./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2114938351 <...> Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. execve("./syz-executor2114938351", ["./syz-executor2114938351"], 0x7ffdac4258f0 /* 10 vars */) = 0 brk(NULL) = 0x5555568d8000 brk(0x5555568d8d40) = 0x5555568d8d40 arch_prctl(ARCH_SET_FS, 0x5555568d83c0) = 0 set_tid_address(0x5555568d8690) = 287 set_robust_list(0x5555568d86a0, 24) = 0 rseq(0x5555568d8ce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2114938351", 4096) = 28 getrandom("\xc0\x07\x6a\x3c\xcb\x9c\xe1\x86", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555568d8d40 brk(0x5555568f9d40) = 0x5555568f9d40 brk(0x5555568fa000) = 0x5555568fa000 mprotect(0x7f39235a7000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 288 ./strace-static-x86_64: Process 288 attached [pid 287] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 288] set_robust_list(0x5555568d86a0, 24) = 0 ./strace-static-x86_64: Process 289 attached [pid 287] <... clone resumed>, child_tidptr=0x5555568d8690) = 289 [pid 289] set_robust_list(0x5555568d86a0, 24 [pid 287] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... set_robust_list resumed>) = 0 [pid 289] mkdir("./syzkaller.anzklt", 0700 [pid 287] <... clone resumed>, child_tidptr=0x5555568d8690) = 290 [pid 288] mkdir("./syzkaller.PsQ28A", 0700 [pid 287] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 291 ./strace-static-x86_64: Process 291 attached ./strace-static-x86_64: Process 290 attached [pid 287] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] set_robust_list(0x5555568d86a0, 24./strace-static-x86_64: Process 292 attached [pid 287] <... clone resumed>, child_tidptr=0x5555568d8690) = 292 [pid 291] set_robust_list(0x5555568d86a0, 24 [pid 290] <... set_robust_list resumed>) = 0 [pid 291] <... set_robust_list resumed>) = 0 [pid 290] mkdir("./syzkaller.bjBxBB", 0700 [pid 288] <... mkdir resumed>) = 0 [pid 288] chmod("./syzkaller.PsQ28A", 0777) = 0 [pid 288] chdir("./syzkaller.PsQ28A") = 0 [pid 290] <... mkdir resumed>) = 0 [pid 288] mkdir("./0", 0777 [pid 290] chmod("./syzkaller.bjBxBB", 0777 [pid 292] set_robust_list(0x5555568d86a0, 24 [pid 291] mkdir("./syzkaller.1oRTh5", 0700 [pid 290] <... chmod resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 288] <... mkdir resumed>) = 0 [pid 290] chdir("./syzkaller.bjBxBB") = 0 [pid 290] mkdir("./0", 0777 [pid 288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 290] <... mkdir resumed>) = 0 [pid 288] <... openat resumed>) = 3 [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 293 [pid 291] <... mkdir resumed>) = 0 [pid 291] chmod("./syzkaller.1oRTh5", 0777) = 0 [pid 291] chdir("./syzkaller.1oRTh5") = 0 [pid 291] mkdir("./0", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 294 [pid 292] <... set_robust_list resumed>) = 0 [pid 292] mkdir("./syzkaller.vem11q", 0700 [pid 289] chmod("./syzkaller.anzklt", 0777) = 0 [pid 289] chdir("./syzkaller.anzklt") = 0 [pid 289] mkdir("./0", 0777) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 292] chmod("./syzkaller.vem11q", 0777) = 0 [pid 289] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 292] chdir("./syzkaller.vem11q") = 0 [pid 289] <... openat resumed>) = 3 [pid 289] ioctl(3, LOOP_CLR_FD [pid 292] mkdir("./0", 0777 [pid 289] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 289] close(3) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... clone resumed>, child_tidptr=0x5555568d8690) = 295 [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 296 ./strace-static-x86_64: Process 296 attached [pid 296] set_robust_list(0x5555568d86a0, 24) = 0 [pid 296] chdir("./0") = 0 [pid 296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 296] setpgid(0, 0) = 0 [pid 296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 296] write(3, "1000", 4) = 4 [pid 296] close(3) = 0 [pid 296] symlink("/dev/binderfs", "./binderfs" [pid 288] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] <... symlink resumed>) = 0 [pid 296] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 296] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 296] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[297]}, 88) = 297 [pid 296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 296] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 297 attached [pid 297] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 297] memfd_create("syzkaller", 0) = 3 [pid 297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 288] close(3) = 0 ./strace-static-x86_64: Process 293 attached [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 21.477582][ T24] audit: type=1400 audit(1713671022.470:66): avc: denied { execmem } for pid=287 comm="syz-executor211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.488002][ T24] audit: type=1400 audit(1713671022.480:67): avc: denied { read write } for pid=288 comm="syz-executor211" name="loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 293] set_robust_list(0x5555568d86a0, 24./strace-static-x86_64: Process 294 attached ) = 0 [pid 297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 297] munmap(0x7f391b0c1000, 138412032) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 297] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 297] close(3) = 0 [pid 297] close(4./strace-static-x86_64: Process 295 attached [pid 295] set_robust_list(0x5555568d86a0, 24) = 0 [pid 295] chdir("./0") = 0 [pid 295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 295] setpgid(0, 0) = 0 [pid 295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 295] write(3, "1000", 4) = 4 [pid 295] close(3) = 0 [pid 295] symlink("/dev/binderfs", "./binderfs") = 0 [pid 295] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 295] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 295] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[300]}, 88) = 300 [pid 295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 295] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 300 attached [pid 300] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 300] memfd_create("syzkaller", 0) = 3 [pid 300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 288] <... clone resumed>, child_tidptr=0x5555568d8690) = 298 [pid 294] set_robust_list(0x5555568d86a0, 24 [pid 293] chdir("./0") = 0 [pid 294] <... set_robust_list resumed>) = 0 [pid 293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 294] chdir("./0" [pid 293] <... prctl resumed>) = 0 [pid 294] <... chdir resumed>) = 0 [pid 293] setpgid(0, 0) = 0 [pid 294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 294] <... prctl resumed>) = 0 [pid 293] <... openat resumed>) = 3 [pid 294] setpgid(0, 0) = 0 [pid 293] write(3, "1000", 4) = 4 [pid 294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 293] close(3 [pid 294] <... openat resumed>) = 3 [pid 293] <... close resumed>) = 0 [pid 294] write(3, "1000", 4) = 4 [pid 293] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 298 attached ) = 0 [pid 294] close(3 [pid 293] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] set_robust_list(0x5555568d86a0, 24 [pid 294] <... close resumed>) = 0 [pid 300] <... write resumed>) = 1048576 [pid 293] <... futex resumed>) = 0 [pid 298] <... set_robust_list resumed>) = 0 [pid 298] chdir("./0") = 0 [pid 298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 298] setpgid(0, 0) = 0 [pid 298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 298] write(3, "1000", 4) = 4 [pid 298] close(3) = 0 [pid 298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 298] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 298] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 298] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[303]}, 88) = 303 [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 294] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 294] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 294] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 294] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 294] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 294] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[304]}, 88) = 304 [pid 294] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 294] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 294] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 300] munmap(0x7f391b0c1000, 138412032./strace-static-x86_64: Process 304 attached ./strace-static-x86_64: Process 303 attached ) = 0 [pid 293] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 303] set_robust_list(0x7f39234e19a0, 24 [pid 300] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 293] <... rt_sigaction resumed>NULL, 8) = 0 [pid 293] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 303] <... set_robust_list resumed>) = 0 [pid 293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 303] rt_sigprocmask(SIG_SETMASK, [], [pid 293] <... mmap resumed>) = 0x7f39234c1000 [pid 304] set_robust_list(0x7f39234e19a0, 24 [pid 303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 293] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 304] <... set_robust_list resumed>) = 0 [pid 293] <... mprotect resumed>) = 0 [pid 304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 293] rt_sigprocmask(SIG_BLOCK, ~[], [pid 304] memfd_create("syzkaller", 0 [pid 303] memfd_create("syzkaller", 0 [pid 293] <... rt_sigprocmask resumed>[], 8) = 0 [pid 304] <... memfd_create resumed>) = 3 [pid 293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 303] <... memfd_create resumed>) = 3 [pid 304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 293] <... clone3 resumed> => {parent_tid=[305]}, 88) = 305 [pid 303] <... mmap resumed>) = 0x7f391b0c1000 [pid 293] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 293] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] <... mmap resumed>) = 0x7f391b0c1000 [pid 293] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 305 attached [pid 305] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] memfd_create("syzkaller", 0) = 3 [pid 305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 303] <... write resumed>) = 1048576 [pid 305] <... write resumed>) = 1048576 [pid 305] munmap(0x7f391b0c1000, 138412032) = 0 [pid 303] munmap(0x7f391b0c1000, 138412032 [pid 305] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 303] <... munmap resumed>) = 0 [pid 303] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 304] <... write resumed>) = 1048576 [pid 304] munmap(0x7f391b0c1000, 138412032 [pid 297] <... close resumed>) = 0 [pid 304] <... munmap resumed>) = 0 [pid 304] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 297] mkdir("./file0", 0777) = 0 [ 21.510440][ T24] audit: type=1400 audit(1713671022.480:68): avc: denied { open } for pid=288 comm="syz-executor211" path="/dev/loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.541387][ T24] audit: type=1400 audit(1713671022.480:69): avc: denied { ioctl } for pid=290 comm="syz-executor211" path="/dev/loop2" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 297] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 305] <... openat resumed>) = 4 [pid 303] <... openat resumed>) = 4 [pid 300] <... openat resumed>) = 4 [pid 305] ioctl(4, LOOP_SET_FD, 3 [pid 303] ioctl(4, LOOP_SET_FD, 3 [pid 300] ioctl(4, LOOP_SET_FD, 3 [pid 305] <... ioctl resumed>) = 0 [pid 305] close(3) = 0 [pid 305] close(4 [pid 303] <... ioctl resumed>) = 0 [pid 303] close(3) = 0 [ 21.590270][ T24] audit: type=1400 audit(1713671022.580:70): avc: denied { mounton } for pid=296 comm="syz-executor211" path="/root/syzkaller.vem11q/0/file0" dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [pid 303] close(4 [pid 304] <... openat resumed>) = 4 [pid 300] <... ioctl resumed>) = 0 [pid 304] ioctl(4, LOOP_SET_FD, 3 [pid 300] close(3) = 0 [pid 300] close(4 [pid 304] <... ioctl resumed>) = 0 [pid 297] <... mount resumed>) = 0 [pid 304] close(3) = 0 [pid 304] close(4 [pid 297] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 297] chdir("./file0") = 0 [pid 297] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 305] <... close resumed>) = 0 [pid 305] mkdir("./file0", 0777) = 0 [ 21.644208][ T297] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 21.653835][ T24] audit: type=1400 audit(1713671022.660:71): avc: denied { mount } for pid=296 comm="syz-executor211" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [pid 305] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 303] <... close resumed>) = 0 [pid 303] mkdir("./file0", 0777) = 0 [pid 303] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 300] <... close resumed>) = 0 [pid 300] mkdir("./file0", 0777) = 0 [pid 300] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 304] <... close resumed>) = 0 [pid 304] mkdir("./file0", 0777) = 0 [pid 304] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 297] <... openat resumed>) = 4 [pid 297] ioctl(4, LOOP_CLR_FD) = 0 [pid 297] close(4) = 0 [pid 297] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 296] <... futex resumed>) = 0 [pid 297] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... futex resumed>) = 0 [pid 297] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 296] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... open resumed>) = 4 [pid 297] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 296] <... futex resumed>) = 0 [pid 297] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... futex resumed>) = 0 [pid 297] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 296] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... write resumed>) = 9 [pid 297] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 296] <... futex resumed>) = 0 [pid 297] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... futex resumed>) = 0 [pid 297] creat("./bus", 000 [pid 296] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... creat resumed>) = 5 [pid 297] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 296] <... futex resumed>) = 0 [pid 297] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... futex resumed>) = 0 [pid 297] creat("./bus", 000 [pid 296] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... creat resumed>) = 6 [pid 297] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 296] <... futex resumed>) = 0 [pid 297] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... futex resumed>) = 0 [pid 297] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 296] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... open resumed>) = 7 [pid 297] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 296] <... futex resumed>) = 0 [pid 297] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... futex resumed>) = 0 [pid 297] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 296] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... mmap resumed>) = 0x20000000 [pid 297] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 296] <... futex resumed>) = 0 [pid 297] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... futex resumed>) = 0 [ 21.867822][ T24] audit: type=1400 audit(1713671022.860:72): avc: denied { write } for pid=296 comm="syz-executor211" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.876406][ T305] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 21.905243][ T300] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 305] <... mount resumed>) = 0 [pid 300] <... mount resumed>) = 0 [pid 297] ftruncate(6, 31 [pid 296] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 297] <... ftruncate resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 297] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] chdir("./file0" [pid 297] <... futex resumed>) = 1 [pid 296] <... futex resumed>) = 0 [pid 300] <... chdir resumed>) = 0 [pid 297] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... futex resumed>) = 0 [pid 305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 300] <... openat resumed>) = 4 [pid 296] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] ioctl(4, LOOP_CLR_FD [pid 296] <... futex resumed>) = 0 [pid 300] <... ioctl resumed>) = 0 [pid 296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] close(4) = 0 [pid 300] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 295] <... futex resumed>) = 0 [pid 300] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 295] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... open resumed>) = 4 [pid 295] <... futex resumed>) = 0 [pid 300] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 0 [pid 295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 295] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... write resumed>) = 9 [pid 295] <... futex resumed>) = 0 [pid 300] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 0 [pid 295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] creat("./bus", 000 [pid 295] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... creat resumed>) = 5 [pid 295] <... futex resumed>) = 0 [pid 300] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 0 [pid 295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] creat("./bus", 000 [pid 295] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... creat resumed>) = 6 [pid 295] <... futex resumed>) = 0 [pid 300] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 0 [pid 295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 295] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... open resumed>) = 7 [pid 295] <... futex resumed>) = 0 [pid 300] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 0 [pid 295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 295] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... mmap resumed>) = 0x20000000 [pid 295] <... futex resumed>) = 0 [pid 300] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 0 [pid 295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] ftruncate(6, 31 [pid 295] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... ftruncate resumed>) = 0 [pid 295] <... futex resumed>) = 0 [pid 300] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 0 [pid 295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] <... openat resumed>) = 3 [pid 295] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] chdir("./file0") = 0 [pid 305] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 305] ioctl(4, LOOP_CLR_FD) = 0 [pid 305] close(4) = 0 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 305] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 293] <... futex resumed>) = 0 [pid 293] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 297] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 296] <... mmap resumed>) = 0x7f39234a0000 [pid 295] <... mmap resumed>) = 0x7f39234a0000 [pid 305] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 303] <... mount resumed>) = 0 [pid 296] read(536871168, [pid 295] read(536871168, [pid 305] <... open resumed>) = 4 [pid 305] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 293] <... futex resumed>) = 0 [pid 305] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 293] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... write resumed>) = 9 [pid 300] +++ killed by SIGBUS +++ [pid 295] +++ killed by SIGBUS +++ [pid 293] <... futex resumed>) = 0 [pid 305] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 0 [pid 303] <... openat resumed>) = 3 [pid 297] +++ killed by SIGBUS +++ [pid 296] +++ killed by SIGBUS +++ [pid 293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 293] <... futex resumed>) = 0 [pid 305] creat("./bus", 000 [pid 303] chdir("./file0" [pid 293] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=296, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=295, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 305] <... creat resumed>) = 5 [pid 305] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 293] <... futex resumed>) = 0 [pid 305] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 293] <... futex resumed>) = 0 [pid 305] creat("./bus", 000 [pid 293] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... creat resumed>) = 6 [pid 305] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 293] <... futex resumed>) = 0 [pid 305] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 293] <... futex resumed>) = 0 [pid 305] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 293] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... open resumed>) = 7 [pid 303] <... chdir resumed>) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 305] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 303] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 293] <... futex resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 305] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... openat resumed>) = 4 [pid 293] <... futex resumed>) = 0 [pid 305] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 293] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... mmap resumed>) = 0x20000000 [pid 303] ioctl(4, LOOP_CLR_FD [pid 292] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... ioctl resumed>) = 0 [pid 305] <... futex resumed>) = 1 [pid 293] <... futex resumed>) = 0 [pid 303] close(4 [pid 292] <... openat resumed>) = 3 [ 21.911105][ T304] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 21.915709][ T297] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.928171][ T303] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 21.941980][ T300] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 289] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... mount resumed>) = 0 [pid 303] <... close resumed>) = 0 [pid 293] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] newfstatat(3, "", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 293] <... futex resumed>) = 0 [pid 305] ftruncate(6, 31 [pid 293] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... ftruncate resumed>) = 0 [pid 305] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 293] <... futex resumed>) = 0 [pid 305] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 293] <... futex resumed>) = 0 [pid 304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 303] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 304] <... openat resumed>) = 3 [pid 303] <... futex resumed>) = 1 [pid 298] <... futex resumed>) = 0 [pid 293] <... futex resumed>) = 0 [pid 292] getdents64(3, [pid 289] <... openat resumed>) = 3 [pid 304] chdir("./file0" [pid 303] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 292] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 289] newfstatat(3, "", [pid 304] <... chdir resumed>) = 0 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... futex resumed>) = 0 [pid 292] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 304] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 21.974258][ T24] audit: type=1400 audit(1713671022.860:73): avc: denied { add_name } for pid=296 comm="syz-executor211" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.977465][ T305] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 303] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 298] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] getdents64(3, [pid 304] <... openat resumed>) = 4 [pid 303] <... open resumed>) = 4 [pid 292] newfstatat(AT_FDCWD, "./0/binderfs", [pid 289] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 304] ioctl(4, LOOP_CLR_FD [pid 303] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... ioctl resumed>) = 0 [pid 303] <... futex resumed>) = 1 [pid 298] <... futex resumed>) = 0 [pid 292] unlink("./0/binderfs" [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] close(4 [pid 303] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... unlink resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./0/binderfs", [pid 304] <... close resumed>) = 0 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... futex resumed>) = 0 [pid 292] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 298] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 289] unlink("./0/binderfs" [pid 304] <... futex resumed>) = 1 [pid 303] <... write resumed>) = 9 [pid 294] <... futex resumed>) = 0 [pid 289] <... unlink resumed>) = 0 [pid 304] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 1 [pid 298] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 0 [pid 304] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 303] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... open resumed>) = 4 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... futex resumed>) = 0 [pid 304] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] creat("./bus", 000 [pid 298] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... futex resumed>) = 1 [pid 303] <... creat resumed>) = 5 [pid 294] <... futex resumed>) = 0 [pid 304] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 1 [pid 298] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 0 [pid 304] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 303] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... write resumed>) = 9 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... futex resumed>) = 0 [pid 304] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] creat("./bus", 000 [pid 298] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... futex resumed>) = 1 [pid 303] <... creat resumed>) = 6 [pid 294] <... futex resumed>) = 0 [pid 304] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 1 [pid 298] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 0 [pid 304] creat("./bus", 000 [pid 303] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... creat resumed>) = 5 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... futex resumed>) = 0 [pid 304] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 298] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... futex resumed>) = 1 [pid 303] <... open resumed>) = 7 [pid 294] <... futex resumed>) = 0 [pid 304] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 1 [pid 298] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 0 [pid 304] creat("./bus", 000 [pid 303] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... creat resumed>) = 6 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... futex resumed>) = 0 [pid 304] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 298] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 304] <... futex resumed>) = 1 [pid 303] <... mmap resumed>) = 0x20000000 [pid 294] <... futex resumed>) = 0 [pid 293] <... mmap resumed>) = 0 [pid 304] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 1 [pid 298] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 0 [pid 304] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 303] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... open resumed>) = 7 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... futex resumed>) = 0 [pid 304] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] ftruncate(6, 31 [pid 298] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... futex resumed>) = 1 [pid 303] <... ftruncate resumed>) = 0 [pid 294] <... futex resumed>) = 0 [pid 305] +++ killed by SIGBUS +++ [pid 293] +++ killed by SIGBUS +++ [pid 304] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=293, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 1 [pid 298] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 0 [pid 304] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 303] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... mmap resumed>) = 0x20000000 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... futex resumed>) = 0 [pid 304] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 304] <... futex resumed>) = 1 [pid 304] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./0/binderfs") = 0 [pid 290] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] <... futex resumed>) = 0 [ 21.994838][ T24] audit: type=1400 audit(1713671022.860:74): avc: denied { create } for pid=296 comm="syz-executor211" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 22.029553][ T24] audit: type=1400 audit(1713671022.890:75): avc: denied { read write open } for pid=296 comm="syz-executor211" path="/root/syzkaller.vem11q/0/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [pid 294] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 1 [pid 304] ftruncate(6, 31 [pid 294] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... ftruncate resumed>) = 0 [pid 304] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 294] <... futex resumed>) = 0 [pid 304] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 294] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 294] <... futex resumed>) = 0 [pid 303] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 298] <... mmap resumed>) = ? [pid 303] +++ killed by SIGBUS +++ [pid 298] +++ killed by SIGBUS +++ [pid 294] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=298, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 288] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 288] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 288] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./0/binderfs") = 0 [pid 288] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] <... mmap resumed>) = 0x7f39234a0000 [pid 294] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE [pid 304] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 294] <... mprotect resumed>) = 10 [pid 304] +++ killed by SIGBUS +++ [pid 294] +++ killed by SIGBUS +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=294, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 291] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./0/binderfs") = 0 [pid 291] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./0/file0") = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./0") = 0 [pid 292] mkdir("./1", 0777) = 0 [ 22.062196][ T303] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.066001][ T304] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 289] <... umount2 resumed>) = 0 [pid 289] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 289] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 289] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 289] close(4) = 0 [pid 289] rmdir("./0/file0") = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./0") = 0 [pid 289] mkdir("./1", 0777) = 0 [pid 289] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 292] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 288] <... umount2 resumed>) = 0 [pid 292] ioctl(3, LOOP_CLR_FD [pid 291] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] ioctl(3, LOOP_CLR_FD [pid 288] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] close(3 [pid 291] newfstatat(AT_FDCWD, "./0/file0", [pid 289] close(3 [pid 288] newfstatat(AT_FDCWD, "./0/file0", [pid 292] <... close resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 324 [pid 290] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./0/file0") = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./0" [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] mkdir("./1", 0777 [pid 289] <... close resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 325 ./strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x5555568d86a0, 24) = 0 [pid 324] chdir("./1") = 0 [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 324] setpgid(0, 0) = 0 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 324] write(3, "1000", 4) = 4 [pid 324] close(3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 288] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 324] <... close resumed>) = 0 [pid 324] symlink("/dev/binderfs", "./binderfs") = 0 [pid 324] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 324] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 291] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 324] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 288] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... openat resumed>) = 4 [pid 289] <... clone resumed>, child_tidptr=0x5555568d8690) = 326 [pid 291] newfstatat(4, "", [pid 288] <... openat resumed>) = 4 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] newfstatat(4, "", [pid 291] getdents64(4, [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 288] getdents64(4, [pid 291] getdents64(4, [pid 324] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 288] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 291] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 288] getdents64(4, [pid 291] close(4 [pid 288] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 291] <... close resumed>) = 0 [pid 288] close(4 [pid 291] rmdir("./0/file0" [pid 288] <... close resumed>) = 0 [pid 324] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 291] <... rmdir resumed>) = 0 [pid 288] rmdir("./0/file0" [pid 324] <... clone3 resumed> => {parent_tid=[327]}, 88) = 327 [pid 291] getdents64(3, [pid 324] rt_sigprocmask(SIG_SETMASK, [], [pid 291] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 288] <... rmdir resumed>) = 0 [pid 324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 291] close(3 [pid 288] getdents64(3, [pid 324] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... close resumed>) = 0 [pid 288] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 291] rmdir("./0" [pid 288] close(3 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 291] <... rmdir resumed>) = 0 [pid 291] mkdir("./1", 0777 [pid 288] <... close resumed>) = 0 ./strace-static-x86_64: Process 326 attached [pid 291] <... mkdir resumed>) = 0 [pid 288] rmdir("./0" [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 326] set_robust_list(0x5555568d86a0, 24 [pid 288] <... rmdir resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 288] mkdir("./1", 0777 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 288] <... mkdir resumed>) = 0 [pid 291] close(3 [pid 326] <... set_robust_list resumed>) = 0 [pid 288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 