 0 [pid 547] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 564] <... futex resumed>) = 1 [pid 564] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 ./strace-static-x86_64: Process 563 attached [pid 563] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 563] memfd_create("syzkaller", 0 [pid 564] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] <... futex resumed>) = 0 [pid 547] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 564] <... futex resumed>) = 1 [pid 564] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 563] <... memfd_create resumed>) = 3 [pid 563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 564] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] <... futex resumed>) = 0 [pid 547] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 564] <... futex resumed>) = 1 [pid 564] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 564] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] <... futex resumed>) = 0 [pid 547] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 564] <... futex resumed>) = 1 [pid 564] open(".", O_RDONLY) = 6 [pid 564] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] <... futex resumed>) = 0 [pid 547] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 564] <... futex resumed>) = 1 [pid 564] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 564] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] <... futex resumed>) = 0 [pid 547] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 564] <... futex resumed>) = 1 [pid 564] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 564] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] <... futex resumed>) = 0 [pid 547] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 564] <... futex resumed>) = 1 [pid 564] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 564] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] <... futex resumed>) = 0 [pid 564] <... futex resumed>) = 1 [pid 564] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 532] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 532] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 532] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[565], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 565 [pid 532] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 548] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 548] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 547] exit_group(0) = ? [pid 564] <... futex resumed>) = ? [pid 564] +++ exited with 0 +++ [pid 548] <... futex resumed>) = ? [pid 548] +++ exited with 0 +++ [pid 547] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=547, si_uid=0, si_status=0, si_utime=2, si_stime=15} --- [pid 305] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 305] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 305] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./5/binderfs") = 0 [pid 305] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 533] <... pwritev2 resumed>) = -1 EIO (Input/output error) ./strace-static-x86_64: Process 565 attached [pid 565] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 565] open(".", O_RDONLY) = 5 [pid 565] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... futex resumed>) = 1 [pid 565] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 565] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... futex resumed>) = 1 [pid 565] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 565] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... futex resumed>) = 1 [pid 565] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 565] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... futex resumed>) = 1 [pid 565] open(".", O_RDONLY) = 6 [pid 565] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... futex resumed>) = 1 [pid 565] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 565] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... futex resumed>) = 1 [pid 565] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 565] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... futex resumed>) = 1 [pid 565] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 565] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 565] <... futex resumed>) = 1 [pid 565] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] exit_group(0) = ? [pid 565] <... futex resumed>) = ? [pid 565] +++ exited with 0 +++ [pid 533] <... futex resumed>) = ? [pid 533] +++ exited with 0 +++ [pid 532] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=532, si_uid=0, si_status=0, si_utime=5, si_stime=19} --- [pid 309] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 309] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./4/binderfs") = 0 [pid 309] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 551] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 306] <... umount2 resumed>) = 0 [pid 306] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./4/file0") = 0 [pid 306] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./4") = 0 [pid 306] mkdir("./5", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 566 [pid 551] <... write resumed>) = 20699119 [pid 551] munmap(0x7faaa718a000, 20699119) = 0 [pid 551] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 566 attached [pid 566] set_robust_list(0x5555557f65e0, 24 [pid 551] <... openat resumed>) = 4 [pid 566] <... set_robust_list resumed>) = 0 [pid 566] chdir("./5") = 0 [pid 566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 566] setpgid(0, 0) = 0 [pid 566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 551] ioctl(4, LOOP_SET_FD, 3 [pid 566] <... openat resumed>) = 3 [pid 566] write(3, "1000", 4) = 4 [pid 566] close(3) = 0 [pid 566] symlink("/dev/binderfs", "./binderfs") = 0 [pid 566] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 566] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 566] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 551] <... ioctl resumed>) = 0 [pid 551] close(3) = 0 [pid 566] <... clone resumed>, parent_tid=[568], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 568 [pid 