326] chdir("./1" [pid 291] <... close resumed>) = 0 [pid 288] <... openat resumed>) = 3 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 288] ioctl(3, LOOP_CLR_FD [pid 326] <... chdir resumed>) = 0 [pid 326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 326] setpgid(0, 0 [pid 288] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 291] <... clone resumed>, child_tidptr=0x5555568d8690) = 328 [pid 288] close(3 [pid 326] <... setpgid resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 326] <... openat resumed>) = 3 [pid 326] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 325 attached [pid 326] close(3 [pid 288] <... clone resumed>, child_tidptr=0x5555568d8690) = 329 [pid 326] <... close resumed>) = 0 [pid 326] symlink("/dev/binderfs", "./binderfs") = 0 [pid 325] set_robust_list(0x5555568d86a0, 24) = 0 [pid 326] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] chdir("./1" [pid 326] <... futex resumed>) = 0 [pid 326] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 325] <... chdir resumed>) = 0 [pid 326] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 328 attached [pid 326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 325] setpgid(0, 0 [pid 328] set_robust_list(0x5555568d86a0, 24 [pid 326] <... mmap resumed>) = 0x7f39234c1000 [pid 325] <... setpgid resumed>) = 0 [pid 328] <... set_robust_list resumed>) = 0 [pid 326] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 328] chdir("./1" [pid 326] <... mprotect resumed>) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 329 attached ./strace-static-x86_64: Process 327 attached [pid 328] <... chdir resumed>) = 0 [pid 326] rt_sigprocmask(SIG_BLOCK, ~[], [pid 325] <... openat resumed>) = 3 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 327] set_robust_list(0x7f39234e19a0, 24 [pid 326] <... rt_sigprocmask resumed>[], 8) = 0 [pid 325] write(3, "1000", 4 [pid 329] set_robust_list(0x5555568d86a0, 24 [pid 328] <... prctl resumed>) = 0 [pid 327] <... set_robust_list resumed>) = 0 [pid 326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 325] <... write resumed>) = 4 [pid 328] setpgid(0, 0 [pid 325] close(3 [pid 329] <... set_robust_list resumed>) = 0 [pid 328] <... setpgid resumed>) = 0 [pid 327] rt_sigprocmask(SIG_SETMASK, [], [pid 326] <... clone3 resumed> => {parent_tid=[330]}, 88) = 330 [pid 325] <... close resumed>) = 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 326] rt_sigprocmask(SIG_SETMASK, [], [pid 329] chdir("./1" [pid 328] <... openat resumed>) = 3 [pid 327] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 326] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 325] symlink("/dev/binderfs", "./binderfs" [pid 329] <... chdir resumed>) = 0 [pid 328] write(3, "1000", 4 [pid 327] memfd_create("syzkaller", 0 [pid 326] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... write resumed>) = 4 [pid 326] <... futex resumed>) = 0 [pid 325] <... symlink resumed>) = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 327] <... memfd_create resumed>) = 3 [pid 328] close(3 [pid 326] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 325] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... prctl resumed>) = 0 [pid 328] <... close resumed>) = 0 [pid 327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 325] <... futex resumed>) = 0 [pid 329] setpgid(0, 0) = 0 [pid 328] symlink("/dev/binderfs", "./binderfs" [pid 327] <... mmap resumed>) = 0x7f391b0c1000 [pid 325] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 328] <... symlink resumed>) = 0 [pid 328] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 328] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 328] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 328] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0}./strace-static-x86_64: Process 330 attached => {parent_tid=[331]}, 88) = 331 [pid 330] set_robust_list(0x7f39234e19a0, 24 [pid 328] rt_sigprocmask(SIG_SETMASK, [], [pid 325] <... rt_sigaction resumed>NULL, 8) = 0 [pid 330] <... set_robust_list resumed>) = 0 [pid 329] <... openat resumed>) = 3 [pid 328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 325] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 330] rt_sigprocmask(SIG_SETMASK, [], [pid 328] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 329] write(3, "1000", 4 [pid 330] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 328] <... futex resumed>) = 0 [pid 325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 330] memfd_create("syzkaller", 0 [pid 328] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 330] <... memfd_create resumed>) = 3 [pid 329] <... write resumed>) = 4 [pid 325] <... mmap resumed>) = 0x7f39234c1000 [pid 330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 329] close(3 [pid 325] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 330] <... mmap resumed>) = 0x7f391b0c1000 [pid 329] <... close resumed>) = 0 [pid 325] <... mprotect resumed>) = 0 [pid 329] symlink("/dev/binderfs", "./binderfs" [pid 327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0}./strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 325] <... clone3 resumed> => {parent_tid=[332]}, 88) = 332 [pid 329] <... symlink resumed>) = 0 [pid 325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] memfd_create("syzkaller", 0 [pid 329] <... futex resumed>) = 0 [pid 325] <... futex resumed>) = 0 [pid 331] <... memfd_create resumed>) = 3 [pid 329] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 325] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 329] <... rt_sigaction resumed>NULL, 8) = 0 [pid 331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 331] <... mmap resumed>) = 0x7f391b0c1000 [pid 329] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 332 attached [pid 329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 332] set_robust_list(0x7f39234e19a0, 24 [pid 330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 329] <... mmap resumed>) = 0x7f39234c1000 [pid 327] <... write resumed>) = 1048576 [pid 332] <... set_robust_list resumed>) = 0 [pid 331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 329] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 327] munmap(0x7f391b0c1000, 138412032 [pid 332] rt_sigprocmask(SIG_SETMASK, [], [pid 329] <... mprotect resumed>) = 0 [pid 332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 327] <... munmap resumed>) = 0 [pid 332] memfd_create("syzkaller", 0 [pid 329] rt_sigprocmask(SIG_BLOCK, ~[], [pid 327] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 332] <... memfd_create resumed>) = 3 [pid 329] <... rt_sigprocmask resumed>[], 8) = 0 [pid 332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 327] <... openat resumed>) = 4 [pid 332] <... mmap resumed>) = 0x7f391b0c1000 [pid 327] ioctl(4, LOOP_SET_FD, 3 [pid 331] <... write resumed>) = 1048576 [pid 331] munmap(0x7f391b0c1000, 138412032) = 0 [pid 331] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 331] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 333 attached [pid 333] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 333] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 331] <... ioctl resumed>) = 0 [pid 329] <... clone3 resumed> => {parent_tid=[333]}, 88) = 333 [pid 331] close(3) = 0 [pid 331] close(4) = 0 [pid 331] mkdir("./file0", 0777 [pid 329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = 1 [pid 329] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 333] memfd_create("syzkaller", 0 [pid 331] <... mkdir resumed>) = 0 [pid 331] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 333] <... memfd_create resumed>) = 3 [pid 332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 327] <... ioctl resumed>) = 0 [pid 327] close(3) = 0 [pid 327] close(4) = 0 [pid 327] mkdir("./file0", 0777) = 0 [pid 327] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 330] <... write resumed>) = 1048576 [pid 330] munmap(0x7f391b0c1000, 138412032) = 0 [pid 330] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 330] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 330] close(3) = 0 [pid 330] close(4 [pid 333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 332] <... write resumed>) = 1048576 [pid 332] munmap(0x7f391b0c1000, 138412032) = 0 [pid 332] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 332] ioctl(4, LOOP_SET_FD, 3 [pid 333] <... write resumed>) = 1048576 [pid 332] <... ioctl resumed>) = 0 [pid 332] close(3) = 0 [pid 332] close(4 [pid 333] munmap(0x7f391b0c1000, 138412032) = 0 [pid 333] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 331] <... mount resumed>) = 0 [pid 331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 331] chdir("./file0") = 0 [pid 331] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 327] <... mount resumed>) = 0 [pid 327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 327] chdir("./file0") = 0 [pid 327] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 332] <... close resumed>) = 0 [pid 330] <... close resumed>) = 0 [pid 333] <... openat resumed>) = 4 [pid 331] <... openat resumed>) = 4 [pid 327] <... openat resumed>) = 4 [pid 331] ioctl(4, LOOP_CLR_FD) = 0 [pid 327] ioctl(4, LOOP_CLR_FD [pid 331] close(4) = 0 [pid 327] <... ioctl resumed>) = 0 [pid 331] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 327] close(4 [pid 331] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... futex resumed>) = 0 [pid 327] <... close resumed>) = 0 [pid 331] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 328] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... open resumed>) = 4 [pid 327] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 327] <... futex resumed>) = 1 [pid 324] <... futex resumed>) = 0 [pid 331] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 324] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = 0 [pid 331] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 328] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] ioctl(4, LOOP_SET_FD, 3 [pid 332] mkdir("./file0", 0777 [pid 331] <... write resumed>) = 9 [pid 330] mkdir("./file0", 0777 [pid 327] <... open resumed>) = 4 [pid 331] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 327] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... futex resumed>) = 0 [pid 327] <... futex resumed>) = 1 [pid 324] <... futex resumed>) = 0 [pid 331] creat("./bus", 000 [pid 328] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 324] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... creat resumed>) = 5 [pid 324] <... futex resumed>) = 0 [pid 331] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 328] <... futex resumed>) = 0 [pid 327] <... write resumed>) = 9 [pid 331] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... futex resumed>) = 0 [pid 327] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] creat("./bus", 000 [pid 328] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... creat resumed>) = 6 [pid 327] <... futex resumed>) = 1 [pid 324] <... futex resumed>) = 0 [pid 331] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] creat("./bus", 000 [pid 324] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 1 [pid 328] <... futex resumed>) = 0 [pid 327] <... creat resumed>) = 5 [pid 324] <... futex resumed>) = 0 [pid 331] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... futex resumed>) = 0 [pid 327] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 331] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 328] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... open resumed>) = 7 [pid 327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 324] <... futex resumed>) = 0 [pid 331] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] creat("./bus", 000 [pid 324] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 328] <... futex resumed>) = 0 [pid 327] <... creat resumed>) = 6 [pid 331] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... futex resumed>) = 0 [pid 327] <... futex resumed>) = 1 [pid 324] <... futex resumed>) = 0 [pid 331] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 328] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... mmap resumed>) = 0x20000000 [pid 327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 324] <... futex resumed>) = 0 [pid 331] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 324] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 328] <... futex resumed>) = 0 [pid 327] <... open resumed>) = 7 [pid 331] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 330] <... mkdir resumed>) = 0 [pid 328] <... futex resumed>) = 0 [pid 327] <... futex resumed>) = 1 [pid 324] <... futex resumed>) = 0 [pid 331] ftruncate(6, 31 [pid 328] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... mkdir resumed>) = 0 [pid 331] <... ftruncate resumed>) = 0 [pid 330] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 324] <... futex resumed>) = 0 [pid 332] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 331] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 324] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 328] <... futex resumed>) = 0 [pid 327] <... mmap resumed>) = 0x20000000 [pid 331] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 22.460655][ T331] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 22.466187][ T327] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 328] <... futex resumed>) = 0 [pid 327] <... futex resumed>) = 1 [pid 324] <... futex resumed>) = 0 [pid 328] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 327] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = 1 [pid 327] ftruncate(6, 31 [pid 324] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 328] <... mmap resumed>) = 0x7f39234a0000 [pid 327] <... ftruncate resumed>) = 0 [pid 327] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 327] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 327] <... futex resumed>) = 0 [pid 324] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 331] +++ killed by SIGBUS +++ [pid 328] +++ killed by SIGBUS +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=328, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./1/binderfs") = 0 [pid 291] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 333] <... ioctl resumed>) = 0 [pid 327] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 324] <... mmap resumed>) = 0x7f39234a0000 [ 22.509540][ T331] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.526004][ T327] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 333] close(3) = 0 [pid 330] <... mount resumed>) = 0 [pid 330] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 333] close(4 [pid 332] <... mount resumed>) = 0 [pid 330] <... openat resumed>) = 3 [pid 330] chdir("./file0" [pid 327] +++ killed by SIGBUS +++ [pid 324] +++ killed by SIGBUS +++ [pid 330] <... chdir resumed>) = 0 [pid 330] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=324, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 332] chdir("./file0") = 0 [pid 332] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./1/binderfs") = 0 [pid 292] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./1/file0") = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./1") = 0 [pid 291] mkdir("./2", 0777) = 0 [ 22.551745][ T330] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 22.562018][ T332] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 333] <... close resumed>) = 0 [pid 332] <... openat resumed>) = 4 [pid 330] <... openat resumed>) = 4 [pid 332] ioctl(4, LOOP_CLR_FD [pid 330] ioctl(4, LOOP_CLR_FD [pid 332] <... ioctl resumed>) = 0 [pid 330] <... ioctl resumed>) = 0 [pid 332] close(4 [pid 330] close(4 [pid 332] <... close resumed>) = 0 [pid 330] <... close resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 332] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 1 [pid 330] <... futex resumed>) = 1 [pid 326] <... futex resumed>) = 0 [pid 332] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 326] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 326] <... futex resumed>) = 0 [pid 330] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 326] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] mkdir("./file0", 0777 [pid 330] <... open resumed>) = 4 [pid 325] <... futex resumed>) = 0 [pid 292] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 330] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 326] <... futex resumed>) = 0 [pid 330] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 326] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 326] <... futex resumed>) = 0 [pid 330] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 326] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... mkdir resumed>) = 0 [pid 330] <... write resumed>) = 9 [pid 325] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 330] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 330] <... futex resumed>) = 1 [pid 326] <... futex resumed>) = 0 [pid 332] <... futex resumed>) = 0 [pid 330] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 326] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 1 [pid 292] newfstatat(AT_FDCWD, "./1/file0", [pid 332] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 326] <... futex resumed>) = 0 [pid 325] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] creat("./bus", 000 [pid 326] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 332] <... open resumed>) = 4 [pid 330] <... creat resumed>) = 5 [pid 292] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 332] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 332] <... futex resumed>) = 1 [pid 330] <... futex resumed>) = 1 [pid 326] <... futex resumed>) = 0 [pid 325] <... futex resumed>) = 0 [pid 292] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 332] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 326] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 326] <... futex resumed>) = 0 [pid 325] <... futex resumed>) = 0 [pid 292] <... openat resumed>) = 4 [pid 332] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 330] creat("./bus", 000 [pid 326] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] newfstatat(4, "", [pid 332] <... write resumed>) = 9 [pid 330] <... creat resumed>) = 6 [pid 332] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 332] <... futex resumed>) = 1 [pid 330] <... futex resumed>) = 1 [pid 326] <... futex resumed>) = 0 [pid 325] <... futex resumed>) = 0 [pid 292] getdents64(4, [pid 332] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 326] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 326] <... futex resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 325] <... futex resumed>) = 0 [pid 332] creat("./bus", 000 [pid 330] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 326] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] getdents64(4, [pid 332] <... creat resumed>) = 5 [pid 330] <... open resumed>) = 7 [pid 292] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 332] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] close(4 [pid 330] <... futex resumed>) = 1 [pid 326] <... futex resumed>) = 0 [pid 332] <... futex resumed>) = 1 [pid 330] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 326] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 332] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 326] <... futex resumed>) = 0 [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 330] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 326] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] rmdir("./1/file0" [pid 332] creat("./bus", 000 [pid 330] <... mmap resumed>) = 0x20000000 [pid 325] <... futex resumed>) = 0 [pid 330] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 326] <... futex resumed>) = 0 [pid 330] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 326] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 326] <... futex resumed>) = 0 [pid 330] ftruncate(6, 31 [pid 326] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] <... creat resumed>) = 6 [pid 330] <... ftruncate resumed>) = 0 [pid 325] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... rmdir resumed>) = 0 [pid 332] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] getdents64(3, [pid 332] <... futex resumed>) = 0 [pid 330] <... futex resumed>) = 1 [pid 326] <... futex resumed>) = 0 [pid 325] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 332] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 330] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 326] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = 0 [pid 292] close(3 [pid 332] <... open resumed>) = 7 [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 326] <... futex resumed>) = 0 [pid 325] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] <... close resumed>) = 0 [pid 332] <... futex resumed>) = 0 [pid 325] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] rmdir("./1" [pid 332] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 325] <... futex resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 332] <... mmap resumed>) = 0x20000000 [pid 325] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] mkdir("./2", 0777 [pid 332] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] <... mkdir resumed>) = 0 [pid 332] <... futex resumed>) = 0 [pid 325] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 332] ftruncate(6, 31 [pid 325] <... futex resumed>) = 0 [pid 332] <... ftruncate resumed>) = 0 [pid 325] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] <... futex resumed>) = 0 [pid 325] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 326] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = ? [pid 330] +++ killed by SIGBUS +++ [pid 326] +++ killed by SIGBUS +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=326, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 325] <... futex resumed>) = 0 [pid 325] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] <... restart_syscall resumed>) = 0 [pid 325] <... futex resumed>) = 0 [pid 325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 289] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 289] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./1/binderfs") = 0 [pid 289] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 325] <... mmap resumed>) = 0x7f39234a0000 [pid 325] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE [pid 332] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 325] <... mprotect resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 332] +++ killed by SIGBUS +++ [pid 325] +++ killed by SIGBUS +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=325, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 292] ioctl(3, LOOP_CLR_FD [pid 291] ioctl(3, LOOP_CLR_FD [pid 290] <... restart_syscall resumed>) = 0 [pid 289] <... umount2 resumed>) = 0 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] close(3 [pid 291] close(3 [pid 289] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... close resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] newfstatat(AT_FDCWD, "./1/file0", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 348 [pid 290] <... openat resumed>) = 3 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(3, "", [pid 289] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... openat resumed>) = 4 ./strace-static-x86_64: Process 348 attached [pid 290] getdents64(3, [pid 289] newfstatat(4, "", [pid 348] set_robust_list(0x5555568d86a0, 24 [pid 290] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(4, [pid 348] <... set_robust_list resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 290] newfstatat(AT_FDCWD, "./1/binderfs", [pid 289] getdents64(4, [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 290] unlink("./1/binderfs" [pid 289] close(4 [pid 348] chdir("./2" [pid 290] <... unlink resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 348] <... chdir resumed>) = 0 [pid 290] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] rmdir("./1/file0" [pid 348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 348] setpgid(0, 0 [pid 289] <... rmdir resumed>) = 0 [pid 348] <... setpgid resumed>) = 0 [pid 348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 348] write(3, "1000", 4) = 4 [pid 348] close(3) = 0 [pid 289] getdents64(3, [pid 348] symlink("/dev/binderfs", "./binderfs" [pid 289] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 348] <... symlink resumed>) = 0 [pid 348] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 289] close(3 [pid 348] <... rt_sigaction resumed>NULL, 8) = 0 [pid 348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 289] <... close resumed>) = 0 [pid 348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 289] rmdir("./1" [pid 348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 348] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 348] rt_sigprocmask(SIG_BLOCK, ~[], [pid 289] <... rmdir resumed>) = 0 [pid 348] <... rt_sigprocmask resumed>[], 8) = 0 [pid 348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 289] mkdir("./2", 0777 [pid 348] <... clone3 resumed> => {parent_tid=[350]}, 88) = 350 [pid 348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 348] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 289] <... mkdir resumed>) = 0 [pid 289] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 350 attached [pid 350] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 350] memfd_create("syzkaller", 0) = 3 [ 22.634969][ T330] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.644345][ T332] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 350] munmap(0x7f391b0c1000, 138412032) = 0 [pid 350] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 333] <... mount resumed>) = 0 [pid 333] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 333] chdir("./file0") = 0 [pid 333] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 289] <... openat resumed>) = 3 [pid 289] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 289] close(3) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 352 ./strace-static-x86_64: Process 352 attached [pid 352] set_robust_list(0x5555568d86a0, 24) = 0 [pid 352] chdir("./2") = 0 [pid 352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 352] setpgid(0, 0) = 0 [pid 352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 352] write(3, "1000", 4) = 4 [pid 352] close(3) = 0 [pid 352] symlink("/dev/binderfs", "./binderfs" [pid 291] <... close resumed>) = 0 [pid 352] <... symlink resumed>) = 0 [pid 352] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 352] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 ./strace-static-x86_64: Process 353 attached [pid 291] <... clone resumed>, child_tidptr=0x5555568d8690) = 353 [pid 352] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 353] set_robust_list(0x5555568d86a0, 24) = 0 [pid 353] chdir("./2") = 0 [pid 353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 352] <... mprotect resumed>) = 0 [pid 353] <... prctl resumed>) = 0 [pid 353] setpgid(0, 0) = 0 [pid 353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 353] write(3, "1000", 4) = 4 [pid 353] close(3) = 0 [pid 353] symlink("/dev/binderfs", "./binderfs" [pid 352] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 353] <... symlink resumed>) = 0 [pid 353] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 353] <... futex resumed>) = 0 [pid 353] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 353] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 353] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 353] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 352] <... clone3 resumed> => {parent_tid=[354]}, 88) = 354 [pid 353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 352] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] <... clone3 resumed> => {parent_tid=[355]}, 88) = 355 [pid 353] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 353] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 353] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 354 attached [pid 354] set_robust_list(0x7f39234e19a0, 24 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 354] <... set_robust_list resumed>) = 0 [pid 354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 354] memfd_create("syzkaller", 0./strace-static-x86_64: Process 355 attached [pid 355] set_robust_list(0x7f39234e19a0, 24 [pid 354] <... memfd_create resumed>) = 3 [pid 355] <... set_robust_list resumed>) = 0 [pid 355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 355] memfd_create("syzkaller", 0) = 3 [pid 355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 22.684108][ T333] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 354] <... write resumed>) = 1048576 [pid 354] munmap(0x7f391b0c1000, 138412032 [pid 333] <... openat resumed>) = 4 [pid 350] <... openat resumed>) = 4 [pid 333] ioctl(4, LOOP_CLR_FD [pid 350] ioctl(4, LOOP_SET_FD, 3 [pid 333] <... ioctl resumed>) = 0 [pid 333] close(4 [pid 355] <... write resumed>) = 1048576 [pid 355] munmap(0x7f391b0c1000, 138412032) = 0 [pid 354] <... munmap resumed>) = 0 [pid 355] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 350] <... ioctl resumed>) = 0 [pid 350] close(3) = 0 [pid 350] close(4 [pid 354] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 333] <... close resumed>) = 0 [pid 350] <... close resumed>) = 0 [pid 350] mkdir("./file0", 0777) = 0 [pid 350] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 333] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 329] <... futex resumed>) = 0 [pid 354] <... openat resumed>) = 4 [pid 354] ioctl(4, LOOP_SET_FD, 3 [pid 329] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 333] <... open resumed>) = 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./1/file0" [pid 333] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 329] <... futex resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 290] getdents64(3, [pid 329] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 333] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] close(3) = 0 [pid 290] rmdir("./1" [pid 333] <... write resumed>) = 9 [pid 333] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... rmdir resumed>) = 0 [pid 290] mkdir("./2", 0777 [pid 333] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 333] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] creat("./bus", 000 [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 333] <... creat resumed>) = 5 [pid 354] <... ioctl resumed>) = 0 [pid 333] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... openat resumed>) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 333] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 290] close(3 [pid 354] close(3 [pid 333] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... close resumed>) = 0 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] <... futex resumed>) = 0 [pid 333] creat("./bus", 000 [pid 329] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 333] <... creat resumed>) = 6 [pid 333] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... clone resumed>, child_tidptr=0x5555568d8690) = 358 [pid 354] <... close resumed>) = 0 [pid 354] close(4 [pid 333] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 333] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] <... futex resumed>) = 0 [pid 333] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 329] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... open resumed>) = 7 [pid 333] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 329] <... futex resumed>) = 0 [pid 333] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] <... futex resumed>) = 0 [pid 333] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 329] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... mmap resumed>) = 0x20000000 [pid 333] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 329] <... futex resumed>) = 0 [pid 333] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 333] ftruncate(6, 31 [pid 329] <... futex resumed>) = 0 [pid 333] <... ftruncate resumed>) = 0 [pid 329] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 333] <... futex resumed>) = 0 [pid 329] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 358 attached [pid 358] set_robust_list(0x5555568d86a0, 24) = 0 [pid 358] chdir("./2") = 0 [pid 358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 358] setpgid(0, 0) = 0 [pid 358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 358] write(3, "1000", 4) = 4 [pid 358] close(3) = 0 [pid 358] symlink("/dev/binderfs", "./binderfs") = 0 [pid 358] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 358] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 358] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 358] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 358] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[359]}, 88) = 359 [pid 358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 358] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 358] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 359 attached [pid 359] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 359] memfd_create("syzkaller", 0) = 3 [pid 359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 329] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234a0000 [pid 333] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 329] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 329] rt_sigprocmask(SIG_BLOCK, ~[], ) = ? [pid 359] <... write resumed>) = 1048576 [pid 333] +++ killed by SIGBUS +++ [pid 329] +++ killed by SIGBUS +++ [pid 359] munmap(0x7f391b0c1000, 138412032 [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=329, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 359] <... munmap resumed>) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 288] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 288] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 288] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./1/binderfs") = 0 [pid 288] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 355] <... openat resumed>) = 4 [pid 354] <... close resumed>) = 0 [pid 350] <... mount resumed>) = 0 [pid 350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 350] chdir("./file0") = 0 [pid 355] ioctl(4, LOOP_SET_FD, 3 [pid 354] mkdir("./file0", 0777 [pid 350] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 354] <... mkdir resumed>) = 0 [pid 354] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 288] <... umount2 resumed>) = 0 [pid 288] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 288] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 288] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 288] close(4) = 0 [pid 288] rmdir("./1/file0") = 0 [pid 288] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 288] close(3) = 0 [pid 288] rmdir("./1") = 0 [pid 288] mkdir("./2", 0777) = 0 [ 22.769678][ T333] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.793138][ T350] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 359] <... openat resumed>) = 4 [pid 359] ioctl(4, LOOP_SET_FD, 3 [pid 355] <... ioctl resumed>) = 0 [pid 350] <... openat resumed>) = 4 [pid 355] close(3 [pid 350] ioctl(4, LOOP_CLR_FD [pid 288] <... openat resumed>) = 3 [pid 359] <... ioctl resumed>) = 0 [pid 355] <... close resumed>) = 0 [pid 359] close(3 [pid 355] close(4 [pid 350] <... ioctl resumed>) = 0 [pid 288] ioctl(3, LOOP_CLR_FD [pid 359] <... close resumed>) = 0 [pid 355] <... close resumed>) = 0 [pid 350] close(4 [pid 288] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 359] close(4 [pid 355] mkdir("./file0", 0777 [pid 350] <... close resumed>) = 0 [pid 288] close(3 [pid 355] <... mkdir resumed>) = 0 [pid 350] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... close resumed>) = 0 [pid 355] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 350] <... futex resumed>) = 1 [pid 348] <... futex resumed>) = 0 [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 366 [pid 350] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... futex resumed>) = 0 [pid 348] <... futex resumed>) = 1 [pid 350] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 348] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 366 attached [pid 366] set_robust_list(0x5555568d86a0, 24) = 0 [pid 366] chdir("./2") = 0 [pid 366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 366] setpgid(0, 0 [pid 354] <... mount resumed>) = 0 [pid 350] <... open resumed>) = 4 [pid 350] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 354] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 350] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... openat resumed>) = 3 [pid 350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 348] <... futex resumed>) = 0 [pid 350] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 348] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 354] chdir("./file0" [pid 350] <... write resumed>) = 9 [pid 350] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 350] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... chdir resumed>) = 0 [pid 350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 348] <... futex resumed>) = 0 [pid 350] creat("./bus", 000 [pid 348] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 354] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 350] <... creat resumed>) = 5 [pid 350] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 350] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 348] <... futex resumed>) = 0 [pid 350] creat("./bus", 000 [pid 348] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 350] <... creat resumed>) = 6 [pid 350] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 350] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 348] <... futex resumed>) = 0 [pid 350] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 348] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 350] <... open resumed>) = 7 [pid 350] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 350] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 348] <... futex resumed>) = 0 [pid 350] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 348] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 350] <... mmap resumed>) = 0x20000000 [pid 350] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 350] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 348] <... futex resumed>) = 0 [pid 350] ftruncate(6, 31 [pid 348] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... setpgid resumed>) = 0 [pid 350] <... ftruncate resumed>) = 0 [pid 366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 350] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... openat resumed>) = 3 [pid 350] <... futex resumed>) = 1 [pid 348] <... futex resumed>) = 0 [pid 366] write(3, "1000", 4 [pid 350] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... write resumed>) = 4 [pid 350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 348] <... futex resumed>) = 0 [pid 366] close(3 [pid 359] <... close resumed>) = 0 [pid 350] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 348] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... close resumed>) = 0 [pid 348] <... futex resumed>) = ? [pid 366] symlink("/dev/binderfs", "./binderfs") = 0 [pid 350] +++ killed by SIGBUS +++ [pid 348] +++ killed by SIGBUS +++ [pid 366] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=348, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 359] mkdir("./file0", 0777 [pid 366] <... futex resumed>) = 0 [pid 366] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 366] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 366] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 366] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 366] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[367]}, 88) = 367 [pid 366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 366] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 359] <... mkdir resumed>) = 0 [pid 292] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 359] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 367 attached [pid 367] set_robust_list(0x7f39234e19a0, 24 [pid 292] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 367] <... set_robust_list resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 367] rt_sigprocmask(SIG_SETMASK, [], [pid 292] newfstatat(3, "", [pid 367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, [pid 367] memfd_create("syzkaller", 0 [pid 292] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./2/binderfs") = 0 [pid 292] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 367] <... memfd_create resumed>) = 3 [pid 367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 367] munmap(0x7f391b0c1000, 138412032) = 0 [ 22.891894][ T354] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 22.910342][ T350] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 367] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 359] <... mount resumed>) = 0 [pid 359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 359] chdir("./file0") = 0 [pid 359] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 367] <... openat resumed>) = 4 [pid 354] <... openat resumed>) = 4 [pid 367] ioctl(4, LOOP_SET_FD, 3 [pid 354] ioctl(4, LOOP_CLR_FD [ 22.971623][ T359] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 367] <... ioctl resumed>) = 0 [pid 359] <... openat resumed>) = 4 [pid 354] <... ioctl resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 367] close(3) = 0 [pid 367] close(4 [pid 359] ioctl(4, LOOP_CLR_FD [pid 354] close(4 [pid 292] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 355] <... mount resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 355] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 292] newfstatat(AT_FDCWD, "./2/file0", [pid 355] <... openat resumed>) = 3 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 355] chdir("./file0" [pid 292] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 355] <... chdir resumed>) = 0 [pid 292] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 355] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 292] <... openat resumed>) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./2/file0") = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./2") = 0 [pid 292] mkdir("./3", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 367] <... close resumed>) = 0 [pid 359] <... ioctl resumed>) = 0 [pid 359] close(4 [pid 367] mkdir("./file0", 0777) = 0 [ 23.025209][ T355] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 367] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 359] <... close resumed>) = 0 [pid 355] <... openat resumed>) = 4 [pid 354] <... close resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 359] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] ioctl(4, LOOP_CLR_FD [pid 354] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] ioctl(3, LOOP_CLR_FD [pid 359] <... futex resumed>) = 1 [pid 358] <... futex resumed>) = 0 [pid 355] <... ioctl resumed>) = 0 [pid 354] <... futex resumed>) = 1 [pid 352] <... futex resumed>) = 0 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 359] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] close(4 [pid 354] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] close(3 [pid 359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 358] <... futex resumed>) = 0 [pid 355] <... close resumed>) = 0 [pid 354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 352] <... futex resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 359] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 358] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 352] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 359] <... open resumed>) = 4 [pid 355] <... futex resumed>) = 1 [pid 354] <... open resumed>) = 4 [pid 353] <... futex resumed>) = 0 [pid 359] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 373 [pid 359] <... futex resumed>) = 1 [pid 358] <... futex resumed>) = 0 [pid 355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] <... futex resumed>) = 1 [pid 353] <... futex resumed>) = 0 [pid 352] <... futex resumed>) = 0 [pid 359] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 354] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 353] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 358] <... futex resumed>) = 0 [pid 355] <... open resumed>) = 4 [pid 354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 352] <... futex resumed>) = 0 [pid 359] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 358] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 352] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] <... write resumed>) = 9 [pid 355] <... futex resumed>) = 1 [pid 353] <... futex resumed>) = 0 [pid 359] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] <... write resumed>) = 9 [pid 353] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 1 [pid 358] <... futex resumed>) = 0 [pid 355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] <... futex resumed>) = 0 [pid 359] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 354] <... futex resumed>) = 1 [pid 353] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 0 [pid 359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 358] <... futex resumed>) = 0 [pid 355] <... write resumed>) = 9 [pid 354] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] creat("./bus", 000 [pid 358] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 352] <... futex resumed>) = 0 [pid 359] <... creat resumed>) = 5 [pid 355] <... futex resumed>) = 1 [pid 354] creat("./bus", 000 [pid 353] <... futex resumed>) = 0 [pid 352] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] <... creat resumed>) = 5 [pid 353] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 373 attached [pid 359] <... futex resumed>) = 1 [pid 358] <... futex resumed>) = 0 [pid 355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] <... futex resumed>) = 0 [pid 373] set_robust_list(0x5555568d86a0, 24 [pid 359] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] creat("./bus", 000 [pid 354] <... futex resumed>) = 1 [pid 353] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 0 [pid 373] <... set_robust_list resumed>) = 0 [pid 359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 358] <... futex resumed>) = 0 [pid 355] <... creat resumed>) = 5 [pid 354] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] chdir("./3" [pid 359] creat("./bus", 000 [pid 358] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 352] <... futex resumed>) = 0 [pid 373] <... chdir resumed>) = 0 [pid 359] <... creat resumed>) = 6 [pid 355] <... futex resumed>) = 1 [pid 354] creat("./bus", 000 [pid 353] <... futex resumed>) = 0 [pid 352] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 359] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] <... creat resumed>) = 6 [pid 353] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... prctl resumed>) = 0 [pid 359] <... futex resumed>) = 1 [pid 358] <... futex resumed>) = 0 [pid 355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] <... futex resumed>) = 0 [pid 373] setpgid(0, 0 [pid 359] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] creat("./bus", 000 [pid 354] <... futex resumed>) = 1 [pid 353] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 0 [pid 373] <... setpgid resumed>) = 0 [pid 359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 358] <... futex resumed>) = 0 [pid 355] <... creat resumed>) = 6 [pid 354] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 359] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 358] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 352] <... futex resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 359] <... open resumed>) = 7 [pid 355] <... futex resumed>) = 1 [pid 354] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 353] <... futex resumed>) = 0 [pid 352] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] write(3, "1000", 4 [pid 359] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] <... open resumed>) = 7 [pid 353] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... write resumed>) = 4 [pid 359] <... futex resumed>) = 1 [pid 358] <... futex resumed>) = 0 [pid 355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] <... futex resumed>) = 0 [pid 373] close(3 [pid 359] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 354] <... futex resumed>) = 1 [pid 353] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 358] <... futex resumed>) = 0 [pid 355] <... open resumed>) = 7 [pid 354] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] symlink("/dev/binderfs", "./binderfs" [pid 359] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 358] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 352] <... futex resumed>) = 0 [pid 373] <... symlink resumed>) = 0 [pid 359] <... mmap resumed>) = 0x20000000 [pid 355] <... futex resumed>) = 1 [pid 354] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 353] <... futex resumed>) = 0 [pid 352] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] <... mmap resumed>) = 0x20000000 [pid 353] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 359] <... futex resumed>) = 1 [pid 358] <... futex resumed>) = 0 [pid 355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] <... futex resumed>) = 0 [pid 373] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 359] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 354] <... futex resumed>) = 1 [pid 353] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 0 [pid 373] <... rt_sigaction resumed>NULL, 8) = 0 [pid 359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 358] <... futex resumed>) = 0 [pid 355] <... mmap resumed>) = 0x20000000 [pid 354] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 359] ftruncate(6, 31 [pid 358] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 352] <... futex resumed>) = 0 [pid 373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 359] <... ftruncate resumed>) = 0 [pid 355] <... futex resumed>) = 1 [pid 354] ftruncate(6, 31 [pid 353] <... futex resumed>) = 0 [pid 352] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 359] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] <... ftruncate resumed>) = 0 [pid 353] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... mmap resumed>) = 0x7f39234c1000 [pid 359] <... futex resumed>) = 1 [pid 358] <... futex resumed>) = 0 [pid 355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] <... futex resumed>) = 0 [pid 373] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 359] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] ftruncate(6, 31 [pid 354] <... futex resumed>) = 1 [pid 353] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 0 [pid 373] <... mprotect resumed>) = 0 [pid 359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 358] <... futex resumed>) = 0 [pid 355] <... ftruncate resumed>) = 0 [pid 354] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rt_sigprocmask(SIG_BLOCK, ~[], [pid 367] <... mount resumed>) = 0 [pid 367] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 367] chdir("./file0") = 0 [pid 367] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 367] ioctl(4, LOOP_CLR_FD) = 0 [pid 367] close(4) = 0 [pid 358] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] <... rt_sigprocmask resumed>[], 8) = 0 [pid 352] <... futex resumed>) = 0 [pid 367] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 358] <... futex resumed>) = 0 [pid 355] <... futex resumed>) = 1 [pid 353] <... futex resumed>) = 0 [pid 373] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 367] <... futex resumed>) = 1 [pid 366] <... futex resumed>) = 0 [pid 352] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 366] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 373] <... clone3 resumed> => {parent_tid=[376]}, 88) = 376 [pid 367] <... open resumed>) = 4 [pid 366] <... futex resumed>) = 0 [pid 352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 373] rt_sigprocmask(SIG_SETMASK, [], [pid 367] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 367] <... futex resumed>) = 0 [pid 366] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 366] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 367] <... write resumed>) = 9 [pid 366] <... futex resumed>) = 0 [pid 373] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 367] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... futex resumed>) = 0 [pid 366] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 367] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 366] <... futex resumed>) = 0 [pid 367] creat("./bus", 000 [pid 366] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... creat resumed>) = 5 [pid 367] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 367] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 366] <... futex resumed>) = 0 [pid 367] creat("./bus", 000 [pid 366] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... creat resumed>) = 6 [pid 367] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 367] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 366] <... futex resumed>) = 0 [pid 367] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 366] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... open resumed>) = 7 [pid 367] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 367] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 366] <... futex resumed>) = 0 [pid 367] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 366] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... mmap resumed>) = 0x20000000 [pid 367] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 ./strace-static-x86_64: Process 376 attached [pid 367] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] set_robust_list(0x7f39234e19a0, 24 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 366] <... futex resumed>) = 0 [pid 376] <... set_robust_list resumed>) = 0 [pid 367] ftruncate(6, 31 [pid 366] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] rt_sigprocmask(SIG_SETMASK, [], [pid 367] <... ftruncate resumed>) = 0 [pid 376] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 367] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] memfd_create("syzkaller", 0 [pid 367] <... futex resumed>) = 1 [pid 366] <... futex resumed>) = 0 [pid 376] <... memfd_create resumed>) = 3 [pid 367] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [ 23.130500][ T367] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 23.134972][ T359] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.160808][ T354] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 366] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 366] <... futex resumed>) = 0 [pid 355] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 353] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... mmap resumed>) = 0x7f391b0c1000 [pid 355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 353] <... futex resumed>) = 0 [pid 352] <... mmap resumed>) = 0x7f39234a0000 [pid 376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 366] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] +++ killed by SIGBUS +++ [pid 358] +++ killed by SIGBUS +++ [pid 352] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE [pid 366] <... futex resumed>) = 0 [pid 352] <... mprotect resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=358, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 352] rt_sigprocmask(SIG_BLOCK, ~[], [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 352] <... rt_sigprocmask resumed>[], 8) = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[377]}, 88) = 377 [pid 290] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 352] rt_sigprocmask(SIG_SETMASK, [], [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 290] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 352] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... openat resumed>) = 3 [pid 352] <... futex resumed>) = 0 [pid 290] newfstatat(3, "", [pid 352] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./2/binderfs") = 0 [pid 290] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 377 attached [pid 377] set_robust_list(0x7f39234c09a0, 24) = 0 [pid 377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000280} --- [pid 352] <... futex resumed>) = ? [pid 366] <... mmap resumed>) = 0x7f39234a0000 [pid 366] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 366] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 366] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[378]}, 88) = 378 [pid 366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 366] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 366] <... futex resumed>) = ? ./strace-static-x86_64: Process 378 attached [pid 353] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 355] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 353] <... mmap resumed>) = 0x7f39234a0000 [pid 353] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 353] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} ) = ? ./strace-static-x86_64: Process 379 attached [pid 376] <... write resumed>) = 1048576 [pid 376] munmap(0x7f391b0c1000, 138412032) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 367] +++ killed by SIGBUS +++ [pid 354] +++ killed by SIGBUS +++ [pid 377] +++ killed by SIGBUS +++ [pid 352] +++ killed by SIGBUS +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=352, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 289] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 378] +++ killed by SIGBUS +++ [pid 366] +++ killed by SIGBUS +++ [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=366, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 289] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", [pid 288] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] getdents64(3, [pid 288] newfstatat(3, "", [pid 289] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(3, [pid 289] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 288] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./2/binderfs", [pid 288] newfstatat(AT_FDCWD, "./2/binderfs", [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 379] +++ killed by SIGBUS +++ [pid 289] unlink("./2/binderfs" [pid 288] unlink("./2/binderfs" [pid 289] <... unlink resumed>) = 0 [pid 289] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 355] +++ killed by SIGBUS +++ [pid 353] +++ killed by SIGBUS +++ [pid 288] <... unlink resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=353, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 288] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./2/binderfs") = 0 [ 23.177045][ T367] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.182857][ T355] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 291] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 376] <... openat resumed>) = 4 [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 376] ioctl(4, LOOP_SET_FD, 3 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./2/file0") = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./2") = 0 [pid 290] mkdir("./3", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 376] <... ioctl resumed>) = 0 [pid 376] close(3) = 0 [pid 376] close(4) = 0 [pid 290] <... openat resumed>) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 381 ./strace-static-x86_64: Process 381 attached [pid 381] set_robust_list(0x5555568d86a0, 24) = 0 [pid 289] <... umount2 resumed>) = 0 [pid 381] chdir("./3") = 0 [pid 381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 381] setpgid(0, 0) = 0 [pid 381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 381] write(3, "1000", 4) = 4 [pid 381] close(3) = 0 [pid 381] symlink("/dev/binderfs", "./binderfs") = 0 [pid 381] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 381] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 381] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 381] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[382]}, 88) = 382 [pid 381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 381] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 382 attached [pid 382] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] memfd_create("syzkaller", 0) = 3 [pid 382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./2/file0") = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./2") = 0 [pid 291] mkdir("./3", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 383 [pid 376] mkdir("./file0", 0777) = 0 [pid 288] <... umount2 resumed>) = 0 [pid 376] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 288] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] newfstatat(AT_FDCWD, "./2/file0", [pid 288] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 288] <... openat resumed>) = 4 [pid 289] <... openat resumed>) = 4 [pid 288] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] newfstatat(4, "", [pid 288] getdents64(4, [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 382] <... write resumed>) = 1048576 [pid 382] munmap(0x7f391b0c1000, 138412032) = 0 [pid 382] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 289] getdents64(4, [pid 288] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 289] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 288] getdents64(4, [pid 382] <... openat resumed>) = 4 [pid 289] getdents64(4, [pid 288] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 382] ioctl(4, LOOP_SET_FD, 3 [pid 289] close(4 [pid 288] close(4 [pid 289] <... close resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 289] rmdir("./2/file0" [pid 288] rmdir("./2/file0" [pid 289] <... rmdir resumed>) = 0 [pid 289] getdents64(3, [pid 288] <... rmdir resumed>) = 0 [pid 288] getdents64(3, [pid 289] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 289] close(3 [pid 288] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 288] close(3 [pid 289] <... close resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 289] rmdir("./2" [pid 288] rmdir("./2" [pid 289] <... rmdir resumed>) = 0 [pid 289] mkdir("./3", 0777 [pid 288] <... rmdir resumed>) = 0 [pid 382] <... ioctl resumed>) = 0 [pid 288] mkdir("./3", 0777 [pid 382] close(3) = 0 [pid 382] close(4./strace-static-x86_64: Process 383 attached [pid 289] <... mkdir resumed>) = 0 [pid 383] set_robust_list(0x5555568d86a0, 24) = 0 [pid 383] chdir("./3" [pid 288] <... mkdir resumed>) = 0 [pid 289] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 383] <... chdir resumed>) = 0 [pid 288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 383] setpgid(0, 0) = 0 [pid 383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 383] write(3, "1000", 4) = 4 [pid 383] close(3) = 0 [pid 383] symlink("/dev/binderfs", "./binderfs") = 0 [pid 383] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 383] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 383] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 383] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 383] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[387]}, 88) = 387 [pid 383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 383] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 387 attached [pid 387] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 387] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 387] memfd_create("syzkaller", 0) = 3 [pid 387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 376] <... mount resumed>) = 0 [pid 376] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 376] chdir("./file0") = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 387] <... write resumed>) = 1048576 [pid 387] munmap(0x7f391b0c1000, 138412032) = 0 [pid 387] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 382] <... close resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 288] <... openat resumed>) = 3 [pid 376] <... openat resumed>) = 4 [pid 376] ioctl(4, LOOP_CLR_FD) = 0 [pid 376] close(4) = 0 [pid 376] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] <... futex resumed>) = 0 [pid 288] ioctl(3, LOOP_CLR_FD [pid 382] mkdir("./file0", 0777 [pid 373] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] ioctl(3, LOOP_CLR_FD [pid 288] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 382] <... mkdir resumed>) = 0 [pid 373] <... futex resumed>) = 0 [pid 289] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 382] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 373] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] close(3 [pid 289] close(3 [pid 387] ioctl(4, LOOP_SET_FD, 3 [pid 376] <... open resumed>) = 4 [pid 376] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... write resumed>) = 9 [pid 376] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] creat("./bus", 000) = 5 [pid 376] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] creat("./bus", 000) = 6 [pid 376] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] <... futex resumed>) = 0 [pid 376] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 373] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] <... open resumed>) = 7 [pid 373] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] <... futex resumed>) = 0 [pid 376] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 373] <... futex resumed>) = 0 [pid 376] <... futex resumed>) = 1 [pid 373] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] ftruncate(6, 31 [pid 373] <... futex resumed>) = 0 [pid 373] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... ftruncate resumed>) = 0 [ 23.424215][ T376] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 376] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 376] <... futex resumed>) = 1 [pid 373] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 288] <... close resumed>) = 0 [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 389 [pid 289] <... close resumed>) = 0 [pid 376] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- ./strace-static-x86_64: Process 389 attached [pid 389] set_robust_list(0x5555568d86a0, 24) = 0 [pid 389] chdir("./3") = 0 [pid 389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 389] setpgid(0, 0) = 0 [pid 389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 389] write(3, "1000", 4) = 4 [pid 389] close(3) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... mmap resumed>) = ? [pid 289] <... clone resumed>, child_tidptr=0x5555568d8690) = 390 [pid 387] <... ioctl resumed>) = 0 [pid 376] +++ killed by SIGBUS +++ [pid 373] +++ killed by SIGBUS +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=373, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./3/binderfs") = 0 [pid 292] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 387] close(3) = 0 [pid 387] close(4 [pid 389] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 390 attached ) = 0 [pid 389] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] set_robust_list(0x5555568d86a0, 24 [pid 389] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 389] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 390] <... set_robust_list resumed>) = 0 [pid 389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 389] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 389] rt_sigprocmask(SIG_BLOCK, ~[], [pid 390] chdir("./3" [pid 389] <... rt_sigprocmask resumed>[], 8) = 0 [pid 390] <... chdir resumed>) = 0 [pid 389] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0}./strace-static-x86_64: Process 393 attached [pid 390] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 393] set_robust_list(0x7f39234e19a0, 24 [pid 390] <... prctl resumed>) = 0 [pid 390] setpgid(0, 0) = 0 [pid 389] <... clone3 resumed> => {parent_tid=[393]}, 88) = 393 [pid 393] <... set_robust_list resumed>) = 0 [pid 393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 389] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 