551] mkdir("./file0", 0777 [pid 566] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 551] <... mkdir resumed>) = 0 [pid 551] mount("/dev/loop5", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime,"./strace-static-x86_64: Process 568 attached [pid 568] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 568] memfd_create("syzkaller", 0) = 3 [pid 568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [ 31.718442][ T551] F2FS-fs (loop5): Found nat_bits in checkpoint [pid 307] <... umount2 resumed>) = 0 [pid 307] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./4/file0") = 0 [pid 307] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./4") = 0 [pid 307] mkdir("./5", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3 [pid 563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 307] <... close resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 573 ./strace-static-x86_64: Process 573 attached [pid 573] set_robust_list(0x5555557f65e0, 24) = 0 [pid 573] chdir("./5") = 0 [pid 573] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 573] setpgid(0, 0) = 0 [pid 573] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 573] write(3, "1000", 4) = 4 [pid 573] close(3) = 0 [pid 573] symlink("/dev/binderfs", "./binderfs") = 0 [pid 551] <... mount resumed>) = 0 [pid 573] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 573] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 573] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[574], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 574 [pid 573] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 551] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 551] chdir("./file0") = 0 [pid 551] ioctl(4, LOOP_CLR_FD) = 0 [pid 551] close(4) = 0 [pid 551] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 551] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] <... open resumed>) = 4 [pid 551] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC./strace-static-x86_64: Process 574 attached [pid 574] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 574] memfd_create("syzkaller", 0) = 3 [pid 574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [ 31.822431][ T551] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [pid 551] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 551] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] open(".", O_RDONLY) = 5 [pid 551] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 551] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 551] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 551] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] open(".", O_RDONLY) = 6 [pid 551] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 551] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 551] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 550] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 551] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 551] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 551] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 550] exit_group(0) = ? [pid 551] +++ exited with 0 +++ [pid 550] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=550, si_uid=0, si_status=0, si_utime=7, si_stime=15} --- [pid 310] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 310] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./5/binderfs") = 0 [pid 310] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 563] <... write resumed>) = 20699119 [pid 563] munmap(0x7faaa718a000, 20699119) = 0 [pid 563] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 563] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 563] close(3) = 0 [pid 563] mkdir("./file0", 0777) = 0 [pid 563] mount("/dev/loop3", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [ 32.063821][ T563] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 568] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./5/file0") = 0 [pid 305] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./5") = 0 [pid 305] mkdir("./6", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 579 ./strace-static-x86_64: Process 579 attached [pid 579] set_robust_list(0x5555557f65e0, 24) = 0 [pid 579] chdir("./6") = 0 [pid 579] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 579] setpgid(0, 0) = 0 [pid 579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 579] write(3, "1000", 4) = 4 [pid 579] close(3) = 0 [pid 579] symlink("/dev/binderfs", "./binderfs") = 0 [pid 579] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 579] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 579] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[581], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 581 [pid 579] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 581 attached [pid 581] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 581] memfd_create("syzkaller", 0) = 3 [pid 581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 563] <... mount resumed>) = 0 [pid 563] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 563] chdir("./file0") = 0 [pid 563] ioctl(4, LOOP_CLR_FD [pid 568] <... write resumed>) = 20699119 [pid 568] munmap(0x7faaa718a000, 20699119) = 0 [ 32.177537][ T563] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 568] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./4/file0") = 0 [pid 309] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./4") = 0 [pid 309] mkdir("./5", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3 [pid 568] <... openat resumed>) = 4 [pid 563] <... ioctl resumed>) = 0 [pid 568] ioctl(4, LOOP_SET_FD, 3 [pid 563] close(4 [pid 568] <... ioctl resumed>) = 0 [pid 568] close(3) = 0 [pid 568] mkdir("./file0", 0777) = 0 [pid 568] mount("/dev/loop1", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 563] <... close resumed>) = 0 [pid 563] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... close resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 563] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 309] <... clone resumed>, child_tidptr=0x5555557f65d0) = 583 [pid 563] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC./strace-static-x86_64: Process 583 attached [pid 583] set_robust_list(0x5555557f65e0, 24) = 0 [pid 583] chdir("./5") = 0 [pid 583] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 583] setpgid(0, 0) = 0 [pid 583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 583] write(3, "1000", 4) = 4 [pid 583] close(3) = 0 [pid 583] symlink("/dev/binderfs", "./binderfs") = 0 [pid 583] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 583] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 583] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[587], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 587 [pid 583] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 587 attached [pid 587] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 587] memfd_create("syzkaller", 0) = 3 [pid 587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 562] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 562] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 562] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 562] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 562] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 562] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 562] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[588], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 588 [pid 562] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 588 attached [pid 588] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 588] open(".", O_RDONLY) = 5 [pid 588] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... futex resumed>) = 1 [pid 588] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 588] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... futex resumed>) = 1 [pid 588] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 588] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... futex resumed>) = 1 [pid 588] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 588] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... futex resumed>) = 1 [pid 588] open(".", O_RDONLY) = 6 [pid 588] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... futex resumed>) = 1 [pid 588] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 588] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... futex resumed>) = 1 [pid 588] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 588] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 588] <... futex resumed>) = 1 [pid 588] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 588] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = 0 [pid 588] <... futex resumed>) = 1 [pid 588] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 563] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 563] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] exit_group(0 [pid 588] <... futex resumed>) = ? [pid 562] <... exit_group resumed>) = ? [pid 588] +++ exited with 0 +++ [ 32.296291][ T568] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 563] +++ exited with 0 +++ [pid 562] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=562, si_uid=0, si_status=0, si_utime=6, si_stime=18} --- [pid 308] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 308] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./5/binderfs") = 0 [pid 308] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./5/file0") = 0 [pid 310] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./5") = 0 [pid 310] mkdir("./6", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 589 [pid 574] <... write resumed>) = 20699119 [pid 574] munmap(0x7faaa718a000, 20699119) = 0 [pid 574] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 574] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 589 attached [pid 589] set_robust_list(0x5555557f65e0, 24) = 0 [pid 589] chdir("./6") = 0 [pid 589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 589] setpgid(0, 0) = 0 [pid 589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 589] write(3, "1000", 4) = 4 [pid 589] close(3) = 0 [pid 589] symlink("/dev/binderfs", "./binderfs") = 0 [pid 581] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 568] <... mount resumed>) = 0 [pid 568] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 589] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 568] <... openat resumed>) = 3 [pid 589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 568] chdir("./file0" [pid 574] <... ioctl resumed>) = 0 [pid 574] close(3) = 0 [pid 574] mkdir("./file0", 0777 [pid 568] <... chdir resumed>) = 0 [pid 589] <... mmap resumed>) = 0x7faaaf58a000 [pid 574] <... mkdir resumed>) = 0 [pid 568] ioctl(4, LOOP_CLR_FD [pid 574] mount("/dev/loop2", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 589] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE [pid 568] <... ioctl resumed>) = 0 [pid 568] close(4 [pid 589] <... mprotect resumed>) = 0 [pid 568] <... close resumed>) = 0 [pid 568] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 568] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 589] <... clone resumed>, parent_tid=[592], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 592 [pid 568] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] <... futex resumed>) = 1 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 568] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 589] <... futex resumed>) = 0 [pid 589] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 592 attached [pid 592] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 592] memfd_create("syzkaller", 0) = 3 [pid 592] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [ 32.442711][ T568] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 566] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 566] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 566] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 566] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 566] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[596], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 596 [pid 566] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 596 attached [pid 596] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 596] open(".", O_RDONLY) = 5 [pid 596] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... futex resumed>) = 1 [pid 596] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 596] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... futex resumed>) = 1 [pid 596] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 568] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 596] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... futex resumed>) = 1 [pid 596] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 596] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... futex resumed>) = 1 [pid 596] open(".", O_RDONLY) = 6 [pid 596] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... futex resumed>) = 1 [pid 596] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 596] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... futex resumed>) = 1 [pid 596] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 596] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... futex resumed>) = 1 [pid 596] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 596] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 596] <... futex resumed>) = 1 [pid 596] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 568] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] exit_group(0) = ? [pid 596] <... futex resumed>) = ? [pid 596] +++ exited with 0 +++ [pid 568] +++ exited with 0 +++ [pid 566] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=566, si_uid=0, si_status=0, si_utime=11, si_stime=14} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 306] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./5/binderfs") = 0 [ 32.506923][ T574] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 306] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 581] <... write resumed>) = 20699119 [pid 574] <... mount resumed>) = 0 [pid 574] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 574] chdir("./file0") = 0 [pid 574] ioctl(4, LOOP_CLR_FD) = 0 [pid 574] close(4 [pid 581] munmap(0x7faaa718a000, 20699119) = 0 [pid 581] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 581] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 581] close(3 [pid 574] <... close resumed>) = 0 [pid 581] <... close resumed>) = 0 [pid 574] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 573] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] <... futex resumed>) = 1 [pid 574] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 581] mkdir("./file0", 0777 [pid 574] <... open resumed>) = 4 [pid 574] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 573] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] <... futex resumed>) = 1 [pid 581] <... mkdir resumed>) = 0 [pid 574] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [ 32.644867][ T574] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 581] mount("/dev/loop0", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 573] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 573] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 573] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 573] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[602], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 602 [pid 573] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 602 attached [pid 602] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 602] open(".", O_RDONLY) = 5 [pid 602] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 573] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 602] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 573] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 602] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 602] <... futex resumed>) = 1 [pid 602] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 573] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... renameat2 resumed>) = 0 [pid 602] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 602] <... futex resumed>) = 1 [pid 602] open(".", O_RDONLY [pid 573] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] <... open resumed>) = 6 [pid 573] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 602] <... futex resumed>) = 1 [pid 602] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 573] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... symlinkat resumed>) = 0 [pid 602] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 602] <... futex resumed>) = 1 [pid 573] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 573] <... futex resumed>) = 0 [pid 573] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... ioctl resumed>) = 0 [pid 602] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 573] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 574] <... pwritev2 resumed>) = -1 EIO (Input/output error) [ 32.685853][ T581] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 602] <... renameat2 resumed>) = 0 [pid 602] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 602] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] exit_group(0 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 573] <... exit_group resumed>) = ? [pid 574] <... futex resumed>) = ? [pid 602] <... futex resumed>) = ? [pid 574] +++ exited with 0 +++ [pid 602] +++ exited with 0 +++ [pid 573] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=573, si_uid=0, si_status=0, si_utime=8, si_stime=12} --- [pid 307] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 307] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 307] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./5/binderfs") = 0 [pid 307] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 592] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 581] <... mount resumed>) = 0 [pid 581] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 581] chdir("./file0") = 0 [pid 581] ioctl(4, LOOP_CLR_FD [pid 587] <... write resumed>) = 20699119 [pid 587] munmap(0x7faaa718a000, 20699119) = 0 [pid 587] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 581] <... ioctl resumed>) = 0 [pid 581] close(4) = 0 [pid 581] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 581] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] ioctl(4, LOOP_SET_FD, 3 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = 0 [pid 579] <... futex resumed>) = 1 [pid 581] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 579] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 32.815841][ T581] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 581] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 579] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 579] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = 0 [pid 579] <... futex resumed>) = 1 [pid 581] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 579] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... ioctl resumed>) = 0 [pid 587] close(3) = 0 [pid 587] mkdir("./file0", 0777) = 0 [pid 587] mount("/dev/loop4", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 592] <... write resumed>) = 20699119 [pid 592] munmap(0x7faaa718a000, 20699119) = 0 [pid 592] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 592] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 592] close(3) = 0 [pid 592] mkdir("./file0", 0777) = 0 [pid 592] mount("/dev/loop5", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 579] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 579] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 579] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 579] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[606], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 606 [pid 579] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 606 attached [pid 606] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 606] open(".", O_RDONLY) = 5 [pid 606] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 606] <... futex resumed>) = 1 [pid 606] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0") = 0 [pid 606] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 606] <... futex resumed>) = 1 [pid 606] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 [pid 606] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 606] <... futex resumed>) = 1 [pid 606] renameat2(5, "./file0", 5, "./file0/file0", 0) = 0 [pid 606] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 606] <... futex resumed>) = 1 [pid 606] open(".", O_RDONLY) = 6 [pid 606] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 606] <... futex resumed>) = 1 [pid 606] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0") = 0 [pid 606] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 606] <... futex resumed>) = 1 [pid 606] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL]) = 0 [pid 606] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... futex resumed>) = 0 [pid 579] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 579] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 606] <... futex resumed>) = 1 [pid 606] renameat2(6, "./file0/file0", 5, "./file0", 0) = 0 [pid 606] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 579] <... futex resumed>) = 0 [pid 606] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 581] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 308] <... umount2 resumed>) = 0 [pid 581] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 581] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 579] exit_group(0) = ? [pid 606] <... futex resumed>) = ? [pid 606] +++ exited with 0 +++ [pid 581] <... futex resumed>) = ? [pid 581] +++ exited with 0 +++ [pid 579] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=579, si_uid=0, si_status=0, si_utime=4, si_stime=11} --- [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] lstat("./5/file0", [pid 305] <... restart_syscall resumed>) = 0 [pid 305] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 305] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./6/binderfs") = 0 [pid 305] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./5/file0") = 0 [pid 308] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./5") = 0 [pid 308] mkdir("./6", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557f65d0) = 613 [ 32.968790][ T592] F2FS-fs (loop5): Found nat_bits in checkpoint [ 32.984134][ T587] F2FS-fs (loop4): Found nat_bits in checkpoint ./strace-static-x86_64: Process 613 attached [pid 613] set_robust_list(0x5555557f65e0, 24) = 0 [pid 613] chdir("./6") = 0 [pid 613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 613] setpgid(0, 0) = 0 [pid 613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 613] write(3, "1000", 4) = 4 [pid 613] close(3) = 0 [pid 613] symlink("/dev/binderfs", "./binderfs") = 0 [pid 613] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 613] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 613] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[614], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 614 [pid 613] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 614 attached [pid 614] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 614] memfd_create("syzkaller", 0) = 3 [pid 614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 306] <... umount2 resumed>) = 0 [pid 306] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./5/file0") = 0 [pid 306] getdents64(3, [pid 587] <... mount resumed>) = 0 [pid 306] <... getdents64 resumed>0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 587] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 306] close(3 [pid 587] <... openat resumed>) = 3 [pid 306] <... close resumed>) = 0 [pid 587] chdir("./file0" [pid 306] rmdir("./5") = 0 [pid 587] <... chdir resumed>) = 0 [pid 306] mkdir("./6", 0777) = 0 [pid 587] ioctl(4, LOOP_CLR_FD [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 587] <... ioctl resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 587] close(4 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 592] <... mount resumed>) = 0 [pid 592] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 592] chdir("./file0") = 0 [pid 592] ioctl(4, LOOP_CLR_FD) = 0 [pid 592] close(4) = 0 [pid 592] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] <... futex