393] memfd_create("syzkaller", 0 [pid 390] <... openat resumed>) = 3 [pid 390] write(3, "1000", 4) = 4 [pid 393] <... memfd_create resumed>) = 3 [pid 390] close(3) = 0 [pid 390] symlink("/dev/binderfs", "./binderfs" [pid 393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 390] <... symlink resumed>) = 0 [pid 390] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 390] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 390] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 393] <... mmap resumed>) = 0x7f391b0c1000 [pid 390] <... mmap resumed>) = 0x7f39234c1000 [pid 390] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 390] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 390] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[394]}, 88) = 394 [pid 390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 390] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 394 attached [pid 393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 382] <... mount resumed>) = 0 [pid 382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 382] chdir("./file0") = 0 [pid 382] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 394] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] memfd_create("syzkaller", 0) = 3 [pid 394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 393] <... write resumed>) = 1048576 [pid 393] munmap(0x7f391b0c1000, 138412032) = 0 [pid 393] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 393] <... openat resumed>) = 4 [pid 387] <... close resumed>) = 0 [pid 382] <... openat resumed>) = 4 [pid 292] <... umount2 resumed>) = 0 [pid 387] mkdir("./file0", 0777 [pid 393] ioctl(4, LOOP_SET_FD, 3 [pid 382] ioctl(4, LOOP_CLR_FD [pid 292] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 387] <... mkdir resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 387] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 292] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./3/file0") = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./3") = 0 [pid 292] mkdir("./4", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 394] <... write resumed>) = 1048576 [pid 394] munmap(0x7f391b0c1000, 138412032) = 0 [ 23.467934][ T376] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.507636][ T382] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 394] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 382] <... ioctl resumed>) = 0 [pid 382] close(4 [pid 394] <... openat resumed>) = 4 [pid 393] <... ioctl resumed>) = 0 [pid 382] <... close resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 394] ioctl(4, LOOP_SET_FD, 3 [pid 382] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] close(3 [pid 382] <... futex resumed>) = 1 [pid 381] <... futex resumed>) = 0 [pid 292] ioctl(3, LOOP_CLR_FD [pid 393] <... close resumed>) = 0 [pid 382] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 381] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] close(4 [pid 382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 381] <... futex resumed>) = 0 [pid 381] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... ioctl resumed>) = 0 [pid 382] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 394] close(3) = 0 [pid 394] close(4) = 0 [pid 394] mkdir("./file0", 0777) = 0 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 394] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 292] close(3) = 0 [pid 393] <... close resumed>) = 0 [pid 393] mkdir("./file0", 0777) = 0 [pid 393] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 382] <... open resumed>) = 4 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 382] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 400 [pid 382] <... futex resumed>) = 1 [pid 381] <... futex resumed>) = 0 [pid 382] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 381] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 400 attached [pid 382] <... write resumed>) = 9 [pid 400] set_robust_list(0x5555568d86a0, 24 [pid 382] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... set_robust_list resumed>) = 0 [pid 400] chdir("./4" [pid 382] <... futex resumed>) = 1 [pid 381] <... futex resumed>) = 0 [pid 400] <... chdir resumed>) = 0 [pid 400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 400] setpgid(0, 0 [pid 382] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 381] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... setpgid resumed>) = 0 [pid 400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 381] <... futex resumed>) = 0 [pid 400] <... openat resumed>) = 3 [pid 400] write(3, "1000", 4) = 4 [pid 400] close(3) = 0 [pid 400] symlink("/dev/binderfs", "./binderfs") = 0 [pid 400] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 400] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 400] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 400] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[402]}, 88) = 402 [pid 400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 400] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 382] creat("./bus", 000) = 5 [pid 382] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 381] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 381] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 1 [pid 382] creat("./bus", 000 [pid 381] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... creat resumed>) = 6 [pid 382] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 381] <... futex resumed>) = 0 [pid 382] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 381] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 381] <... futex resumed>) = 0 [pid 382] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 381] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... open resumed>) = 7 [pid 382] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 381] <... futex resumed>) = 0 [pid 382] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 381] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 381] <... futex resumed>) = 0 [pid 382] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 381] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... mmap resumed>) = 0x20000000 [pid 382] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 381] <... futex resumed>) = 0 [pid 382] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 381] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 381] <... futex resumed>) = 0 [pid 382] ftruncate(6, 31 [pid 381] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 402 attached [pid 394] <... mount resumed>) = 0 [pid 387] <... mount resumed>) = 0 [pid 382] <... ftruncate resumed>) = 0 [pid 402] set_robust_list(0x7f39234e19a0, 24 [pid 387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 402] <... set_robust_list resumed>) = 0 [pid 387] <... openat resumed>) = 3 [pid 402] rt_sigprocmask(SIG_SETMASK, [], [pid 387] chdir("./file0" [pid 402] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 387] <... chdir resumed>) = 0 [pid 402] memfd_create("syzkaller", 0 [pid 387] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 402] <... memfd_create resumed>) = 3 [pid 387] <... openat resumed>) = 4 [pid 402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 387] ioctl(4, LOOP_CLR_FD [pid 402] <... mmap resumed>) = 0x7f391b0c1000 [pid 387] <... ioctl resumed>) = 0 [pid 402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 387] close(4 [pid 394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 393] <... mount resumed>) = 0 [pid 382] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... openat resumed>) = 3 [pid 382] <... futex resumed>) = 1 [pid 381] <... futex resumed>) = 0 [pid 394] chdir("./file0" [pid 382] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 381] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... chdir resumed>) = 0 [pid 382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 381] <... futex resumed>) = 0 [pid 402] <... write resumed>) = 1048576 [pid 394] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 387] <... close resumed>) = 0 [pid 381] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] munmap(0x7f391b0c1000, 138412032 [pid 394] <... openat resumed>) = 4 [pid 393] <... openat resumed>) = 3 [pid 387] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 381] <... futex resumed>) = 0 [pid 402] <... munmap resumed>) = 0 [pid 393] chdir("./file0" [pid 387] <... futex resumed>) = 1 [pid 383] <... futex resumed>) = 0 [pid 402] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 393] <... chdir resumed>) = 0 [pid 387] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 383] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... openat resumed>) = 4 [pid 393] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] <... futex resumed>) = 0 [pid 402] ioctl(4, LOOP_SET_FD, 3 [pid 393] <... openat resumed>) = 4 [pid 387] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 383] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... ioctl resumed>) = 0 [pid 394] ioctl(4, LOOP_CLR_FD [pid 393] ioctl(4, LOOP_CLR_FD [pid 387] <... open resumed>) = 4 [pid 402] close(3 [pid 393] <... ioctl resumed>) = 0 [pid 402] <... close resumed>) = 0 [pid 393] close(4 [pid 402] close(4 [pid 393] <... close resumed>) = 0 [pid 402] <... close resumed>) = 0 [pid 393] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] mkdir("./file0", 0777 [pid 393] <... futex resumed>) = 1 [pid 389] <... futex resumed>) = 0 [pid 402] <... mkdir resumed>) = 0 [pid 393] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 389] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 389] <... futex resumed>) = 0 [pid 393] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 389] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... ioctl resumed>) = 0 [pid 394] close(4) = 0 [pid 394] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 390] <... futex resumed>) = 0 [pid 394] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] <... open resumed>) = 4 [pid 390] <... futex resumed>) = 0 [pid 387] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 393] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 383] <... futex resumed>) = 0 [pid 394] <... open resumed>) = 4 [pid 393] <... futex resumed>) = 1 [pid 389] <... futex resumed>) = 0 [pid 387] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 383] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] +++ killed by SIGBUS +++ [pid 381] +++ killed by SIGBUS +++ [pid 394] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 389] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] <... futex resumed>) = 0 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=381, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 394] <... futex resumed>) = 1 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] <... futex resumed>) = 0 [pid 389] <... futex resumed>) = 0 [pid 387] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 383] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 390] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... write resumed>) = 9 [pid 394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] <... write resumed>) = 9 [pid 390] <... futex resumed>) = 0 [pid 387] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 394] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 393] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 394] <... write resumed>) = 9 [pid 387] <... futex resumed>) = 1 [pid 383] <... futex resumed>) = 0 [pid 290] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 394] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 1 [pid 389] <... futex resumed>) = 0 [pid 387] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 383] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... openat resumed>) = 3 [pid 394] <... futex resumed>) = 1 [pid 393] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] <... futex resumed>) = 0 [pid 389] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] <... futex resumed>) = 0 [pid 290] newfstatat(3, "", [pid 394] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 0 [pid 387] creat("./bus", 000 [pid 383] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] creat("./bus", 000 [pid 390] <... futex resumed>) = 0 [pid 389] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... creat resumed>) = 5 [pid 290] getdents64(3, [pid 394] creat("./bus", 000 [pid 393] <... creat resumed>) = 5 [pid 390] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 394] <... creat resumed>) = 5 [pid 393] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = 1 [pid 383] <... futex resumed>) = 0 [pid 290] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 394] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 1 [pid 389] <... futex resumed>) = 0 [pid 387] creat("./bus", 000 [pid 383] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 394] <... futex resumed>) = 1 [pid 393] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] <... futex resumed>) = 0 [pid 389] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... creat resumed>) = 6 [pid 383] <... futex resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./3/binderfs", [pid 394] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 0 [pid 387] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 23.591172][ T387] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 23.601346][ T394] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 23.610843][ T393] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 23.622725][ T382] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] creat("./bus", 000 [pid 390] <... futex resumed>) = 0 [pid 389] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 0 [pid 383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 290] unlink("./3/binderfs" [pid 402] <... mount resumed>) = 0 [pid 394] creat("./bus", 000 [pid 393] <... creat resumed>) = 6 [pid 390] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 383] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 394] <... creat resumed>) = 6 [pid 393] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] <... futex resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 402] <... openat resumed>) = 3 [pid 394] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 1 [pid 389] <... futex resumed>) = 0 [pid 387] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 383] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 402] chdir("./file0" [pid 394] <... futex resumed>) = 1 [pid 393] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] <... futex resumed>) = 0 [pid 389] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... open resumed>) = 7 [pid 394] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 389] <... futex resumed>) = 0 [pid 387] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 390] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 383] <... futex resumed>) = 0 [pid 394] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 393] <... open resumed>) = 7 [pid 390] <... futex resumed>) = 0 [pid 387] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 383] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] <... futex resumed>) = 0 [pid 393] <... futex resumed>) = 1 [pid 389] <... futex resumed>) = 0 [pid 387] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 383] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... open resumed>) = 7 [pid 393] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... mmap resumed>) = 0x20000000 [pid 394] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 389] <... futex resumed>) = 0 [pid 387] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... chdir resumed>) = 0 [pid 394] <... futex resumed>) = 0 [pid 393] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 390] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 383] <... futex resumed>) = 0 [pid 402] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 394] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 393] <... mmap resumed>) = 0x20000000 [pid 390] <... futex resumed>) = 0 [pid 387] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 383] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... mmap resumed>) = 0x20000000 [pid 393] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] <... futex resumed>) = 0 [pid 394] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = 1 [pid 390] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 389] <... futex resumed>) = 0 [pid 387] ftruncate(6, 31 [pid 383] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 0 [pid 393] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... ftruncate resumed>) = 0 [pid 394] ftruncate(6, 31 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] <... futex resumed>) = 0 [pid 389] <... futex resumed>) = 0 [pid 387] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... ftruncate resumed>) = 0 [pid 393] ftruncate(6, 31 [pid 390] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 383] <... futex resumed>) = 0 [pid 394] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... ftruncate resumed>) = 0 [pid 390] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 387] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 383] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... futex resumed>) = 0 [ 23.667789][ T402] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 23.693277][ T394] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 393] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] <... futex resumed>) = 0 [pid 394] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 393] <... futex resumed>) = 1 [pid 390] <... futex resumed>) = 0 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234a0000 [pid 389] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE [pid 394] +++ killed by SIGBUS +++ [pid 390] +++ killed by SIGBUS +++ [pid 389] <... mprotect resumed>) = 0 [pid 387] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=390, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 387] +++ killed by SIGBUS +++ [pid 383] +++ killed by SIGBUS +++ [pid 289] <... restart_syscall resumed>) = 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=383, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 289] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 289] newfstatat(3, "", [pid 291] newfstatat(3, "", [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 291] getdents64(3, [pid 289] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 291] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 289] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./3/binderfs", [pid 291] newfstatat(AT_FDCWD, "./3/binderfs", [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./3/binderfs" [pid 291] unlink("./3/binderfs" [pid 289] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 289] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 389] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 389] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[409]}, 88) = 409 [pid 389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 389] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... openat resumed>) = 4 [pid 290] <... umount2 resumed>) = 0 [pid 402] ioctl(4, LOOP_CLR_FD [pid 290] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 409 attached [pid 402] <... ioctl resumed>) = 0 [pid 393] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 409] set_robust_list(0x7f39234c09a0, 24) = ? [pid 402] close(4 [pid 389] <... futex resumed>) = ? [pid 409] +++ killed by SIGBUS +++ [pid 402] <... close resumed>) = 0 [pid 393] +++ killed by SIGBUS +++ [pid 389] +++ killed by SIGBUS +++ [pid 402] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=389, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 402] <... futex resumed>) = 1 [pid 400] <... futex resumed>) = 0 [pid 402] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] newfstatat(AT_FDCWD, "./3/file0", [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] <... futex resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 402] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 400] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 402] <... open resumed>) = 4 [pid 290] getdents64(4, [pid 402] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 402] <... futex resumed>) = 1 [pid 400] <... futex resumed>) = 0 [pid 290] close(4 [pid 402] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] <... futex resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 402] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 400] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] rmdir("./3/file0" [pid 402] <... write resumed>) = 9 [pid 288] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 402] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 402] <... futex resumed>) = 1 [pid 400] <... futex resumed>) = 0 [pid 288] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... rmdir resumed>) = 0 [pid 402] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... openat resumed>) = 3 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] <... futex resumed>) = 0 [pid 290] getdents64(3, [pid 288] newfstatat(3, "", [pid 402] creat("./bus", 000 [pid 400] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 402] <... creat resumed>) = 5 [pid 290] close(3 [pid 288] getdents64(3, [pid 402] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... close resumed>) = 0 [pid 288] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 402] <... futex resumed>) = 1 [pid 400] <... futex resumed>) = 0 [pid 290] rmdir("./3" [pid 288] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 402] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] <... futex resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 288] newfstatat(AT_FDCWD, "./3/binderfs", [pid 402] creat("./bus", 000 [pid 400] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] mkdir("./4", 0777 [pid 288] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 402] <... creat resumed>) = 6 [pid 288] unlink("./3/binderfs" [pid 402] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... mkdir resumed>) = 0 [pid 288] <... unlink resumed>) = 0 [pid 402] <... futex resumed>) = 1 [pid 400] <... futex resumed>) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 288] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 402] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] <... futex resumed>) = 0 [pid 402] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 400] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... open resumed>) = 7 [pid 402] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 402] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] <... futex resumed>) = 0 [pid 402] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 400] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... mmap resumed>) = 0x20000000 [pid 402] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 402] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] <... futex resumed>) = 0 [pid 402] ftruncate(6, 31 [pid 400] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... ftruncate resumed>) = 0 [pid 402] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 402] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] <... futex resumed>) = 0 [ 23.693496][ T387] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.710630][ T393] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 402] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 400] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = ? [pid 402] +++ killed by SIGBUS +++ [pid 400] +++ killed by SIGBUS +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=400, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] newfstatat(AT_FDCWD, "./3/file0", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... openat resumed>) = 3 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(3, "", [pid 291] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... openat resumed>) = 4 [pid 292] getdents64(3, [pid 291] newfstatat(4, "", [pid 292] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] getdents64(4, [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 292] newfstatat(AT_FDCWD, "./4/binderfs", [pid 291] getdents64(4, [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 292] unlink("./4/binderfs" [pid 291] close(4 [pid 292] <... unlink resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 292] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] rmdir("./3/file0") = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./3") = 0 [pid 291] mkdir("./4", 0777) = 0 [ 23.753897][ T402] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 290] <... openat resumed>) = 3 [pid 290] ioctl(3, LOOP_CLR_FD [pid 292] <... umount2 resumed>) = 0 [pid 289] <... umount2 resumed>) = 0 [pid 292] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./4/file0", [pid 289] newfstatat(AT_FDCWD, "./3/file0", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... openat resumed>) = 4 [pid 289] <... openat resumed>) = 4 [pid 292] newfstatat(4, "", [pid 289] newfstatat(4, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, [pid 289] getdents64(4, [pid 292] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 289] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, [pid 289] getdents64(4, [pid 292] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 292] close(4 [pid 289] close(4 [pid 292] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 289] rmdir("./3/file0" [pid 292] rmdir("./4/file0" [pid 289] <... rmdir resumed>) = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./3" [pid 292] <... rmdir resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 289] mkdir("./4", 0777 [pid 292] close(3) = 0 [pid 292] rmdir("./4") = 0 [pid 289] <... mkdir resumed>) = 0 [pid 292] mkdir("./5", 0777 [pid 289] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 292] <... mkdir resumed>) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 291] <... openat resumed>) = 3 [pid 290] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 288] <... umount2 resumed>) = 0 [pid 292] ioctl(3, LOOP_CLR_FD [pid 291] ioctl(3, LOOP_CLR_FD [pid 290] close(3 [pid 289] <... openat resumed>) = 3 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 290] <... close resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 410 ./strace-static-x86_64: Process 410 attached [pid 410] set_robust_list(0x5555568d86a0, 24) = 0 [pid 410] chdir("./5") = 0 [pid 410] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 410] setpgid(0, 0) = 0 [pid 410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 410] write(3, "1000", 4 [pid 291] close(3 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] ioctl(3, LOOP_CLR_FD [pid 288] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... close resumed>) = 0 [pid 410] <... write resumed>) = 4 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 410] close(3 [pid 290] <... clone resumed>, child_tidptr=0x5555568d8690) = 411 [pid 289] close(3 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... clone resumed>, child_tidptr=0x5555568d8690) = 412 [pid 289] <... close resumed>) = 0 [pid 288] newfstatat(AT_FDCWD, "./3/file0", [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 410] <... close resumed>) = 0 [pid 410] symlink("/dev/binderfs", "./binderfs") = 0 [pid 410] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... clone resumed>, child_tidptr=0x5555568d8690) = 413 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 410] <... futex resumed>) = 0 [pid 410] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 410] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 288] <... openat resumed>) = 4 [pid 288] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 288] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 288] close(4) = 0 [pid 288] rmdir("./3/file0" [pid 410] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 288] <... rmdir resumed>) = 0 [pid 288] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 288] close(3) = 0 [pid 288] rmdir("./3" [pid 410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 288] <... rmdir resumed>) = 0 [pid 410] <... mmap resumed>) = 0x7f39234c1000 [pid 288] mkdir("./4", 0777 [pid 410] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 288] <... mkdir resumed>) = 0 [pid 410] rt_sigprocmask(SIG_BLOCK, ~[], [pid 288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 410] <... rt_sigprocmask resumed>[], 8) = 0 [pid 410] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 288] <... openat resumed>) = 3 ./strace-static-x86_64: Process 413 attached [pid 288] ioctl(3, LOOP_CLR_FD [pid 413] set_robust_list(0x5555568d86a0, 24 [pid 288] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 410] <... clone3 resumed> => {parent_tid=[414]}, 88) = 414 [pid 288] close(3./strace-static-x86_64: Process 411 attached [pid 413] <... set_robust_list resumed>) = 0 [pid 410] rt_sigprocmask(SIG_SETMASK, [], [pid 413] chdir("./4" [pid 411] set_robust_list(0x5555568d86a0, 24 [pid 410] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 288] <... close resumed>) = 0 ./strace-static-x86_64: Process 412 attached [pid 410] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 412] set_robust_list(0x5555568d86a0, 24 [pid 410] <... futex resumed>) = 0 [pid 412] <... set_robust_list resumed>) = 0 [pid 410] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 412] chdir("./4") = 0 [pid 288] <... clone resumed>, child_tidptr=0x5555568d8690) = 415 [pid 412] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 413] <... chdir resumed>) = 0 [pid 412] <... prctl resumed>) = 0 [pid 411] <... set_robust_list resumed>) = 0 [pid 412] setpgid(0, 0) = 0 [pid 412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 413] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 412] write(3, "1000", 4 [pid 411] chdir("./4" [pid 413] <... prctl resumed>) = 0 [pid 412] <... write resumed>) = 4 [pid 411] <... chdir resumed>) = 0 [pid 412] close(3 [pid 413] setpgid(0, 0 [pid 411] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 413] <... setpgid resumed>) = 0 [pid 412] <... close resumed>) = 0 [pid 411] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 414 attached [pid 412] symlink("/dev/binderfs", "./binderfs" [pid 414] set_robust_list(0x7f39234e19a0, 24 [pid 412] <... symlink resumed>) = 0 [pid 414] <... set_robust_list resumed>) = 0 [pid 413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 412] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] setpgid(0, 0 [pid 414] rt_sigprocmask(SIG_SETMASK, [], [pid 413] <... openat resumed>) = 3 [pid 412] <... futex resumed>) = 0 [pid 411] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 415 attached [pid 414] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 413] write(3, "1000", 4 [pid 412] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 415] set_robust_list(0x5555568d86a0, 24 [pid 414] memfd_create("syzkaller", 0 [pid 413] <... write resumed>) = 4 [pid 412] <... rt_sigaction resumed>NULL, 8) = 0 [pid 411] <... openat resumed>) = 3 [pid 414] <... memfd_create resumed>) = 3 [pid 412] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 413] close(3 [pid 412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 411] write(3, "1000", 4 [pid 414] <... mmap resumed>) = 0x7f391b0c1000 [pid 413] <... close resumed>) = 0 [pid 412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 415] <... set_robust_list resumed>) = 0 [pid 413] symlink("/dev/binderfs", "./binderfs" [pid 412] <... mmap resumed>) = 0x7f39234c1000 [pid 411] <... write resumed>) = 4 [pid 415] chdir("./4" [pid 413] <... symlink resumed>) = 0 [pid 412] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 411] close(3 [pid 415] <... chdir resumed>) = 0 [pid 413] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... close resumed>) = 0 [pid 412] <... mprotect resumed>) = 0 [pid 415] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 413] <... futex resumed>) = 0 [pid 411] symlink("/dev/binderfs", "./binderfs" [pid 415] <... prctl resumed>) = 0 [pid 413] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 412] rt_sigprocmask(SIG_BLOCK, ~[], [pid 411] <... symlink resumed>) = 0 [pid 415] setpgid(0, 0 [pid 413] <... rt_sigaction resumed>NULL, 8) = 0 [pid 412] <... rt_sigprocmask resumed>[], 8) = 0 [pid 411] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] <... setpgid resumed>) = 0 [pid 413] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 411] <... futex resumed>) = 0 [pid 415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 411] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 415] <... openat resumed>) = 3 [pid 413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 411] <... rt_sigaction resumed>NULL, 8) = 0 [pid 415] write(3, "1000", 4 [pid 413] <... mmap resumed>) = 0x7f39234c1000 [pid 412] <... clone3 resumed> => {parent_tid=[416]}, 88) = 416 [pid 411] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 415] <... write resumed>) = 4 [pid 413] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 412] rt_sigprocmask(SIG_SETMASK, [], [pid 411] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 415] close(3 [pid 413] <... mprotect resumed>) = 0 [pid 412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 415] <... close resumed>) = 0 [pid 413] rt_sigprocmask(SIG_BLOCK, ~[], [pid 412] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... mmap resumed>) = 0x7f39234c1000 [pid 415] symlink("/dev/binderfs", "./binderfs" [pid 413] <... rt_sigprocmask resumed>[], 8) = 0 [pid 412] <... futex resumed>) = 0 [pid 411] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 415] <... symlink resumed>) = 0 [pid 413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 412] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 411] <... mprotect resumed>) = 0 [pid 415] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] rt_sigprocmask(SIG_BLOCK, ~[], [pid 415] <... futex resumed>) = 0 [pid 413] <... clone3 