resumed>) = 0 [pid 589] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 592] <... futex resumed>) = 1 [pid 592] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 592] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] <... futex resumed>) = 0 [pid 589] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 592] <... futex resumed>) = 1 [pid 592] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 306] close(3 [pid 587] <... close resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 587] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 587] <... futex resumed>) = 1 [pid 306] <... clone resumed>, child_tidptr=0x5555557f65d0) = 617 [pid 587] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 583] <... futex resumed>) = 0 [pid 587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 583] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... open resumed>) = 4 [pid 587] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 583] <... futex resumed>) = 0 [pid 587] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=3177984}], 1, 5120, RWF_HIPRI|RWF_DSYNC [pid 583] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 583] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 617 attached [pid 617] set_robust_list(0x5555557f65e0, 24) = 0 [pid 617] chdir("./6") = 0 [pid 617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 617] setpgid(0, 0) = 0 [pid 617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 617] write(3, "1000", 4) = 4 [pid 617] close(3) = 0 [pid 617] symlink("/dev/binderfs", "./binderfs") = 0 [pid 617] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaaf58a000 [pid 617] mprotect(0x7faaaf58b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 617] clone(child_stack=0x7faaaf5aa3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[618], tls=0x7faaaf5aa700, child_tidptr=0x7faaaf5aa9d0) = 618 [pid 617] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 33.076798][ T592] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 33.095902][ T587] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 617] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 618 attached [pid 618] set_robust_list(0x7faaaf5aa9e0, 24) = 0 [pid 618] memfd_create("syzkaller", 0) = 3 [pid 618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faaa718a000 [pid 589] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 589] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7faaa8527000 [pid 589] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 589] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[619], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 619 [pid 589] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 619 attached [pid 619] set_robust_list(0x7faaa85479e0, 24) = 0 [pid 619] open(".", O_RDONLY) = 5 [pid 619] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 589] <... futex resumed>) = 0 [pid 619] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 589] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... symlinkat resumed>) = 0 [pid 619] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 589] <... futex resumed>) = 0 [pid 619] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 589] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... mkdirat resumed>) = 0 [pid 619] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 589] <... futex resumed>) = 0 [pid 589] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 589] <... futex resumed>) = 0 [pid 589] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... renameat2 resumed>) = 0 [pid 619] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 589] <... futex resumed>) = 0 [pid 619] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 589] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 589] <... futex resumed>) = 0 [pid 619] open(".", O_RDONLY [pid 589] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... open resumed>) = 6 [pid 619] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 589] <... futex resumed>) = 0 [pid 583] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 619] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 589] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 589] <... futex resumed>) = 0 [pid 583] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 619] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 589] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 619] <... symlinkat resumed>) = 0 [pid 583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 619] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... mmap resumed>) = 0x7faaa8527000 [pid 619] <... futex resumed>) = 1 [pid 589] <... futex resumed>) = 0 [pid 583] mprotect(0x7faaa8528000, 131072, PROT_READ|PROT_WRITE [pid 619] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 589] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... mprotect resumed>) = 0 [pid 619] <... ioctl resumed>) = 0 [pid 589] <... futex resumed>) = 0 [pid 583] clone(child_stack=0x7faaa85473f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 619] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... futex resumed>) = 0 [pid 589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 583] <... clone resumed>, parent_tid=[620], tls=0x7faaa8547700, child_tidptr=0x7faaa85479d0) = 620 [pid 619] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 589] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 589] <... futex resumed>) = 0 [pid 583] <... futex resumed>) = 0 [pid 619] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 589] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... renameat2 resumed>) = 0 [pid 619] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 589] <... futex resumed>) = 0 [pid 619] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 592] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 620 attached ) = 0 [pid 589] exit_group(0 [pid 620] set_robust_list(0x7faaa85479e0, 24 [pid 619] <... futex resumed>) = ? [pid 589] <... exit_group resumed>) = ? [pid 619] +++ exited with 0 +++ [pid 620] <... set_robust_list resumed>) = 0 [pid 592] +++ exited with 0 +++ [pid 589] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=589, si_uid=0, si_status=0, si_utime=4, si_stime=15} --- [pid 620] open(".", O_RDONLY [pid 310] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 620] <... open resumed>) = 5 [pid 620] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 620] <... futex resumed>) = 1 [pid 583] <... futex resumed>) = 0 [pid 310] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 620] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 583] futex(0x7faaaf6887b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 3 [pid 620] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 583] <... futex resumed>) = 0 [pid 310] fstat(3, [pid 620] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 5, "./file0" [pid 583] futex(0x7faaaf6887bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 587] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 310] getdents64(3, [pid 620] <... symlinkat resumed>) = 0 [pid 587] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... getdents64 resumed>0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 620] futex(0x7faaaf6887bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 620] <... futex resumed>) = 1 [pid 587] <... futex resumed>) = 0 [pid 583] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 620] futex(0x7faaaf6887b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] mkdirat(5, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000 [pid 583] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] lstat("./6/binderfs", [pid 583] <... futex resumed>) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 587] <... mkdirat resumed>) = 0 [pid 583] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] unlink("./6/binderfs" [pid 587] <... futex resumed>) = 0 [pid 583] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] renameat2(5, "./file0", 5, "./file0/file0", 0 [pid 583] <... futex resumed>) = 0 [pid 587] <... renameat2 resumed>) = 0 [pid 583] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [pid 583] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] open(".", O_RDONLY [pid 583] <... futex resumed>) = 0 [pid 587] <... open resumed>) = 6 [pid 583] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [pid 583] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] symlinkat("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 6, "./file0" [pid 583] <... futex resumed>) = 0 [pid 587] <... symlinkat resumed>) = 0 [pid 583] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [pid 583] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] ioctl(5, FS_IOC_SETFLAGS, [FS_SYNC_FL] [pid 583] <... futex resumed>) = 0 [pid 587] <... ioctl resumed>) = 0 [pid 583] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [pid 583] futex(0x7faaaf6887a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] renameat2(6, "./file0/file0", 5, "./file0", 0 [pid 583] <... futex resumed>) = 0 [pid 583] futex(0x7faaaf6887ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... renameat2 resumed>) = 0 [pid 310] <... unlink resumed>) = 0 [pid 587] futex(0x7faaaf6887ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 583] <... futex resumed>) = 0 [pid 587] futex(0x7faaaf6887a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 583] exit_group(0 [pid 620] <... futex resumed>) = ? [pid 587] <... futex resumed>) = ? [pid 583] <... exit_group resumed>) = ? [pid 620] +++ exited with 0 +++ [pid 587] +++ exited with 0 +++ [pid 583] +++ exited with 0 +++ [pid 310] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=583, si_uid=0, si_status=0, si_utime=9, si_stime=15} --- [pid 309] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x5555557f7620 /* 4 entries */, 32768) = 112 [pid 309] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./5/binderfs") = 0 [pid 309] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... umount2 resumed>) = 0 [pid 307] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x5555557ff660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x5555557ff660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./5/file0") = 0 [pid 307] getdents64(3, 0x5555557f7620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./5") = 0 [pid 307] mkdir("./6", 0777) = 0 [ 33.303067][ T361] ------------[ cut here ]------------ [ 33.308571][ T361] kernel BUG at mm/filemap.c:1359! [ 33.356872][ T361] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 33.363005][ T361] CPU: 0 PID: 361 Comm: kworker/u4:3 Not tainted 5.4.225-syzkaller-00029-g6a5ec6cea0cd #0 [ 33.374126][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 33.384279][ T361] Workqueue: writeback wb_workfn (flush-7:5) [ 33.390429][ T361] RIP: 0010:end_page_writeback+0x19c/0x1a0 [ 33.396322][ T361] Code: 5d 41 5e 41 5f 5d e9 73 fa ff ff e8 8e fe e4 ff 49 ff cc e9 d1 fe ff ff e8 81 fe e4 ff 49 ff ce e9 52 ff ff ff e8 74 fe e4 ff <0f> 0b 66 90 55 41 57 41 56 41 55 41 54 53 41 89 d4 89 f3 49 89 fe [ 33.415920][ T361] RSP: 0018:ffff8881d29de950 EFLAGS: 00010293 [ 33.422053][ T361] RAX: ffffffff8180809c RBX: 0000000000000000 RCX: ffff8881d3708000 [ 33.430022][ T361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.438001][ T361] RBP: dffffc0000000000 R08: ffffffff81808017 R09: fffff94000f522a9 [ 33.446325][ T361] R10: fffff94000f522a9 R11: 1ffffd4000f522a8 R12: ffffea0007a91540 [ 33.454295][ T361] R13: ffffea0007a91548 R14: 1ffffd4000f522a9 R15: ffffea0007a91540 [ 33.462265][ T361] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.471195][ T361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.477818][ T361] CR2: 00007faaa80bf000 CR3: 00000001dc86e000 CR4: 00000000003406f0 [ 33.485788][ T361] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.493960][ T361] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.501922][ T361] Call Trace: [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 614] <... write resumed>) = 20699119 [pid 614] munmap(0x7faaa718a000, 20699119) = 0 [pid 614] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 618] <... write resumed>) = 20699119 [pid 618] munmap(0x7faaa718a000, 20699119) = 0 [ 33.505214][ T361] f2fs_write_end_io+0x5c7/0xae0 [ 33.510148][ T361] generic_make_request_checks+0x25f/0xf80 [ 33.516071][ T361] ? generic_make_request+0xe60/0xe60 [ 33.521439][ T361] ? check_preemption_disabled+0x154/0x330 [ 33.527360][ T361] ? stack_trace_snprint+0x170/0x170 [ 33.532642][ T361] ? __unwind_start+0x72f/0x8e0 [ 33.537835][ T361] generic_make_request+0xcf/0xe60 [ 33.542934][ T361] ? wb_writeback+0x429/0xcb0 [ 33.547606][ T361] ? wb_do_writeback+0x1f2/0xbd0 [ 33.552525][ T361] ? wb_workfn+0xf8/0x450 [ 33.556842][ T361] ? process_one_work+0x6ca/0xc40 [ 33.561877][ T361] ? worker_thread+0xae0/0x1440 [ 33.566726][ T361] ? kthread+0x2d8/0x360 [ 33.570950][ T361] ? ret_from_fork+0x1f/0x30 [ 33.575517][ T361] ? blk_attempt_plug_merge+0x310/0x310 [ 33.582268][ T361] submit_bio+0x142/0x640 [ 33.586576][ T361] ? direct_make_request+0x440/0x440 [ 33.591835][ T361] ? up_write+0xa6/0x270 [ 33.596166][ T361] ? __submit_bio+0x60d/0x9e0 [ 33.600818][ T361] ? f2fs_submit_merged_ipu_write+0x447/0x520 [ 33.606859][ T361] ? kmem_cache_free+0xa9/0x1d0 [ 33.611688][ T361] f2fs_submit_merged_ipu_write+0x4ac/0x520 [ 33.617585][ T361] f2fs_write_single_data_page+0x139d/0x19d0 [ 33.623642][ T361] ? f2fs_i_compr_blocks_update+0x150/0x150 [ 33.630370][ T361] ? wait_on_page_writeback+0x200/0x200 [ 33.635891][ T361] __f2fs_write_data_pages+0x15cb/0x2c20 [ 33.641583][ T361] ? page_file_mapping+0x130/0x130 [ 33.646688][ T361] ? __f2fs_commit_inmem_pages+0xc40/0xc40 [ 33.652470][ T361] ? f2fs_write_node_pages+0x420/0x990 [ 33.657903][ T361] ? f2fs_write_node_page+0x30/0x30 [ 33.663093][ T361] ? f2fs_balance_fs+0x18c/0x3e0 [ 33.668008][ T361] ? f2fs_commit_inmem_pages+0x100/0x100 [ 33.673890][ T361] ? f2fs_read_data_page+0x4b0/0x4b0 [ 33.679153][ T361] do_writepages+0x13a/0x280 [ 33.683823][ T361] ? __writepage+0x110/0x110 [ 33.688395][ T361] ? _raw_spin_lock+0xa3/0x1b0 [ 33.693222][ T361] ? _raw_spin_trylock_bh+0x190/0x190 [ 33.698573][ T361] ? _raw_spin_lock+0xa3/0x1b0 [ 33.703319][ T361] __writeback_single_inode+0xc5/0x840 [ 33.708765][ T361] ? inode_add_lru+0x5b/0x170 [ 33.713508][ T361] writeback_sb_inodes+0xa04/0x1890 [ 33.718709][ T361] ? queue_io+0x4d0/0x4d0 [ 33.723035][ T361] ? insert_work+0x276/0x330 [ 33.727617][ T361] ? queue_io+0x34c/0x4d0 [ 33.731925][ T361] wb_writeback+0x429/0xcb0 [ 33.736474][ T361] ? wb_io_lists_depopulated+0x170/0x170 [ 33.742101][ T361] ? vsnprintf+0x1cd0/0x1cd0 [ 33.746756][ T361] ? check_preemption_disabled+0x9e/0x330 [ 33.752570][ T361] ? widen_string+0x3a/0x330 [ 33.757149][ T361] ? vsnprintf+0x1bfd/0x1cd0 [ 33.761713][ T361] wb_do_writeback+0x1f2/0xbd0 [ 33.766453][ T361] ? wb_workfn+0x450/0x450 [ 33.770846][ T361] ? check_preemption_disabled+0x9e/0x330 [ 33.776563][ T361] ? check_preemption_disabled+0x9e/0x330 [ 33.782288][ T361] ? debug_smp_processor_id+0x20/0x20 [ 33.787906][ T361] ? set_worker_desc+0x158/0x1c0 [ 33.792846][ T361] ? switch_mm+0x100/0x100 [ 33.797242][ T361] ? work_busy+0x250/0x250 [ 33.801677][ T361] ? finish_task_switch+0x130/0x560 [ 33.806851][ T361] ? kthread_data+0x4d/0xc0 [ 33.811329][ T361] wb_workfn+0xf8/0x450 [ 33.815464][ T361] ? read_word_at_a_time+0xe/0x20 [ 33.820552][ T361] ? strscpy+0x90/0x220 [ 33.824685][ T361] process_one_work+0x6ca/0xc40 [ 33.829515][ T361] worker_thread+0xae0/0x1440 [ 33.834175][ T361] ? is_mmconf_reserved+0x420/0x420 [ 33.839348][ T361] kthread+0x2d8/0x360 [ 33.843391][ T361] ? worker_clr_flags+0x170/0x170 [ 33.848501][ T361] ? kthread_destroy_worker+0x280/0x280 [ 33.854108][ T361] ret_from_fork+0x1f/0x30 [pid 618] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 614] <... openat resumed>) = 4 [pid 307] <... openat resumed>) = 3 [pid 618] ioctl(4, LOOP_SET_FD, 3 [pid 614] ioctl(4, LOOP_SET_FD, 3 [pid 307] ioctl(3, LOOP_CLR_FD [pid 614] <... ioctl resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 614] close(3 [pid 307] close(3 [pid 614] <... close resumed>) = 0 [pid 614] mkdir("./file0", 0777) = 0 [pid 614] mount("/dev/loop3", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime," [pid 618] <... ioctl resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 618] close(3 [ 33.858495][ T361] Modules linked in: [ 33.863134][ T361] ---[ end trace b0fe203f8c269521 ]--- [ 33.868817][ T361] RIP: 0010:end_page_writeback+0x19c/0x1a0 [ 33.874637][ T361] Code: 5d 41 5e 41 5f 5d e9 73 fa ff ff e8 8e fe e4 ff 49 ff cc e9 d1 fe ff ff e8 81 fe e4 ff 49 ff ce e9 52 ff ff ff e8 74 fe e4 ff <0f> 0b 66 90 55 41 57 41 56 41 55 41 54 53 41 89 d4 89 f3 49 89 fe [ 33.894468][ T361] RSP: 0018:ffff8881d29de950 EFLAGS: 00010293 [ 33.901050][ T361] RAX: ffffffff8180809c RBX: 0000000000000000 RCX: ffff8881d3708000 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 618] <... close resumed>) = 0 [pid 618] mkdir("./file0", 0777) = 0 [pid 307] <... clone resumed>, child_tidptr=0x5555557f65d0) = 623 [pid 618] mount("/dev/loop1", "./file0", "f2fs", MS_SILENT, "inline_dentry,lazytime,"./strace-static-x86_64: Process 623 attached [pid 623] set_robust_list(0x5555557f65e0, 24) = 0 [pid 623] chdir("./6") = 0 [pid 623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 623] setpgid(0, 0) = 0 [ 33.909178][ T361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.917671][ T361] RBP: dffffc0000000000 R08: ffffffff81808017 R09: fffff94000f522a9 [ 33.926069][ T361] R10: fffff94000f522a9 R11: 1ffffd4000f522a8 R12: ffffea0007a91540 [ 33.934444][ T361] R13: ffffea0007a91548 R14: 1ffffd4000f522a9 R15: ffffea0007a91540 [ 33.942893][ T361] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.952736][ T361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [pid 623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 623] write(3, "1000", 4) = 4 [pid 623] close(3) = 0 [ 33.959677][ T361] CR2: 00007faaaf68c948 CR3: 00000001d6aba000 CR4: 00000000003406f0 [ 33.968094][ T361] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.978014][ T361] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.986298][ T361] Kernel panic - not syncing: Fatal exception [ 33.992512][ T361] Kernel Offset: disabled [ 33.996826][ T361] Rebooting in 86400 seconds..