resumed> => {parent_tid=[417]}, 88) = 417 [pid 411] <... rt_sigprocmask resumed>[], 8) = 0 [pid 415] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 413] rt_sigprocmask(SIG_SETMASK, [], [pid 411] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 415] <... rt_sigaction resumed>NULL, 8) = 0 [pid 413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 415] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 413] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... clone3 resumed> => {parent_tid=[418]}, 88) = 418 [pid 415] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 413] <... futex resumed>) = 0 [pid 411] rt_sigprocmask(SIG_SETMASK, [], [pid 415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 413] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 411] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 415] <... mmap resumed>) = 0x7f39234c1000 [pid 411] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 411] <... futex resumed>) = 0 [pid 415] <... mprotect resumed>) = 0 [pid 411] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 415] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 415] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[419]}, 88) = 419 [pid 415] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 415] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 416 attached [pid 415] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 416] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 416] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 416] memfd_create("syzkaller", 0 [pid 414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 416] <... memfd_create resumed>) = 3 [pid 416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 ./strace-static-x86_64: Process 419 attached ./strace-static-x86_64: Process 418 attached ./strace-static-x86_64: Process 417 attached [pid 416] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 414] <... write resumed>) = 1048576 [pid 419] set_robust_list(0x7f39234e19a0, 24 [pid 418] set_robust_list(0x7f39234e19a0, 24 [pid 417] set_robust_list(0x7f39234e19a0, 24 [pid 414] munmap(0x7f391b0c1000, 138412032 [pid 419] <... set_robust_list resumed>) = 0 [pid 418] <... set_robust_list resumed>) = 0 [pid 417] <... set_robust_list resumed>) = 0 [pid 414] <... munmap resumed>) = 0 [pid 418] rt_sigprocmask(SIG_SETMASK, [], [pid 417] rt_sigprocmask(SIG_SETMASK, [], [pid 418] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 417] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 414] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 419] rt_sigprocmask(SIG_SETMASK, [], [pid 418] memfd_create("syzkaller", 0 [pid 417] memfd_create("syzkaller", 0 [pid 419] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 418] <... memfd_create resumed>) = 3 [pid 417] <... memfd_create resumed>) = 3 [pid 414] <... openat resumed>) = 4 [pid 418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 414] ioctl(4, LOOP_SET_FD, 3 [pid 418] <... mmap resumed>) = 0x7f391b0c1000 [pid 417] <... mmap resumed>) = 0x7f391b0c1000 [pid 419] memfd_create("syzkaller", 0 [pid 416] <... write resumed>) = 1048576 [pid 419] <... memfd_create resumed>) = 3 [pid 419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 414] <... ioctl resumed>) = 0 [pid 414] close(3) = 0 [pid 414] close(4 [pid 416] munmap(0x7f391b0c1000, 138412032) = 0 [pid 416] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 419] <... write resumed>) = 1048576 [pid 418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 417] <... write resumed>) = 1048576 [pid 416] <... openat resumed>) = 4 [pid 419] munmap(0x7f391b0c1000, 138412032 [pid 418] <... write resumed>) = 1048576 [pid 417] munmap(0x7f391b0c1000, 138412032 [pid 416] ioctl(4, LOOP_SET_FD, 3 [pid 419] <... munmap resumed>) = 0 [pid 418] munmap(0x7f391b0c1000, 138412032 [pid 417] <... munmap resumed>) = 0 [pid 419] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 418] <... munmap resumed>) = 0 [pid 417] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 416] <... ioctl resumed>) = 0 [pid 416] close(3 [pid 414] <... close resumed>) = 0 [pid 416] <... close resumed>) = 0 [pid 414] mkdir("./file0", 0777 [pid 418] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 416] close(4 [pid 414] <... mkdir resumed>) = 0 [pid 414] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 419] <... openat resumed>) = 4 [pid 418] <... openat resumed>) = 4 [pid 417] <... openat resumed>) = 4 [pid 416] <... close resumed>) = 0 [pid 419] ioctl(4, LOOP_SET_FD, 3 [pid 416] mkdir("./file0", 0777 [pid 418] ioctl(4, LOOP_SET_FD, 3 [pid 417] ioctl(4, LOOP_SET_FD, 3 [pid 416] <... mkdir resumed>) = 0 [pid 416] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 419] <... ioctl resumed>) = 0 [pid 418] <... ioctl resumed>) = 0 [pid 419] close(3 [pid 418] close(3 [pid 419] <... close resumed>) = 0 [pid 419] close(4 [pid 418] <... close resumed>) = 0 [pid 417] <... ioctl resumed>) = 0 [pid 418] close(4 [pid 417] close(3) = 0 [pid 417] close(4 [pid 414] <... mount resumed>) = 0 [pid 414] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 414] chdir("./file0") = 0 [pid 414] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 419] <... close resumed>) = 0 [pid 419] mkdir("./file0", 0777) = 0 [pid 419] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 416] <... mount resumed>) = 0 [pid 416] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 416] chdir("./file0") = 0 [pid 416] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 418] <... close resumed>) = 0 [pid 417] <... close resumed>) = 0 [pid 414] <... openat resumed>) = 4 [pid 418] mkdir("./file0", 0777 [pid 417] mkdir("./file0", 0777 [pid 418] <... mkdir resumed>) = 0 [pid 417] <... mkdir resumed>) = 0 [pid 414] ioctl(4, LOOP_CLR_FD [pid 418] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [ 24.071590][ T414] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 24.101891][ T416] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 417] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 416] <... openat resumed>) = 4 [pid 416] ioctl(4, LOOP_CLR_FD [pid 414] <... ioctl resumed>) = 0 [pid 416] <... ioctl resumed>) = 0 [pid 414] close(4) = 0 [pid 414] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 414] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 416] close(4 [pid 414] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 410] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 414] <... open resumed>) = 4 [pid 416] <... close resumed>) = 0 [pid 414] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 416] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 1 [pid 410] <... futex resumed>) = 0 [pid 416] <... futex resumed>) = 1 [pid 414] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] <... futex resumed>) = 0 [pid 410] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 416] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = 0 [pid 414] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 410] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] <... futex resumed>) = 0 [pid 416] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 414] <... write resumed>) = 9 [pid 412] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 416] <... open resumed>) = 4 [pid 414] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 416] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 1 [pid 410] <... futex resumed>) = 0 [pid 416] <... futex resumed>) = 1 [pid 414] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] <... futex resumed>) = 0 [pid 410] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 416] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = 0 [pid 416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 414] creat("./bus", 000 [pid 412] <... futex resumed>) = 0 [pid 410] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 416] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 414] <... creat resumed>) = 5 [pid 412] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 416] <... write resumed>) = 9 [pid 414] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 416] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 1 [pid 410] <... futex resumed>) = 0 [pid 416] <... futex resumed>) = 1 [pid 414] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] <... futex resumed>) = 0 [pid 410] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 416] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = 0 [pid 416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 414] creat("./bus", 000 [pid 412] <... futex resumed>) = 0 [pid 410] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 416] creat("./bus", 000 [pid 414] <... creat resumed>) = 6 [pid 412] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 416] <... creat resumed>) = 5 [pid 414] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 414] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 414] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 410] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 414] <... open resumed>) = 7 [pid 414] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 414] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 414] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 410] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 414] <... mmap resumed>) = 0x20000000 [pid 414] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 414] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 414] ftruncate(6, 31 [pid 410] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 414] <... ftruncate resumed>) = 0 [pid 414] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 414] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 419] <... mount resumed>) = 0 [pid 418] <... mount resumed>) = 0 [pid 416] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234a0000 [pid 410] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 410] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 410] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[435]}, 88) = 435 [pid 410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 410] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 416] <... futex resumed>) = 1 [pid 412] <... futex resumed>) = 0 [pid 419] <... openat resumed>) = 3 [pid 418] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 416] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] chdir("./file0" [pid 416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] <... futex resumed>) = 0 ./strace-static-x86_64: Process 435 attached [pid 419] <... chdir resumed>) = 0 [pid 418] <... openat resumed>) = 3 [pid 417] <... mount resumed>) = 0 [pid 416] creat("./bus", 000 [pid 412] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 414] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 419] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 418] chdir("./file0" [pid 417] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 416] <... creat resumed>) = 6 [pid 410] <... futex resumed>) = ? [pid 419] <... openat resumed>) = 4 [pid 416] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... chdir resumed>) = 0 [pid 417] <... openat resumed>) = 3 [pid 419] ioctl(4, LOOP_CLR_FD) = 0 [pid 419] close(4) = 0 [pid 418] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 417] chdir("./file0" [pid 416] <... futex resumed>) = 1 [pid 412] <... futex resumed>) = 0 [pid 416] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 412] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 416] <... open resumed>) = 7 [pid 412] <... futex resumed>) = 0 [pid 416] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 416] <... futex resumed>) = 0 [pid 412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 416] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] <... futex resumed>) = 0 [pid 416] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 412] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 416] <... mmap resumed>) = 0x20000000 [pid 416] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 416] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] <... futex resumed>) = 0 [pid 416] ftruncate(6, 31 [pid 412] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 416] <... ftruncate resumed>) = 0 [pid 416] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 416] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [ 24.256079][ T419] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 24.263025][ T414] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.272469][ T418] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 24.280174][ T417] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 412] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... openat resumed>) = 4 [pid 416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] <... futex resumed>) = 0 [pid 419] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... chdir resumed>) = 0 [pid 419] <... futex resumed>) = 1 [pid 415] <... futex resumed>) = 0 [pid 419] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 415] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 417] <... openat resumed>) = 4 [pid 415] <... futex resumed>) = 0 [pid 419] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 417] ioctl(4, LOOP_CLR_FD [pid 415] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 417] <... ioctl resumed>) = 0 [pid 417] close(4) = 0 [pid 417] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 413] <... futex resumed>) = 0 [pid 417] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 413] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... open resumed>) = 4 [pid 413] <... futex resumed>) = 0 [pid 417] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 417] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 417] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 413] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] <... open resumed>) = 4 [pid 418] ioctl(4, LOOP_CLR_FD [pid 417] <... write resumed>) = 9 [pid 413] <... futex resumed>) = 0 [pid 412] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... ioctl resumed>) = 0 [pid 417] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 412] <... futex resumed>) = 0 [pid 419] <... futex resumed>) = 1 [pid 418] close(4 [pid 417] <... futex resumed>) = 0 [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 435] +++ killed by SIGBUS +++ [pid 419] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] <... close resumed>) = 0 [pid 417] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 416] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 415] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... mmap resumed>) = 0x7f39234a0000 [pid 419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 418] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = 0 [pid 412] read(593155840, [pid 419] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 418] <... futex resumed>) = 1 [pid 417] creat("./bus", 000 [pid 415] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 414] +++ killed by SIGBUS +++ [pid 413] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 0 [pid 410] +++ killed by SIGBUS +++ [pid 419] <... write resumed>) = 9 [pid 418] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] <... creat resumed>) = 5 [pid 416] +++ killed by SIGBUS +++ [pid 412] +++ killed by SIGBUS +++ [pid 411] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 417] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=410, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=412, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 419] <... futex resumed>) = 1 [pid 418] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 417] <... futex resumed>) = 1 [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = 0 [pid 411] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 419] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] <... open resumed>) = 4 [pid 417] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 415] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... restart_syscall resumed>) = 0 [pid 419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 418] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = 0 [pid 292] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 419] creat("./bus", 000 [pid 418] <... futex resumed>) = 1 [pid 417] creat("./bus", 000 [pid 415] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 419] <... creat resumed>) = 5 [pid 418] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] <... creat resumed>) = 6 [pid 411] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] newfstatat(3, "", [pid 291] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 419] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 417] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 419] <... futex resumed>) = 1 [pid 418] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 417] <... futex resumed>) = 1 [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = 0 [pid 411] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] getdents64(3, [pid 291] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 419] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] <... write resumed>) = 9 [pid 417] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 415] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 291] <... openat resumed>) = 3 [pid 419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 418] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = 0 [pid 292] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] newfstatat(3, "", [pid 419] creat("./bus", 000 [pid 418] <... futex resumed>) = 1 [pid 417] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 415] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 419] <... creat resumed>) = 6 [pid 418] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] <... open resumed>) = 7 [pid 411] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] newfstatat(AT_FDCWD, "./5/binderfs", [pid 291] getdents64(3, [pid 419] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 417] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 419] <... futex resumed>) = 1 [pid 418] creat("./bus", 000 [pid 417] <... futex resumed>) = 1 [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = 0 [pid 411] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] unlink("./5/binderfs" [pid 291] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 419] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] <... creat resumed>) = 5 [pid 417] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 415] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 418] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./4/binderfs", [pid 419] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 418] <... futex resumed>) = 1 [pid 417] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 415] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 0 [pid 292] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 419] <... open resumed>) = 7 [pid 418] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] <... mmap resumed>) = 0x20000000 [pid 411] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] unlink("./4/binderfs" [pid 419] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 417] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 419] <... futex resumed>) = 1 [pid 418] creat("./bus", 000 [pid 417] <... futex resumed>) = 1 [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = 0 [pid 411] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 419] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] <... creat resumed>) = 6 [pid 417] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 415] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 418] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = 0 [pid 419] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 418] <... futex resumed>) = 1 [pid 417] ftruncate(6, 31 [pid 415] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 0 [pid 419] <... mmap resumed>) = 0x20000000 [pid 418] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] <... ftruncate resumed>) = 0 [pid 411] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 417] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 419] <... futex resumed>) = 1 [pid 418] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 417] <... futex resumed>) = 1 [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = 0 [pid 411] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] <... open resumed>) = 7 [pid 417] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 415] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [ 24.308932][ T416] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 413] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 418] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = 0 [pid 419] ftruncate(6, 31 [pid 418] <... futex resumed>) = 1 [pid 413] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 418] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] <... futex resumed>) = 0 [pid 411] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 411] <... futex resumed>) = 0 [pid 418] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 411] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... mmap resumed>) = 0x20000000 [pid 418] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 411] <... futex resumed>) = 0 [pid 418] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 411] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 411] <... futex resumed>) = 0 [pid 418] ftruncate(6, 31 [pid 411] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 418] <... ftruncate resumed>) = 0 [pid 418] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 411] <... futex resumed>) = 0 [pid 418] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 411] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 411] <... futex resumed>) = 0 [pid 419] <... ftruncate resumed>) = 0 [pid 417] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 413] <... mmap resumed>) = 0x7f39234a0000 [pid 419] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 419] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] +++ killed by SIGBUS +++ [pid 413] +++ killed by SIGBUS +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=413, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 415] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 415] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] <... futex resumed>) = 0 [pid 415] <... futex resumed>) = 1 [pid 418] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 411] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] +++ killed by SIGBUS +++ [pid 411] +++ killed by SIGBUS +++ [pid 289] <... restart_syscall resumed>) = 0 [pid 289] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 289] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./4/binderfs") = 0 [pid 289] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=411, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 290] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./4/binderfs") = 0 [pid 290] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 415] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 415] <... mmap resumed>) = 0x7f39234a0000 [pid 419] +++ killed by SIGBUS +++ [pid 415] +++ killed by SIGBUS +++ [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=415, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 288] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 288] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 288] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 288] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./4/binderfs") = 0 [pid 288] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./5/file0") = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./5") = 0 [pid 292] mkdir("./6", 0777) = 0 [ 24.348650][ T417] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.349993][ T418] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.373003][ T419] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 291] <... umount2 resumed>) = 0 [pid 289] <... umount2 resumed>) = 0 [pid 291] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./4/file0") = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./4") = 0 [pid 291] mkdir("./5", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] <... umount2 resumed>) = 0 [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 437 ./strace-static-x86_64: Process 437 attached [pid 437] set_robust_list(0x5555568d86a0, 24) = 0 [pid 437] chdir("./5") = 0 [pid 437] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 437] setpgid(0, 0) = 0 [pid 437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 437] write(3, "1000", 4) = 4 [pid 437] close(3) = 0 [pid 437] symlink("/dev/binderfs", "./binderfs") = 0 [pid 437] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 437] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 437] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 437] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 437] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 437] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[438]}, 88) = 438 [pid 437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 437] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 438 attached [pid 438] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] memfd_create("syzkaller", 0) = 3 [pid 438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 289] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] <... umount2 resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./4/file0", [pid 290] newfstatat(AT_FDCWD, "./4/file0", [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./4/file0", [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... openat resumed>) = 3 [pid 290] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 288] <... openat resumed>) = 4 [pid 292] ioctl(3, LOOP_CLR_FD [pid 290] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 288] newfstatat(4, "", [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 290] <... openat resumed>) = 4 [pid 289] <... openat resumed>) = 4 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(4, [pid 289] newfstatat(4, "", [pid 438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] newfstatat(4, "", [pid 288] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 292] close(3 [pid 288] getdents64(4, [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(4, [pid 292] <... close resumed>) = 0 [pid 288] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 288] close(4 [pid 289] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, [pid 289] getdents64(4, [pid 288] <... close resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 288] rmdir("./4/file0" [pid 289] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 438] <... write resumed>) = 1048576 [pid 438] munmap(0x7f391b0c1000, 138412032 [pid 289] close(4 [pid 288] <... rmdir resumed>) = 0 [pid 290] getdents64(4, [pid 438] <... munmap resumed>) = 0 [pid 438] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 288] getdents64(3, [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 439 [pid 290] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 289] <... close resumed>) = 0 [pid 288] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 289] rmdir("./4/file0" [pid 288] close(3 [pid 290] close(4 [pid 288] <... close resumed>) = 0 [pid 438] <... openat resumed>) = 4 [pid 438] ioctl(4, LOOP_SET_FD, 3 [pid 289] <... rmdir resumed>) = 0 [pid 288] rmdir("./4" [pid 290] <... close resumed>) = 0 [pid 289] getdents64(3, [pid 288] <... rmdir resumed>) = 0 [pid 288] mkdir("./5", 0777 [pid 290] rmdir("./4/file0" [pid 289] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 438] <... ioctl resumed>) = 0 [pid 288] <... mkdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 438] close(3) = 0 [pid 438] close(4) = 0 [pid 438] mkdir("./file0", 0777) = 0 [pid 288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 289] close(3 [pid 290] getdents64(3, [pid 438] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 288] <... openat resumed>) = 3 [pid 290] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 289] <... close resumed>) = 0 [pid 288] ioctl(3, LOOP_CLR_FD [pid 290] close(3 [pid 289] rmdir("./4" [pid 288] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 290] <... close resumed>) = 0 [pid 290] rmdir("./4" [pid 289] <... rmdir resumed>) = 0 [pid 288] close(3 [pid 290] <... rmdir resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 290] mkdir("./5", 0777 [pid 289] mkdir("./5", 0777 [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... mkdir resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 288] <... clone resumed>, child_tidptr=0x5555568d8690) = 441 [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 289] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 290] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 289] ioctl(3, LOOP_CLR_FD [pid 290] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 441 attached ./strace-static-x86_64: Process 439 attached ) = -1 ENXIO (No such device or address) [pid 289] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 290] close(3 [pid 289] close(3 [pid 290] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 439] set_robust_list(0x5555568d86a0, 24 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... clone resumed>, child_tidptr=0x5555568d8690) = 442 [pid 289] <... clone resumed>, child_tidptr=0x5555568d8690) = 443 [pid 439] <... set_robust_list resumed>) = 0 [pid 439] chdir("./6") = 0 [pid 439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 441] set_robust_list(0x5555568d86a0, 24 [pid 439] setpgid(0, 0./strace-static-x86_64: Process 442 attached ./strace-static-x86_64: Process 443 attached [pid 441] <... set_robust_list resumed>) = 0 [pid 439] <... setpgid resumed>) = 0 [pid 439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 441] chdir("./5") = 0 [pid 441] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 439] <... openat resumed>) = 3 [pid 441] <... prctl resumed>) = 0 [pid 441] setpgid(0, 0 [pid 439] write(3, "1000", 4 [pid 442] set_robust_list(0x5555568d86a0, 24 [pid 441] <... setpgid resumed>) = 0 [pid 443] set_robust_list(0x5555568d86a0, 24 [pid 442] <... set_robust_list resumed>) = 0 [pid 441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 439] <... write resumed>) = 4 [pid 443] <... set_robust_list resumed>) = 0 [pid 439] close(3 [pid 441] <... openat resumed>) = 3 [pid 442] chdir("./5" [pid 441] write(3, "1000", 4 [pid 439] <... close resumed>) = 0 [pid 442] <... chdir resumed>) = 0 [pid 443] chdir("./5" [pid 441] <... write resumed>) = 4 [pid 439] symlink("/dev/binderfs", "./binderfs" [pid 442] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 443] <... chdir resumed>) = 0 [pid 441] close(3 [pid 439] <... symlink resumed>) = 0 [pid 443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 442] <... prctl resumed>) = 0 [pid 441] <... close resumed>) = 0 [pid 443] <... prctl resumed>) = 0 [pid 439] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] symlink("/dev/binderfs", "./binderfs" [pid 439] <... futex resumed>) = 0 [pid 443] setpgid(0, 0 [pid 442] setpgid(0, 0 [pid 439] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 441] <... symlink resumed>) = 0 [pid 439] <... rt_sigaction resumed>NULL, 8) = 0 [pid 442] <... setpgid resumed>) = 0 [pid 443] <... setpgid resumed>) = 0 [pid 439] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 441] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 441] <... futex resumed>) = 0 [pid 439] <... mmap resumed>) = 0x7f39234c1000 [pid 443] <... openat resumed>) = 3 [pid 442] <... openat resumed>) = 3 [pid 441] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 439] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 439] rt_sigprocmask(SIG_BLOCK, ~[], [pid 441] <... rt_sigaction resumed>NULL, 8) = 0 [pid 441] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 439] <... rt_sigprocmask resumed>[], 8) = 0 [pid 441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 441] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 442] write(3, "1000", 4 [pid 441] <... mprotect resumed>) = 0 [pid 442] <... write resumed>) = 4 [pid 442] close(3 [pid 441] rt_sigprocmask(SIG_BLOCK, ~[], [pid 442] <... close resumed>) = 0 [pid 442] symlink("/dev/binderfs", "./binderfs") = 0 [pid 441] <... rt_sigprocmask resumed>[], 8) = 0 [pid 439] <... clone3 resumed> => {parent_tid=[444]}, 88) = 444 [pid 443] write(3, "1000", 4 [pid 442] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 439] rt_sigprocmask(SIG_SETMASK, [], [pid 443] <... write resumed>) = 4 [pid 442] <... futex resumed>) = 0 [pid 439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 443] close(3 [pid 442] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 441] <... clone3 resumed> => {parent_tid=[445]}, 88) = 445 [pid 439] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... close resumed>) = 0 [pid 442] <... rt_sigaction resumed>NULL, 8) = 0 [pid 441] rt_sigprocmask(SIG_SETMASK, [], [pid 439] <... futex resumed>) = 0 ./strace-static-x86_64: Process 444 attached [pid 443] symlink("/dev/binderfs", "./binderfs" [pid 442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 439] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 445 attached [pid 444] set_robust_list(0x7f39234e19a0, 24 [pid 443] <... symlink resumed>) = 0 [pid 442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 441] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] set_robust_list(0x7f39234e19a0, 24 [pid 444] <... set_robust_list resumed>) = 0 [pid 443] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 441] <... futex resumed>) = 0 [pid 443] <... futex resumed>) = 0 [pid 442] <... mmap resumed>) = 0x7f39234c1000 [pid 441] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 443] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 442] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 443] <... rt_sigaction resumed>NULL, 8) = 0 [pid 442] <... mprotect resumed>) = 0 [pid 443] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 442] rt_sigprocmask(SIG_BLOCK, ~[], [pid 443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 442] <... rt_sigprocmask resumed>[], 8) = 0 [pid 443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 443] <... mmap resumed>) = 0x7f39234c1000 [pid 443] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 442] <... clone3 resumed> => {parent_tid=[448]}, 88) = 448 [pid 443] <... mprotect resumed>) = 0 [pid 442] rt_sigprocmask(SIG_SETMASK, [], [pid 443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 442] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] <... clone3 resumed> => {parent_tid=[449]}, 88) = 449 [pid 442] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 443] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 445] <... set_robust_list resumed>) = 0 [pid 445] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 445] memfd_create("syzkaller", 0) = 3 [pid 445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 444] memfd_create("syzkaller", 0) = 3 [pid 444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 ./strace-static-x86_64: Process 449 attached ./strace-static-x86_64: Process 448 attached [pid 445] <... write resumed>) = 1048576 [pid 438] <... mount resumed>) = 0 [pid 449] set_robust_list(0x7f39234e19a0, 24 [pid 448] set_robust_list(0x7f39234e19a0, 24 [pid 445] munmap(0x7f391b0c1000, 138412032 [pid 438] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 449] <... set_robust_list resumed>) = 0 [pid 448] <... set_robust_list resumed>) = 0 [pid 445] <... munmap resumed>) = 0 [pid 438] <... openat resumed>) = 3 [pid 449] rt_sigprocmask(SIG_SETMASK, [], [pid 448] rt_sigprocmask(SIG_SETMASK, [], [pid 445] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 438] chdir("./file0" [pid 449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 445] <... openat resumed>) = 4 [pid 438] <... chdir resumed>) = 0 [pid 449] memfd_create("syzkaller", 0 [pid 448] memfd_create("syzkaller", 0 [pid 445] ioctl(4, LOOP_SET_FD, 3 [pid 438] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 449] <... memfd_create resumed>) = 3 [pid 448] <... memfd_create resumed>) = 3 [pid 449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 449] <... mmap resumed>) = 0x7f391b0c1000 [pid 448] <... mmap resumed>) = 0x7f391b0c1000 [pid 444] <... write resumed>) = 1048576 [pid 444] munmap(0x7f391b0c1000, 138412032) = 0 [pid 444] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 445] <... ioctl resumed>) = 0 [pid 444] <... openat resumed>) = 4 [pid 444] ioctl(4, LOOP_SET_FD, 3 [pid 445] close(3 [pid 438] <... openat resumed>) = 4 [pid 445] <... close resumed>) = 0 [pid 438] ioctl(4, LOOP_CLR_FD [pid 445] close(4 [pid 448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 444] <... ioctl resumed>) = 0 [pid 444] close(3) = 0 [pid 444] close(4) = 0 [pid 444] mkdir("./file0", 0777) = 0 [pid 445] <... close resumed>) = 0 [pid 444] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 438] <... ioctl resumed>) = 0 [pid 445] mkdir("./file0", 0777 [pid 438] close(4 [pid 449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 445] <... mkdir resumed>) = 0 [pid 445] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 449] <... write resumed>) = 1048576 [pid 449] munmap(0x7f391b0c1000, 138412032) = 0 [pid 449] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 448] <... write resumed>) = 1048576 [pid 448] munmap(0x7f391b0c1000, 138412032) = 0 [pid 448] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 444] <... mount resumed>) = 0 [pid 444] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 444] chdir("./file0") = 0 [pid 444] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 438] <... close resumed>) = 0 [pid 449] <... openat resumed>) = 4 [pid 448] <... openat resumed>) = 4 [pid 444] <... openat resumed>) = 4 [pid 438] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] ioctl(4, LOOP_SET_FD, 3 [pid 448] ioctl(4, LOOP_SET_FD, 3 [pid 438] <... futex resumed>) = 1 [pid 437] <... futex resumed>) = 0 [pid 437] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 437] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 448] <... ioctl resumed>) = 0 [pid 448] close(3) = 0 [pid 438] <... open resumed>) = 4 [pid 448] close(4 [pid 438] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 438] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 438] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 438] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 437] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 24.592581][ T438] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 24.631988][ T444] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 438] creat("./bus", 000) = 5 [pid 444] ioctl(4, LOOP_CLR_FD [pid 438] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... ioctl resumed>) = 0 [pid 438] <... futex resumed>) = 1 [pid 449] close(3 [pid 445] <... mount resumed>) = 0 [pid 438] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] <... futex resumed>) = 0 [pid 449] <... close resumed>) = 0 [pid 437] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] close(4 [pid 445] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 438] <... futex resumed>) = 0 [pid 437] <... futex resumed>) = 1 [pid 438] creat("./bus", 000 [pid 437] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... openat resumed>) = 3 [pid 438] <... creat resumed>) = 6 [pid 438] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 438] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] <... futex resumed>) = 0 [pid 438] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 437] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] chdir("./file0" [pid 438] <... open resumed>) = 7 [pid 438] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... chdir resumed>) = 0 [pid 438] <... futex resumed>) = 1 [pid 437] <... futex resumed>) = 0 [pid 445] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 438] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] <... futex resumed>) = 0 [pid 438] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 437] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... mmap resumed>) = 0x20000000 [pid 438] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 438] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] <... futex resumed>) = 0 [pid 438] ftruncate(6, 31 [pid 437] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... ftruncate resumed>) = 0 [pid 438] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 437] <... futex resumed>) = 0 [pid 438] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] <... futex resumed>) = 0 [pid 437] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 437] <... futex resumed>) = 0 [pid 448] <... close resumed>) = 0 [pid 448] mkdir("./file0", 0777 [pid 444] <... ioctl resumed>) = 0 [pid 448] <... mkdir resumed>) = 0 [pid 448] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 444] close(4 [pid 438] +++ killed by SIGBUS +++ [pid 437] +++ killed by SIGBUS +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=437, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./5/binderfs") = 0 [ 24.662135][ T445] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 24.677284][ T438] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 291] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 449] <... close resumed>) = 0 [pid 445] <... openat resumed>) = 4 [pid 445] ioctl(4, LOOP_CLR_FD) = 0 [pid 445] close(4) = 0 [pid 445] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 445] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] <... futex resumed>) = 0 [pid 449] mkdir("./file0", 0777 [pid 441] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... mkdir resumed>) = 0 [pid 441] <... futex resumed>) = 1 [pid 445] <... futex resumed>) = 0 [pid 449] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 445] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 441] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... open resumed>) = 4 [pid 445] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 441] <... futex resumed>) = 0 [pid 445] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] <... futex resumed>) = 0 [pid 445] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 441] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... write resumed>) = 9 [pid 445] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 441] <... futex resumed>) = 0 [pid 445] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] <... futex resumed>) = 0 [pid 445] creat("./bus", 000 [pid 441] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... creat resumed>) = 5 [pid 445] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 441] <... futex resumed>) = 0 [pid 445] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] <... futex resumed>) = 0 [pid 445] creat("./bus", 000 [pid 441] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... creat resumed>) = 6 [pid 445] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 441] <... futex resumed>) = 0 [pid 445] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] <... futex resumed>) = 0 [pid 445] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 441] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... open resumed>) = 7 [pid 445] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 441] <... futex resumed>) = 0 [pid 445] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] <... futex resumed>) = 0 [pid 445] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 441] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... mmap resumed>) = 0x20000000 [pid 445] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 441] <... futex resumed>) = 0 [pid 445] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] <... futex resumed>) = 0 [pid 445] ftruncate(6, 31 [pid 441] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... ftruncate resumed>) = 0 [pid 445] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 441] <... futex resumed>) = 0 [pid 445] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 441] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] <... futex resumed>) = 0 [pid 441] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 445] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 441] <... mmap resumed>) = 0x7f39234a0000 [pid 441] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = ? [pid 445] +++ killed by SIGBUS +++ [pid 441] +++ killed by SIGBUS +++ [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=441, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 288] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 288] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 288] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 288] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./5/binderfs") = 0 [pid 288] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 444] <... close resumed>) = 0 [pid 444] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 444] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 439] <... futex resumed>) = 0 [pid 444] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 439] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... open resumed>) = 4 [pid 444] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 444] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 439] <... futex resumed>) = 0 [pid 444] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 439] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... write resumed>) = 9 [pid 444] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 444] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 439] <... futex resumed>) = 0 [pid 444] creat("./bus", 000 [pid 439] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... creat resumed>) = 5 [pid 444] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 444] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 439] <... futex resumed>) = 0 [pid 444] creat("./bus", 000 [pid 439] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... creat resumed>) = 6 [pid 444] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 444] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 439] <... futex resumed>) = 0 [pid 444] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 439] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... open resumed>) = 7 [pid 444] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 444] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 439] <... futex resumed>) = 0 [pid 444] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 439] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... mmap resumed>) = 0x20000000 [pid 444] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 444] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 439] <... futex resumed>) = 0 [pid 444] ftruncate(6, 31 [pid 439] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 444] <... ftruncate resumed>) = 0 [pid 444] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] <... futex resumed>) = 0 [pid 444] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 24.750804][ T445] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234a0000 [pid 439] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE [pid 444] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 439] <... mprotect resumed>) = 0 [pid 444] +++ killed by SIGBUS +++ [pid 439] +++ killed by SIGBUS +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=439, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 292] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./6/binderfs") = 0 [pid 292] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 448] <... mount resumed>) = 0 [pid 448] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 448] chdir("./file0") = 0 [ 24.787186][ T444] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.803439][ T448] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 448] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 448] ioctl(4, LOOP_CLR_FD) = 0 [pid 448] close(4) = 0 [pid 448] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] <... futex resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 291] <... umount2 resumed>) = 0 [pid 288] <... umount2 resumed>) = 0 [pid 292] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./6/file0", [pid 288] newfstatat(AT_FDCWD, "./5/file0", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 288] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... openat resumed>) = 4 [pid 288] <... openat resumed>) = 4 [pid 292] newfstatat(4, "", [pid 288] newfstatat(4, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, [pid 288] getdents64(4, [pid 292] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 288] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, [pid 288] getdents64(4, [pid 292] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 288] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 292] close(4 [pid 288] close(4 [pid 292] <... close resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 292] rmdir("./6/file0" [pid 288] rmdir("./5/file0" [pid 292] <... rmdir resumed>) = 0 [pid 288] <... rmdir resumed>) = 0 [pid 292] getdents64(3, [pid 288] getdents64(3, [pid 292] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 288] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 442] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] close(3 [pid 291] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] close(3 [pid 442] <... futex resumed>) = 1 [pid 292] <... close resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... close resumed>) = 0 [pid 442] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] rmdir("./6" [pid 448] <... futex resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./5/file0", [pid 288] rmdir("./5" [pid 448] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 292] <... rmdir resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] <... rmdir resumed>) = 0 [pid 292] mkdir("./7", 0777 [pid 291] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] mkdir("./6", 0777 [pid 448] <... open resumed>) = 4 [pid 292] <... mkdir resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... mkdir resumed>) = 0 [pid 448] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 291] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 449] <... mount resumed>) = 0 [pid 448] <... futex resumed>) = 1 [pid 442] <... futex resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 4 [pid 288] <... openat resumed>) = 3 [pid 448] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] ioctl(3, LOOP_CLR_FD [pid 291] newfstatat(4, "", [pid 288] ioctl(3, LOOP_CLR_FD [pid 448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] <... futex resumed>) = 0 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 448] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 442] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] close(3 [pid 291] getdents64(4, [pid 288] close(3 [pid 449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 448] <... write resumed>) = 9 [pid 292] <... close resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 288] <... close resumed>) = 0 [pid 448] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] getdents64(4, [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 448] <... futex resumed>) = 1 [pid 442] <... futex resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 448] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 462 [pid 291] close(4 [pid 288] <... clone resumed>, child_tidptr=0x5555568d8690) = 463 [pid 448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] <... futex resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 448] creat("./bus", 000 [pid 442] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] rmdir("./5/file0" [pid 448] <... creat resumed>) = 5 ./strace-static-x86_64: Process 463 attached [pid 463] set_robust_list(0x5555568d86a0, 24 [pid 448] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... rmdir resumed>) = 0 [pid 448] <... futex resumed>) = 1 [pid 442] <... futex resumed>) = 0 [pid 291] getdents64(3, [pid 448] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] <... futex resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 448] creat("./bus", 000 [pid 442] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] close(3 [pid 448] <... creat resumed>) = 6 [pid 463] <... set_robust_list resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 448] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] rmdir("./5" [pid 448] <... futex resumed>) = 1 [pid 442] <... futex resumed>) = 0 [pid 463] chdir("./6" [pid 442] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 291] <... rmdir resumed>) = 0 [pid 442] <... futex resumed>) = 0 [pid 448] <... open resumed>) = 7 [pid 442] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] mkdir("./6", 0777 [pid 449] <... openat resumed>) = 3 [pid 448] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 463] <... chdir resumed>) = 0 [pid 463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 442] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 449] chdir("./file0" [pid 448] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 442] <... futex resumed>) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 463] setpgid(0, 0 [pid 448] <... mmap resumed>) = 0x20000000 [pid 442] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... chdir resumed>) = 0 [pid 448] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... openat resumed>) = 3 [pid 449] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 448] <... futex resumed>) = 0 [pid 442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 291] ioctl(3, LOOP_CLR_FD [pid 448] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 463] <... setpgid resumed>) = 0 [pid 449] <... openat resumed>) = 4 [pid 448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] <... futex resumed>) = 0 [pid 291] close(3./strace-static-x86_64: Process 462 attached [pid 463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 449] ioctl(4, LOOP_CLR_FD [pid 448] ftruncate(6, 31 [ 24.902698][ T449] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 442] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... close resumed>) = 0 [pid 463] <... openat resumed>) = 3 [pid 462] set_robust_list(0x5555568d86a0, 24 [pid 449] <... ioctl resumed>) = 0 [pid 448] <... ftruncate resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 463] write(3, "1000", 4 [pid 462] <... set_robust_list resumed>) = 0 [pid 448] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... write resumed>) = 4 [pid 462] chdir("./7" [pid 448] <... futex resumed>) = 1 [pid 442] <... futex resumed>) = 0 [pid 448] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... clone resumed>, child_tidptr=0x5555568d8690) = 464 [pid 448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] <... futex resumed>) = 0 [pid 463] close(3 [pid 462] <... chdir resumed>) = 0 [pid 463] <... close resumed>) = 0 [pid 462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 463] symlink("/dev/binderfs", "./binderfs" [pid 462] <... prctl resumed>) = 0 [pid 463] <... symlink resumed>) = 0 [pid 462] setpgid(0, 0 [pid 463] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... setpgid resumed>) = 0 [pid 463] <... futex resumed>) = 0 [pid 462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 463] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 462] <... openat resumed>) = 3 [pid 463] <... rt_sigaction resumed>NULL, 8) = 0 [pid 462] write(3, "1000", 4 [pid 463] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 462] <... write resumed>) = 4 [pid 463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 462] close(3 [pid 463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 462] <... close resumed>) = 0 [pid 463] <... mmap resumed>) = 0x7f39234c1000 [pid 462] symlink("/dev/binderfs", "./binderfs" [pid 463] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 462] <... symlink resumed>) = 0 [pid 463] <... mprotect resumed>) = 0 [pid 462] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] rt_sigprocmask(SIG_BLOCK, ~[], [pid 462] <... futex resumed>) = 0 [pid 463] <... rt_sigprocmask resumed>[], 8) = 0 [pid 463] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 462] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 463] <... clone3 resumed> => {parent_tid=[465]}, 88) = 465 [pid 462] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 463] rt_sigprocmask(SIG_SETMASK, [], [pid 462] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 464 attached [pid 463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 464] set_robust_list(0x5555568d86a0, 24 [pid 463] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... mmap resumed>) = 0x7f39234c1000 [pid 464] <... set_robust_list resumed>) = 0 [pid 463] <... futex resumed>) = 0 [pid 462] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 464] chdir("./6" [pid 463] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 462] <... mprotect resumed>) = 0 [pid 464] <... chdir resumed>) = 0 [pid 462] rt_sigprocmask(SIG_BLOCK, ~[], [pid 464] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 462] <... rt_sigprocmask resumed>[], 8) = 0 [pid 464] <... prctl resumed>) = 0 [pid 462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 464] setpgid(0, 0) = 0 [pid 462] <... clone3 resumed> => {parent_tid=[466]}, 88) = 466 [pid 464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 462] rt_sigprocmask(SIG_SETMASK, [], [pid 464] <... openat resumed>) = 3 [pid 462] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 464] write(3, "1000", 4 [pid 462] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... write resumed>) = 4 [pid 462] <... futex resumed>) = 0 [pid 464] close(3 [pid 462] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 464] <... close resumed>) = 0 [pid 464] symlink("/dev/binderfs", "./binderfs") = 0 [pid 464] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 464] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 464] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 464] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 464] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[467]}, 88) = 467 [pid 464] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 464] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 465 attached [pid 465] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 465] memfd_create("syzkaller", 0) = 3 [pid 465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 ./strace-static-x86_64: Process 466 attached [pid 466] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 466] memfd_create("syzkaller", 0) = 3 [pid 466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 ./strace-static-x86_64: Process 467 attached [pid 467] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 467] memfd_create("syzkaller", 0 [pid 442] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 467] <... memfd_create resumed>) = 3 [pid 467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 449] close(4) = 0 [pid 448] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 442] <... mmap resumed>) = 0x7f39234a0000 [pid 449] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE [pid 449] <... futex resumed>) = 1 [pid 442] <... mprotect resumed>) = 1 [pid 443] <... futex resumed>) = 0 [pid 449] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 443] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 443] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 449] <... open resumed>) = 4 [pid 448] +++ killed by SIGBUS +++ [pid 442] +++ killed by SIGBUS +++ [pid 449] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=442, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 449] <... futex resumed>) = 1 [pid 443] <... futex resumed>) = 0 [pid 466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 449] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 443] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 443] <... futex resumed>) = 0 [pid 449] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 443] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... write resumed>) = 1048576 [pid 449] <... write resumed>) = 9 [pid 290] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 449] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 466] munmap(0x7f391b0c1000, 138412032 [pid 449] <... futex resumed>) = 1 [pid 443] <... futex resumed>) = 0 [pid 290] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 449] creat("./bus", 000 [pid 443] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... openat resumed>) = 3 [pid 466] <... munmap resumed>) = 0 [pid 467] <... write resumed>) = 1048576 [pid 466] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 449] <... creat resumed>) = 5 [pid 443] <... futex resumed>) = 0 [pid 290] newfstatat(3, "", [pid 466] <... openat resumed>) = 4 [pid 449] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 466] ioctl(4, LOOP_SET_FD, 3 [pid 465] <... write resumed>) = 1048576 [pid 449] <... futex resumed>) = 0 [pid 443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 290] getdents64(3, [pid 465] munmap(0x7f391b0c1000, 138412032 [pid 443] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 449] creat("./bus", 000 [pid 443] <... futex resumed>) = 0 [pid 465] <... munmap resumed>) = 0 [pid 465] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 467] munmap(0x7f391b0c1000, 138412032 [pid 443] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... creat resumed>) = 6 [pid 290] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 449] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 449] <... futex resumed>) = 1 [pid 449] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 443] <... futex resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./5/binderfs", [pid 443] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 443] <... futex resumed>) = 1 [pid 449] <... futex resumed>) = 0 [pid 443] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] unlink("./5/binderfs" [pid 449] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 467] <... munmap resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 467] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 449] <... open resumed>) = 7 [pid 290] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 449] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 443] <... futex resumed>) = 0 [pid 449] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 443] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... mmap resumed>) = 0x20000000 [pid 443] <... futex resumed>) = 0 [pid 449] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 0 [pid 443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 449] ftruncate(6, 31 [pid 443] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] <... ftruncate resumed>) = 0 [pid 443] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 24.942891][ T448] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 443] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... openat resumed>) = 4 [pid 465] ioctl(4, LOOP_SET_FD, 3 [pid 466] <... ioctl resumed>) = 0 [pid 466] close(3) = 0 [pid 466] close(4 [pid 443] <... futex resumed>) = 0 [pid 443] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 467] <... openat resumed>) = 4 [pid 465] <... ioctl resumed>) = 0 [pid 467] ioctl(4, LOOP_SET_FD, 3 [pid 465] close(3) = 0 [pid 465] close(4 [pid 443] <... mmap resumed>) = 0x7f39234a0000 [pid 443] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 443] rt_sigprocmask(SIG_BLOCK, ~[], [pid 449] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 443] <... rt_sigprocmask resumed>[], 8) = 0 [pid 443] ????() = ? [pid 449] +++ killed by SIGBUS +++ [pid 443] +++ killed by SIGBUS +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=443, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 289] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 289] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./5/binderfs") = 0 [pid 289] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 466] <... close resumed>) = 0 [pid 466] mkdir("./file0", 0777 [pid 467] <... ioctl resumed>) = 0 [pid 467] close(3) = 0 [pid 467] close(4 [pid 466] <... mkdir resumed>) = 0 [ 24.985603][ T449] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 466] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 467] <... close resumed>) = 0 [pid 467] mkdir("./file0", 0777) = 0 [pid 467] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 465] <... close resumed>) = 0 [pid 465] mkdir("./file0", 0777) = 0 [pid 465] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 466] <... mount resumed>) = 0 [pid 467] <... mount resumed>) = 0 [pid 466] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 467] chdir("./file0") = 0 [pid 467] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 466] <... openat resumed>) = 3 [pid 466] chdir("./file0") = 0 [pid 466] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 290] <... umount2 resumed>) = 0 [pid 289] <... umount2 resumed>) = 0 [pid 290] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./5/file0") = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 289] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] close(3 [pid 466] <... openat resumed>) = 4 [pid 466] ioctl(4, LOOP_CLR_FD [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 466] <... ioctl resumed>) = 0 [pid 466] close(4) = 0 [pid 466] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... futex resumed>) = 1 [pid 290] <... close resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] rmdir("./5" [pid 289] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] <... rmdir resumed>) = 0 [pid 289] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 467] <... openat resumed>) = 4 [pid 290] mkdir("./6", 0777 [pid 289] <... openat resumed>) = 4 [pid 467] ioctl(4, LOOP_CLR_FD [pid 290] <... mkdir resumed>) = 0 [pid 289] newfstatat(4, "", [pid 467] <... ioctl resumed>) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... openat resumed>) = 3 [pid 467] close(4 [pid 289] getdents64(4, [pid 290] ioctl(3, LOOP_CLR_FD [pid 467] <... close resumed>) = 0 [pid 290] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 289] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 467] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] close(3 [pid 289] getdents64(4, [pid 290] <... close resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 467] <... futex resumed>) = 1 [pid 464] <... futex resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] close(4 [pid 464] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 289] <... close resumed>) = 0 [pid 464] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 289] rmdir("./5/file0") = 0 [pid 467] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 289] getdents64(3, [pid 290] <... clone resumed>, child_tidptr=0x5555568d8690) = 476 [pid 289] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 467] <... open resumed>) = 4 [pid 289] rmdir("./5" [pid 467] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 464] <... futex resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 464] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 464] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 289] mkdir("./6", 0777 [pid 466] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 289] <... mkdir resumed>) = 0 [pid 467] <... write resumed>) = 9 [pid 289] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 467] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... open resumed>) = 4 [pid 289] <... openat resumed>) = 3 [pid 467] <... futex resumed>) = 1 [pid 466] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 289] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 476 attached [pid 467] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 466] <... futex resumed>) = 1 [pid 464] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 289] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 466] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] <... futex resumed>) = 0 [pid 462] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] close(3 [pid 476] set_robust_list(0x5555568d86a0, 24 [pid 467] creat("./bus", 000 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... futex resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 476] <... set_robust_list resumed>) = 0 [pid 467] <... creat resumed>) = 5 [pid 466] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 462] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 476] chdir("./6" [pid 467] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... write resumed>) = 9 [pid 476] <... chdir resumed>) = 0 [pid 467] <... futex resumed>) = 1 [pid 466] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555568d8690) = 478 [pid 476] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 467] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 466] <... futex resumed>) = 1 [pid 464] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [ 25.191778][ T466] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 25.192005][ T467] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 476] <... prctl resumed>) = 0 [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 466] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] <... futex resumed>) = 0 [pid 462] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 478 attached [pid 476] setpgid(0, 0 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 462] <... futex resumed>) = 0 [pid 478] set_robust_list(0x5555568d86a0, 24 [pid 466] creat("./bus", 000 [pid 462] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] <... set_robust_list resumed>) = 0 [pid 466] <... creat resumed>) = 5 [pid 478] chdir("./6" [pid 466] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... chdir resumed>) = 0 [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 478] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 466] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... prctl resumed>) = 0 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 478] setpgid(0, 0 [pid 466] creat("./bus", 000 [pid 462] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] <... setpgid resumed>) = 0 [pid 466] <... creat resumed>) = 6 [pid 478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 466] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... openat resumed>) = 3 [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 478] write(3, "1000", 4 [pid 466] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... write resumed>) = 4 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 478] close(3 [pid 466] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 462] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] <... close resumed>) = 0 [pid 466] <... open resumed>) = 7 [pid 478] symlink("/dev/binderfs", "./binderfs" [pid 466] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... symlink resumed>) = 0 [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 478] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 0 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 478] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 466] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 462] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] <... rt_sigaction resumed>NULL, 8) = 0 [pid 466] <... mmap resumed>) = 0x20000000 [pid 478] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 466] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 466] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... mmap resumed>) = 0x7f39234c1000 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 478] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 466] ftruncate(6, 31 [pid 462] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] <... mprotect resumed>) = 0 [pid 466] <... ftruncate resumed>) = 0 [pid 478] rt_sigprocmask(SIG_BLOCK, ~[], [pid 466] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... rt_sigprocmask resumed>[], 8) = 0 [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 478] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 466] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 ./strace-static-x86_64: Process 479 attached [pid 478] <... clone3 resumed> => {parent_tid=[479]}, 88) = 479 [pid 476] <... setpgid resumed>) = 0 [pid 467] creat("./bus", 000 [pid 465] <... mount resumed>) = 0 [pid 479] set_robust_list(0x7f39234e19a0, 24 [pid 476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 467] <... creat resumed>) = 6 [pid 465] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 479] <... set_robust_list resumed>) = 0 [pid 476] <... openat resumed>) = 3 [pid 467] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... openat resumed>) = 3 [pid 479] rt_sigprocmask(SIG_SETMASK, [], [pid 476] write(3, "1000", 4 [pid 467] <... futex resumed>) = 1 [pid 465] chdir("./file0" [pid 464] <... futex resumed>) = 0 [pid 479] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 476] <... write resumed>) = 4 [pid 467] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] <... chdir resumed>) = 0 [pid 464] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 476] close(3 [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 464] <... futex resumed>) = 0 [pid 476] <... close resumed>) = 0 [pid 467] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 465] <... openat resumed>) = 4 [pid 464] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] symlink("/dev/binderfs", "./binderfs" [pid 467] <... open resumed>) = 7 [pid 465] ioctl(4, LOOP_CLR_FD [pid 476] <... symlink resumed>) = 0 [pid 467] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... ioctl resumed>) = 0 [pid 476] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 1 [pid 465] close(4 [pid 464] <... futex resumed>) = 0 [pid 476] <... futex resumed>) = 0 [pid 467] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] <... close resumed>) = 0 [pid 464] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] rt_sigprocmask(SIG_SETMASK, [], [pid 476] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 466] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 465] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 462] <... futex resumed>) = 0 [pid 478] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 478] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... rt_sigaction resumed>NULL, 8) = 0 [pid 467] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 465] <... futex resumed>) = 1 [pid 464] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 0 [pid 479] <... futex resumed>) = 0 [pid 478] <... futex resumed>) = 1 [pid 476] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 467] <... mmap resumed>) = 0x20000000 [pid 466] +++ killed by SIGBUS +++ [pid 465] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 463] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] +++ killed by SIGBUS +++ [pid 478] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 476] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 467] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 463] <... futex resumed>) = 0 [pid 479] memfd_create("syzkaller", 0 [pid 476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 467] <... futex resumed>) = 1 [pid 465] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 464] <... futex resumed>) = 0 [pid 463] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=462, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 476] <... mmap resumed>) = 0x7f39234c1000 [pid 467] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 476] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] <... futex resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 476] <... mprotect resumed>) = 0 [pid 467] ftruncate(6, 31 [pid 464] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] rt_sigprocmask(SIG_BLOCK, ~[], [pid 467] <... ftruncate resumed>) = 0 [pid 476] <... rt_sigprocmask resumed>[], 8) = 0 [pid 467] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 476] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 467] <... futex resumed>) = 1 [pid 464] <... futex resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 464] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 480 attached [pid 480] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 480] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 480] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 479] <... memfd_create resumed>) = 3 [pid 479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 479] munmap(0x7f391b0c1000, 138412032) = 0 [pid 479] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 479] ioctl(4, LOOP_SET_FD, 3 [pid 465] <... open resumed>) = 4 [pid 465] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 476] <... clone3 resumed> => {parent_tid=[480]}, 88) = 480 [pid 476] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 476] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 476] <... futex resumed>) = 1 [pid 480] memfd_create("syzkaller", 0 [pid 476] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 480] <... memfd_create resumed>) = 3 [pid 480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 467] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 464] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 464] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] newfstatat(3, "", [pid 465] <... futex resumed>) = 0 [pid 464] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = 1 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 465] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 463] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] getdents64(3, [pid 464] <... mmap resumed>) = 0x7f39234a0000 [pid 464] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE [pid 292] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 464] <... mprotect resumed>) = 0 [pid 292] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 464] rt_sigprocmask(SIG_BLOCK, ~[], [pid 465] <... write resumed>) = 9 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 464] <... rt_sigprocmask resumed>[], 8) = 0 [pid 465] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} [pid 292] newfstatat(AT_FDCWD, "./7/binderfs", [pid 465] <... futex resumed>) = 1 [pid 463] <... futex resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 465] creat("./bus", 000 [pid 464] <... clone3 resumed> => {parent_tid=[482]}, 88) = 482 [pid 463] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] unlink("./7/binderfs" [pid 464] rt_sigprocmask(SIG_SETMASK, [], [pid 463] <... futex resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 463] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 292] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 464] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] <... creat resumed>) = 5 [pid 465] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 1 [pid 463] <... futex resumed>) = 0 [pid 465] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 463] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 463] <... futex resumed>) = 0 [pid 465] creat("./bus", 000 [pid 463] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... creat resumed>) = 6 [pid 465] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 463] <... futex resumed>) = 0 [pid 465] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 463] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 463] <... futex resumed>) = 0 [pid 465] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 463] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... open resumed>) = 7 [pid 465] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 463] <... futex resumed>) = 0 [pid 465] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 463] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] <... futex resumed>) = ? [pid 463] <... futex resumed>) = 0 [pid 465] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 463] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... write resumed>) = 1048576 [pid 465] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 482 attached [pid 480] munmap(0x7f391b0c1000, 138412032 [pid 465] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 463] <... futex resumed>) = 0 [pid 482] +++ killed by SIGBUS +++ [pid 480] <... munmap resumed>) = 0 [pid 465] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 463] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 25.251180][ T465] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 25.258820][ T466] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.279730][ T467] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 465] ftruncate(6, 31) = 0 [pid 465] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... ioctl resumed>) = 0 [pid 479] close(3) = 0 [pid 479] close(4 [pid 480] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 467] +++ killed by SIGBUS +++ [pid 464] +++ killed by SIGBUS +++ [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=464, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./6/binderfs") = 0 [pid 291] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 465] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 463] <... mmap resumed>) = 0x7f39234a0000 [pid 480] <... openat resumed>) = 4 [pid 465] +++ killed by SIGBUS +++ [pid 463] +++ killed by SIGBUS +++ [pid 480] ioctl(4, LOOP_SET_FD, 3 [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=463, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 288] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 288] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 288] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./6/binderfs") = 0 [pid 288] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 479] <... close resumed>) = 0 [pid 479] mkdir("./file0", 0777) = 0 [pid 479] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 480] <... ioctl resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 480] close(3 [pid 292] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 480] <... close resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 480] close(4 [pid 292] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./7/file0") = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./7") = 0 [pid 292] mkdir("./8", 0777) = 0 [ 25.305468][ T465] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 480] <... close resumed>) = 0 [pid 291] <... umount2 resumed>) = 0 [pid 288] <... umount2 resumed>) = 0 [pid 480] mkdir("./file0", 0777 [pid 291] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 480] <... mkdir resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 480] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 291] newfstatat(AT_FDCWD, "./6/file0", [pid 288] newfstatat(AT_FDCWD, "./6/file0", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 288] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... openat resumed>) = 4 [pid 288] <... openat resumed>) = 4 [pid 291] newfstatat(4, "", [pid 288] newfstatat(4, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, [pid 288] getdents64(4, [pid 291] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 288] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, [pid 288] getdents64(4, [pid 291] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 288] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 291] close(4 [pid 288] close(4 [pid 291] <... close resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 291] rmdir("./6/file0" [pid 288] rmdir("./6/file0" [pid 479] <... mount resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 288] <... rmdir resumed>) = 0 [pid 291] getdents64(3, [pid 288] getdents64(3, [pid 291] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 288] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 288] close(3 [pid 291] <... close resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 291] rmdir("./6" [pid 288] rmdir("./6" [pid 479] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 291] <... rmdir resumed>) = 0 [pid 288] <... rmdir resumed>) = 0 [pid 291] mkdir("./7", 0777 [pid 288] mkdir("./7", 0777 [pid 479] <... openat resumed>) = 3 [pid 291] <... mkdir resumed>) = 0 [pid 288] <... mkdir resumed>) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 479] chdir("./file0") = 0 [pid 479] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 292] <... openat resumed>) = 3 [ 25.374747][ T479] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 292] ioctl(3, LOOP_CLR_FD [pid 479] <... openat resumed>) = 4 [pid 291] <... openat resumed>) = 3 [pid 288] <... openat resumed>) = 3 [pid 479] ioctl(4, LOOP_CLR_FD [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 291] ioctl(3, LOOP_CLR_FD [pid 288] ioctl(3, LOOP_CLR_FD [pid 479] <... ioctl resumed>) = 0 [pid 288] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 479] close(4 [pid 288] close(3 [pid 479] <... close resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 479] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 479] <... futex resumed>) = 1 [pid 478] <... futex resumed>) = 0 [pid 479] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 478] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] close(3 [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 288] <... clone resumed>, child_tidptr=0x5555568d8690) = 487 [pid 478] <... futex resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 291] close(3 [pid 479] <... open resumed>) = 4 [pid 478] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... close resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 479] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 478] <... futex resumed>) = 0 [pid 479] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 478] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 478] <... futex resumed>) = 0 [pid 478] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 479] <... write resumed>) = 9 [pid 479] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 478] <... futex resumed>) = 0 [pid 478] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 488 [pid 478] <... futex resumed>) = 0 [pid 478] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 479] creat("./bus", 000) = 5 [pid 291] <... clone resumed>, child_tidptr=0x5555568d8690) = 490 [pid 479] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 478] <... futex resumed>) = 0 [pid 479] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 478] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 478] <... futex resumed>) = 0 [pid 479] creat("./bus", 000 [pid 478] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 479] <... creat resumed>) = 6 [pid 479] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 478] <... futex resumed>) = 0 [pid 479] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 478] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 478] <... futex resumed>) = 0 [pid 479] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 478] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 479] <... open resumed>) = 7 [pid 479] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 478] <... futex resumed>) = 0 [pid 479] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 478] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 478] <... futex resumed>) = 0 [pid 479] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 478] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 479] <... mmap resumed>) = 0x20000000 [pid 479] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 478] <... futex resumed>) = 0 [pid 479] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 478] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 478] <... futex resumed>) = 0 [pid 479] ftruncate(6, 31 [pid 478] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 479] <... ftruncate resumed>) = 0 [pid 479] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 478] <... futex resumed>) = 0 [pid 479] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 478] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 478] <... futex resumed>) = 0 ./strace-static-x86_64: Process 487 attached [pid 478] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 490 attached [pid 490] set_robust_list(0x5555568d86a0, 24) = 0 [pid 490] chdir("./7") = 0 [pid 490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 490] setpgid(0, 0) = 0 [pid 490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 490] write(3, "1000", 4) = 4 [pid 490] close(3) = 0 [pid 490] symlink("/dev/binderfs", "./binderfs") = 0 [pid 490] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 490] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 490] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 490] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 490] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[492]}, 88) = 492 [pid 490] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 490] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 488 attached [pid 488] set_robust_list(0x5555568d86a0, 24) = 0 [pid 488] chdir("./8") = 0 [pid 488] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 487] set_robust_list(0x5555568d86a0, 24 [pid 488] <... prctl resumed>) = 0 [pid 488] setpgid(0, 0 [pid 487] <... set_robust_list resumed>) = 0 [pid 488] <... setpgid resumed>) = 0 [pid 488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 487] chdir("./7" [pid 488] <... openat resumed>) = 3 [pid 488] write(3, "1000", 4) = 4 [pid 488] close(3) = 0 [pid 488] symlink("/dev/binderfs", "./binderfs") = 0 [pid 488] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 488] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 488] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 488] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[493]}, 88) = 493 [pid 488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 488] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 492 attached [pid 492] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 492] memfd_create("syzkaller", 0) = 3 [pid 492] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 492] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 487] <... chdir resumed>) = 0 [pid 487] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 478] <... mmap resumed>) = 0x7f39234a0000 [pid 478] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 478] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 478] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[494]}, 88) = 494 [pid 478] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 478] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] <... prctl resumed>) = 0 [pid 479] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 478] <... futex resumed>) = 0 [pid 478] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] <... write resumed>) = 1048576 [pid 492] munmap(0x7f391b0c1000, 138412032 [pid 487] setpgid(0, 0) = 0 [pid 478] <... futex resumed>) = ? [pid 487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 492] <... munmap resumed>) = 0 [pid 492] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 492] ioctl(4, LOOP_SET_FD, 3 [pid 487] <... openat resumed>) = 3 ./strace-static-x86_64: Process 494 attached [pid 487] write(3, "1000", 4 [pid 480] <... mount resumed>) = 0 [pid 480] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 487] <... write resumed>) = 4 [pid 487] close(3) = 0 [pid 480] <... openat resumed>) = 3 [pid 487] symlink("/dev/binderfs", "./binderfs" [pid 480] chdir("./file0") = 0 [pid 480] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 492] <... ioctl resumed>) = 0 [pid 492] close(3 [pid 494] +++ killed by SIGBUS +++ [pid 487] <... symlink resumed>) = 0 [pid 492] <... close resumed>) = 0 [pid 492] close(4 [pid 487] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 493 attached [pid 487] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 493] set_robust_list(0x7f39234e19a0, 24 [pid 487] <... rt_sigaction resumed>NULL, 8) = 0 [pid 493] <... set_robust_list resumed>) = 0 [pid 493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 493] memfd_create("syzkaller", 0) = 3 [pid 493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 487] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 487] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 487] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 487] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[496]}, 88) = 496 [pid 479] +++ killed by SIGBUS +++ [pid 478] +++ killed by SIGBUS +++ [pid 487] rt_sigprocmask(SIG_SETMASK, [], [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=478, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 487] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 487] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 496 attached [pid 289] <... restart_syscall resumed>) = 0 [pid 487] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 289] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 496] set_robust_list(0x7f39234e19a0, 24 [pid 289] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./6/binderfs") = 0 [pid 289] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 496] <... set_robust_list resumed>) = 0 [pid 496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 496] memfd_create("syzkaller", 0) = 3 [pid 496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 493] <... write resumed>) = 1048576 [pid 493] munmap(0x7f391b0c1000, 138412032) = 0 [pid 493] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 496] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 496] munmap(0x7f391b0c1000, 138412032) = 0 [pid 496] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 492] <... close resumed>) = 0 [pid 480] <... openat resumed>) = 4 [pid 492] mkdir("./file0", 0777 [pid 480] ioctl(4, LOOP_CLR_FD [pid 492] <... mkdir resumed>) = 0 [ 25.485260][ T479] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.506635][ T480] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 492] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 289] <... umount2 resumed>) = 0 [pid 289] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 289] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 289] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 289] close(4) = 0 [pid 289] rmdir("./6/file0") = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./6") = 0 [pid 289] mkdir("./7", 0777) = 0 [pid 289] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 492] <... mount resumed>) = 0 [pid 492] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 492] chdir("./file0") = 0 [pid 492] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 496] <... openat resumed>) = 4 [pid 493] <... openat resumed>) = 4 [pid 480] <... ioctl resumed>) = 0 [pid 496] ioctl(4, LOOP_SET_FD, 3 [pid 480] close(4 [pid 493] ioctl(4, LOOP_SET_FD, 3 [pid 496] <... ioctl resumed>) = 0 [pid 496] close(3) = 0 [ 25.591749][ T492] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 496] close(4) = 0 [pid 496] mkdir("./file0", 0777) = 0 [pid 496] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 480] <... close resumed>) = 0 [pid 480] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 480] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 289] <... openat resumed>) = 3 [pid 289] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 289] close(3) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 500 [pid 476] <... futex resumed>) = 0 ./strace-static-x86_64: Process 500 attached [pid 476] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] set_robust_list(0x5555568d86a0, 24) = 0 [pid 500] chdir("./7") = 0 [pid 500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 500] setpgid(0, 0) = 0 [pid 500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 500] write(3, "1000", 4) = 4 [pid 500] close(3) = 0 [pid 500] symlink("/dev/binderfs", "./binderfs") = 0 [pid 500] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 500] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 500] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 500] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[501]}, 88) = 501 [pid 500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 500] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 501 attached [pid 501] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 501] memfd_create("syzkaller", 0) = 3 [pid 501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 480] <... futex resumed>) = 0 [pid 476] <... futex resumed>) = 1 [pid 480] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 476] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... open resumed>) = 4 [pid 480] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... write resumed>) = 9 [pid 480] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 476] <... futex resumed>) = 0 [pid 480] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 476] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] creat("./bus", 000) = 5 [pid 480] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 476] <... futex resumed>) = 0 [pid 480] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 476] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 476] <... futex resumed>) = 0 [pid 480] creat("./bus", 000 [pid 476] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... creat resumed>) = 6 [pid 480] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 476] <... futex resumed>) = 0 [pid 480] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 476] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] <... open resumed>) = 7 [pid 476] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... mmap resumed>) = 0x20000000 [pid 480] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] ftruncate(6, 31 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 480] <... ftruncate resumed>) = 0 [pid 480] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 476] <... futex resumed>) = 0 [pid 493] <... ioctl resumed>) = 0 [pid 480] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 476] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] close(3 [pid 492] <... openat resumed>) = 4 [pid 493] <... close resumed>) = 0 [pid 480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 492] ioctl(4, LOOP_CLR_FD [pid 476] <... futex resumed>) = 0 [pid 493] close(4 [pid 476] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 480] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 476] <... mmap resumed>) = 0x7f39234a0000 [pid 480] +++ killed by SIGBUS +++ [pid 476] +++ killed by SIGBUS +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=476, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 290] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./6/binderfs") = 0 [pid 290] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 501] <... write resumed>) = 1048576 [pid 501] munmap(0x7f391b0c1000, 138412032) = 0 [pid 501] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 496] <... mount resumed>) = 0 [pid 496] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 496] chdir("./file0") = 0 [pid 496] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 501] <... openat resumed>) = 4 [pid 493] <... close resumed>) = 0 [pid 492] <... ioctl resumed>) = 0 [pid 493] mkdir("./file0", 0777 [pid 492] close(4 [pid 501] ioctl(4, LOOP_SET_FD, 3 [pid 493] <... mkdir resumed>) = 0 [pid 493] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 496] <... openat resumed>) = 4 [pid 492] <... close resumed>) = 0 [pid 492] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 490] <... futex resumed>) = 0 [pid 492] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 490] <... futex resumed>) = 0 [pid 492] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 490] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 496] ioctl(4, LOOP_CLR_FD [pid 492] <... open resumed>) = 4 [pid 492] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 490] <... futex resumed>) = 0 [pid 492] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... ioctl resumed>) = 0 [pid 492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 501] close(3 [pid 492] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 501] <... close resumed>) = 0 [pid 492] <... write resumed>) = 9 [pid 501] close(4 [pid 492] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 490] <... futex resumed>) = 1 [pid 492] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 490] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 490] <... futex resumed>) = 1 [pid 492] creat("./bus", 000 [pid 490] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... umount2 resumed>) = 0 [pid 492] <... creat resumed>) = 5 [pid 290] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 492] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 490] <... futex resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 492] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 490] <... futex resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./6/file0", [pid 492] creat("./bus", 000 [pid 490] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] <... creat resumed>) = 6 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 492] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 490] <... futex resumed>) = 0 [pid 290] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 492] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 490] <... futex resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 492] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 490] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 492] <... open resumed>) = 7 [ 25.690701][ T480] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.712797][ T496] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 492] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... openat resumed>) = 4 [pid 492] <... futex resumed>) = 1 [pid 490] <... futex resumed>) = 0 [pid 290] newfstatat(4, "", [pid 492] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 490] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 492] <... mmap resumed>) = 0x20000000 [pid 490] <... futex resumed>) = 0 [pid 290] getdents64(4, [pid 492] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 490] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 490] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 492] <... futex resumed>) = 0 [pid 490] <... futex resumed>) = 1 [pid 492] ftruncate(6, 31 [pid 490] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] getdents64(4, [pid 492] <... ftruncate resumed>) = 0 [pid 290] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 492] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 490] <... futex resumed>) = 0 [pid 290] close(4 [pid 492] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 490] <... futex resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 290] rmdir("./6/file0") = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./6") = 0 [pid 290] mkdir("./7", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 490] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 492] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 490] <... mmap resumed>) = 0x7f39234a0000 [pid 492] +++ killed by SIGBUS +++ [pid 490] +++ killed by SIGBUS +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=490, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./7/binderfs") = 0 [pid 291] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 501] <... close resumed>) = 0 [pid 501] mkdir("./file0", 0777) = 0 [ 25.773454][ T492] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 501] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 493] <... mount resumed>) = 0 [pid 493] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 493] chdir("./file0") = 0 [pid 493] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 496] <... ioctl resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 496] close(4 [ 25.821563][ T493] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 290] ioctl(3, LOOP_CLR_FD [pid 496] <... close resumed>) = 0 [pid 291] <... umount2 resumed>) = 0 [pid 290] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 291] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./7/file0") = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./7") = 0 [pid 291] mkdir("./8", 0777 [pid 496] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... mkdir resumed>) = 0 [pid 290] close(3 [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... close resumed>) = 0 [pid 496] <... futex resumed>) = 1 [pid 487] <... futex resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x5555568d8690) = 508 ./strace-static-x86_64: Process 508 attached [pid 508] set_robust_list(0x5555568d86a0, 24) = 0 [pid 508] chdir("./8" [pid 487] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 487] <... futex resumed>) = 0 [pid 508] <... chdir resumed>) = 0 [pid 508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 487] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] setpgid(0, 0) = 0 [pid 496] <... open resumed>) = 4 [pid 508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 496] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 487] <... futex resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555568d8690) = 509 [pid 496] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 487] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 487] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 496] <... write resumed>) = 9 [pid 496] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 487] <... futex resumed>) = 0 [pid 487] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] creat("./bus", 000 [pid 487] <... futex resumed>) = 0 [pid 487] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] <... openat resumed>) = 3 [pid 508] write(3, "1000", 4 [pid 496] <... creat resumed>) = 5 [pid 508] <... write resumed>) = 4 [pid 496] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] close(3 [pid 496] <... futex resumed>) = 1 [pid 487] <... futex resumed>) = 0 [pid 487] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... close resumed>) = 0 [pid 496] creat("./bus", 000 [pid 487] <... futex resumed>) = 0 [pid 487] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 496] <... creat resumed>) = 6 [pid 496] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 487] <... futex resumed>) = 0 [pid 487] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 508] symlink("/dev/binderfs", "./binderfs" [pid 487] <... futex resumed>) = 0 [pid 508] <... symlink resumed>) = 0 [pid 496] <... open resumed>) = 7 [pid 487] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 508] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 508] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 508] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[511]}, 88) = 511 [pid 508] rt_sigprocmask(SIG_SETMASK, [], [pid 496] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 508] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = 1 [pid 487] <... futex resumed>) = 0 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 509 attached [pid 509] set_robust_list(0x5555568d86a0, 24) = 0 [pid 509] chdir("./7") = 0 [pid 509] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 509] setpgid(0, 0) = 0 [pid 509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 509] write(3, "1000", 4) = 4 [pid 509] close(3) = 0 [pid 509] symlink("/dev/binderfs", "./binderfs") = 0 [pid 509] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 487] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 509] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 509] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 509] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 509] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 509] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[512]}, 88) = 512 [pid 509] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 509] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 512 attached [pid 512] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 512] memfd_create("syzkaller", 0) = 3 [pid 512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 487] <... futex resumed>) = 0 [pid 496] <... mmap resumed>) = 0x20000000 [pid 487] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 496] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... openat resumed>) = 4 [pid 487] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 493] ioctl(4, LOOP_CLR_FD [pid 487] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] ftruncate(6, 31 [pid 493] <... ioctl resumed>) = 0 [pid 487] <... futex resumed>) = 0 [pid 496] <... ftruncate resumed>) = 0 [pid 493] close(4 [pid 487] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 496] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... close resumed>) = 0 [pid 487] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 493] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 512] munmap(0x7f391b0c1000, 138412032) = 0 [pid 512] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 512] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 511 attached [pid 511] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 511] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 511] memfd_create("syzkaller", 0) = 3 [pid 511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 487] <... futex resumed>) = 0 [pid 487] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = 1 [pid 488] <... futex resumed>) = 0 [pid 487] <... futex resumed>) = 0 [pid 493] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 488] <... futex resumed>) = 0 [pid 493] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 488] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... open resumed>) = 4 [pid 493] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 493] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 488] <... futex resumed>) = 0 [pid 493] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 488] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... write resumed>) = 9 [pid 493] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 493] <... futex resumed>) = 1 [pid 488] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] creat("./bus", 000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... creat resumed>) = 5 [pid 493] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 493] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 488] <... futex resumed>) = 0 [pid 493] creat("./bus", 000 [pid 488] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... creat resumed>) = 6 [pid 493] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 493] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 488] <... futex resumed>) = 0 [pid 493] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 488] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... open resumed>) = 7 [pid 493] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 493] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 488] <... futex resumed>) = 0 [pid 493] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 488] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... mmap resumed>) = 0x20000000 [pid 493] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 493] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] ftruncate(6, 31) = 0 [pid 493] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 493] <... futex resumed>) = 1 [pid 488] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 511] munmap(0x7f391b0c1000, 138412032) = 0 [pid 511] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 496] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 512] <... ioctl resumed>) = 0 [pid 511] <... openat resumed>) = 4 [pid 511] ioctl(4, LOOP_SET_FD, 3 [pid 512] close(3) = 0 [pid 512] close(4 [pid 487] <... mmap resumed>) = ? [pid 496] +++ killed by SIGBUS +++ [pid 487] +++ killed by SIGBUS +++ [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=487, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 288] restart_syscall(<... resuming interrupted clone ...> [pid 511] <... ioctl resumed>) = 0 [pid 288] <... restart_syscall resumed>) = 0 [pid 511] close(3) = 0 [pid 288] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 511] close(4 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 288] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 493] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 288] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./7/binderfs") = 0 [pid 288] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 488] <... mmap resumed>) = ? [pid 493] +++ killed by SIGBUS +++ [pid 488] +++ killed by SIGBUS +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=488, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 292] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./8/binderfs") = 0 [pid 292] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 501] <... mount resumed>) = 0 [pid 501] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 501] chdir("./file0") = 0 [pid 501] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 512] <... close resumed>) = 0 [pid 512] mkdir("./file0", 0777) = 0 [ 25.911297][ T496] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.931286][ T493] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.947503][ T501] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 512] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 511] <... close resumed>) = 0 [pid 511] mkdir("./file0", 0777) = 0 [pid 511] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 501] <... openat resumed>) = 4 [pid 501] ioctl(4, LOOP_CLR_FD [pid 511] <... mount resumed>) = 0 [pid 511] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 511] chdir("./file0") = 0 [pid 511] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 501] <... ioctl resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 288] <... umount2 resumed>) = 0 [pid 501] close(4) = 0 [pid 292] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 501] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 501] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] <... futex resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./8/file0", [pid 288] newfstatat(AT_FDCWD, "./7/file0", [pid 501] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 500] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 511] ioctl(4, LOOP_CLR_FD [pid 501] <... open resumed>) = 4 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 511] <... ioctl resumed>) = 0 [pid 501] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 511] close(4 [pid 501] <... futex resumed>) = 1 [pid 500] <... futex resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 511] <... close resumed>) = 0 [pid 501] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 511] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] <... futex resumed>) = 0 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 511] <... futex resumed>) = 1 [pid 508] <... futex resumed>) = 0 [pid 501] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 500] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... openat resumed>) = 4 [pid 288] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 511] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 508] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] newfstatat(4, "", [pid 511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 508] <... futex resumed>) = 0 [pid 501] <... write resumed>) = 9 [pid 288] <... openat resumed>) = 4 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 511] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 508] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] newfstatat(4, "", [pid 292] getdents64(4, [pid 511] <... open resumed>) = 4 [pid 501] <... futex resumed>) = 1 [pid 500] <... futex resumed>) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 511] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 288] getdents64(4, [pid 511] <... futex resumed>) = 1 [pid 508] <... futex resumed>) = 0 [pid 501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] <... futex resumed>) = 0 [pid 292] getdents64(4, [pid 511] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 508] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] creat("./bus", 000 [pid 500] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 288] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 512] <... mount resumed>) = 0 [pid 512] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 512] chdir("./file0") = 0 [pid 512] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 512] ioctl(4, LOOP_CLR_FD) = 0 [pid 512] close(4) = 0 [pid 512] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] <... futex resumed>) = 0 [pid 512] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 509] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] <... creat resumed>) = 5 [pid 292] close(4 [pid 288] getdents64(4, [pid 512] <... open resumed>) = 4 [pid 511] <... write resumed>) = 9 [pid 509] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... close resumed>) = 0 [pid 512] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] <... futex resumed>) = 0 [pid 512] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 509] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 511] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... futex resumed>) = 1 [pid 500] <... futex resumed>) = 0 [pid 292] rmdir("./8/file0" [pid 288] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 512] <... write resumed>) = 9 [pid 512] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] close(4 [pid 512] <... futex resumed>) = 1 [pid 509] <... futex resumed>) = 0 [pid 512] creat("./bus", 000 [pid 511] <... futex resumed>) = 1 [pid 509] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 501] creat("./bus", 000 [pid 500] <... futex resumed>) = 0 [pid 292] <... rmdir resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 512] <... creat resumed>) = 5 [pid 511] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] <... futex resumed>) = 0 [pid 508] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... creat resumed>) = 6 [pid 500] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] getdents64(3, [pid 512] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] <... futex resumed>) = 0 [pid 501] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 288] rmdir("./7/file0" [pid 512] <... futex resumed>) = 0 [pid 511] creat("./bus", 000 [pid 509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 508] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 512] creat("./bus", 000 [pid 509] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 500] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] close(3 [pid 288] <... rmdir resumed>) = 0 [pid 512] <... creat resumed>) = 6 [pid 511] <... creat resumed>) = 5 [pid 509] <... futex resumed>) = 0 [pid 501] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 500] <... futex resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 288] getdents64(3, [pid 512] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 511] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... open resumed>) = 7 [pid 500] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] rmdir("./8" [pid 512] <... futex resumed>) = 0 [pid 511] <... futex resumed>) = 1 [pid 509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 508] <... futex resumed>) = 0 [pid 501] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 288] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 512] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 500] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... rmdir resumed>) = 0 [pid 288] close(3 [pid 512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] <... futex resumed>) = 0 [pid 508] <... futex resumed>) = 0 [pid 501] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 500] <... futex resumed>) = 0 [pid 292] mkdir("./9", 0777 [pid 512] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 511] creat("./bus", 000 [pid 509] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] <... close resumed>) = 0 [pid 512] <... open resumed>) = 7 [pid 501] <... mmap resumed>) = 0x20000000 [pid 500] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 512] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] <... futex resumed>) = 0 [pid 512] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] <... creat resumed>) = 6 [pid 509] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... mkdir resumed>) = 0 [pid 288] rmdir("./7" [pid 512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 511] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 512] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 509] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 512] <... mmap resumed>) = 0x20000000 [pid 512] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] <... futex resumed>) = 0 [pid 512] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] <... futex resumed>) = 0 [pid 512] ftruncate(6, 31 [pid 509] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 512] <... ftruncate resumed>) = 0 [pid 512] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 26.111624][ T511] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 26.149016][ T512] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 509] <... futex resumed>) = 0 [pid 512] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] <... futex resumed>) = 0 [pid 511] <... futex resumed>) = 1 [pid 509] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 501] <... futex resumed>) = 1 [pid 500] <... futex resumed>) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 288] <... rmdir resumed>) = 0 [pid 511] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] <... futex resumed>) = 0 [pid 508] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... openat resumed>) = 3 [pid 288] mkdir("./8", 0777 [pid 512] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 508] <... futex resumed>) = 0 [pid 501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] <... futex resumed>) = 0 [pid 292] ioctl(3, LOOP_CLR_FD [pid 511] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 509] <... mmap resumed>) = ? [pid 508] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] ftruncate(6, 31 [pid 500] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 288] <... mkdir resumed>) = 0 [pid 511] <... open resumed>) = 7 [pid 501] <... ftruncate resumed>) = 0 [pid 292] close(3 [pid 288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 512] +++ killed by SIGBUS +++ [pid 511] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] +++ killed by SIGBUS +++ [pid 501] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... close resumed>) = 0 [pid 288] <... openat resumed>) = 3 [pid 511] <... futex resumed>) = 1 [pid 508] <... futex resumed>) = 0 [pid 501] <... futex resumed>) = 1 [pid 500] <... futex resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=509, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 288] ioctl(3, LOOP_CLR_FD [pid 511] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 508] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 508] <... futex resumed>) = 0 [pid 501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] <... futex resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 520 [pid 288] close(3./strace-static-x86_64: Process 520 attached [pid 511] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 508] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 520] set_robust_list(0x5555568d86a0, 24 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 520] <... set_robust_list resumed>) = 0 [pid 290] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 520] chdir("./9" [pid 290] <... openat resumed>) = 3 [pid 520] <... chdir resumed>) = 0 [pid 290] newfstatat(3, "", [pid 520] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 520] <... prctl resumed>) = 0 [pid 290] getdents64(3, [pid 520] setpgid(0, 0 [pid 290] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 520] <... setpgid resumed>) = 0 [pid 290] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 520] <... openat resumed>) = 3 [pid 290] newfstatat(AT_FDCWD, "./7/binderfs", [pid 520] write(3, "1000", 4 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 520] <... write resumed>) = 4 [pid 290] unlink("./7/binderfs" [pid 520] close(3 [pid 290] <... unlink resumed>) = 0 [pid 520] <... close resumed>) = 0 [pid 290] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 520] symlink("/dev/binderfs", "./binderfs") = 0 [pid 520] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 520] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 520] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 520] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 520] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[521]}, 88) = 521 [pid 520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 520] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 521 attached [pid 521] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 521] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 521] memfd_create("syzkaller", 0) = 3 [pid 521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 511] <... mmap resumed>) = 0x20000000 [pid 521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 511] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 500] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... close resumed>) = 0 [pid 511] <... futex resumed>) = 1 [pid 500] <... futex resumed>) = ? [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 511] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 288] <... clone resumed>, child_tidptr=0x5555568d8690) = 522 [pid 511] <... futex resumed>) = 0 [pid 508] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] ftruncate(6, 31) = 0 [pid 511] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 508] <... futex resumed>) = 0 [pid 511] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [ 26.184941][ T512] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.210041][ T501] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 508] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 522 attached [pid 522] set_robust_list(0x5555568d86a0, 24) = 0 [pid 522] chdir("./8") = 0 [pid 522] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 522] setpgid(0, 0) = 0 [pid 522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 522] write(3, "1000", 4) = 4 [pid 522] close(3) = 0 [pid 522] symlink("/dev/binderfs", "./binderfs") = 0 [pid 521] <... write resumed>) = 1048576 [pid 522] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 521] munmap(0x7f391b0c1000, 138412032 [pid 522] <... rt_sigaction resumed>NULL, 8) = 0 [pid 521] <... munmap resumed>) = 0 [pid 522] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 522] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 522] rt_sigprocmask(SIG_BLOCK, ~[], [pid 521] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 522] <... rt_sigprocmask resumed>[], 8) = 0 [pid 522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[523]}, 88) = 523 [pid 522] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 522] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 523 attached [pid 523] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 523] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 523] memfd_create("syzkaller", 0) = 3 [pid 508] <... futex resumed>) = 0 [pid 523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 508] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 501] +++ killed by SIGBUS +++ [pid 500] +++ killed by SIGBUS +++ [pid 511] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 508] <... mmap resumed>) = 0x7f39234a0000 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=500, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 289] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 289] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./7/binderfs") = 0 [pid 289] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 511] +++ killed by SIGBUS +++ [pid 508] +++ killed by SIGBUS +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=508, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./8/binderfs") = 0 [pid 291] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 523] munmap(0x7f391b0c1000, 138412032) = 0 [pid 523] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 523] ioctl(4, LOOP_SET_FD, 3 [pid 521] <... openat resumed>) = 4 [pid 521] ioctl(4, LOOP_SET_FD, 3 [pid 523] <... ioctl resumed>) = 0 [pid 523] close(3) = 0 [pid 523] close(4 [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 521] <... ioctl resumed>) = 0 [pid 290] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 521] close(3) = 0 [pid 290] <... openat resumed>) = 4 [pid 521] close(4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./7/file0") = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./7") = 0 [pid 290] mkdir("./8", 0777) = 0 [ 26.232577][ T511] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 290] close(3) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 526 ./strace-static-x86_64: Process 526 attached [pid 526] set_robust_list(0x5555568d86a0, 24) = 0 [pid 526] chdir("./8") = 0 [pid 526] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 526] setpgid(0, 0) = 0 [pid 526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 526] write(3, "1000", 4) = 4 [pid 526] close(3) = 0 [pid 526] symlink("/dev/binderfs", "./binderfs") = 0 [pid 526] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 526] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 526] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 526] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[527]}, 88) = 527 ./strace-static-x86_64: Process 527 attached [pid 526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 526] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 527] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 527] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 527] memfd_create("syzkaller", 0) = 3 [pid 527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 527] munmap(0x7f391b0c1000, 138412032) = 0 [pid 527] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 523] <... close resumed>) = 0 [pid 523] mkdir("./file0", 0777) = 0 [pid 523] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 521] <... close resumed>) = 0 [pid 521] mkdir("./file0", 0777) = 0 [pid 521] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 291] <... umount2 resumed>) = 0 [pid 289] <... umount2 resumed>) = 0 [pid 291] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./8/file0", [pid 289] newfstatat(AT_FDCWD, "./7/file0", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] <... openat resumed>) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... openat resumed>) = 4 [pid 291] getdents64(4, [pid 289] newfstatat(4, "", [pid 291] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, [pid 289] getdents64(4, [pid 291] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 289] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 291] close(4) = 0 [pid 289] getdents64(4, [pid 291] rmdir("./8/file0" [pid 289] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 289] close(4 [pid 291] getdents64(3, [pid 289] <... close resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 289] rmdir("./7/file0" [pid 291] <... close resumed>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 291] rmdir("./8") = 0 [pid 289] getdents64(3, [pid 291] mkdir("./9", 0777 [pid 289] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 289] close(3 [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 289] <... close resumed>) = 0 [pid 289] rmdir("./7") = 0 [pid 289] mkdir("./8", 0777 [pid 521] <... mount resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 289] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 521] <... openat resumed>) = 3 [pid 521] chdir("./file0") = 0 [pid 521] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 527] <... openat resumed>) = 4 [pid 291] <... openat resumed>) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 530 [pid 527] ioctl(4, LOOP_SET_FD, 3) = 0 ./strace-static-x86_64: Process 530 attached [pid 527] close(3 [pid 521] <... openat resumed>) = 4 [pid 289] <... openat resumed>) = 3 [pid 521] ioctl(4, LOOP_CLR_FD) = 0 [pid 521] close(4) = 0 [pid 521] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 521] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] <... futex resumed>) = 0 [pid 521] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 520] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... open resumed>) = 4 [pid 521] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 521] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] <... futex resumed>) = 0 [pid 521] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 520] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... write resumed>) = 9 [pid 521] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 527] <... close resumed>) = 0 [pid 521] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] ioctl(3, LOOP_CLR_FD [pid 527] close(4 [pid 521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] <... futex resumed>) = 0 [pid 521] creat("./bus", 000 [pid 520] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... creat resumed>) = 5 [pid 521] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 521] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] <... futex resumed>) = 0 [pid 521] creat("./bus", 000 [pid 520] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... creat resumed>) = 6 [pid 521] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 521] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] <... futex resumed>) = 0 [pid 521] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 520] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... open resumed>) = 7 [pid 521] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 521] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] <... futex resumed>) = 0 [pid 521] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 520] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... mmap resumed>) = 0x20000000 [pid 521] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 521] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] <... futex resumed>) = 0 [pid 521] ftruncate(6, 31 [pid 520] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... ftruncate resumed>) = 0 [pid 521] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 521] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 26.433006][ T521] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 520] <... futex resumed>) = 0 [pid 289] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 530] set_robust_list(0x5555568d86a0, 24 [pid 520] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] close(3 [pid 530] <... set_robust_list resumed>) = 0 [pid 530] chdir("./9") = 0 [pid 530] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 530] setpgid(0, 0) = 0 [pid 530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 530] write(3, "1000", 4) = 4 [pid 530] close(3) = 0 [pid 530] symlink("/dev/binderfs", "./binderfs") = 0 [pid 530] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 530] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 530] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 530] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 530] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[535]}, 88) = 535 [pid 530] rt_sigprocmask(SIG_SETMASK, [], [pid 520] <... futex resumed>) = 0 ./strace-static-x86_64: Process 535 attached [pid 530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 523] <... mount resumed>) = 0 [pid 521] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 530] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] <... mmap resumed>) = 0x7f39234a0000 [pid 535] set_robust_list(0x7f39234e19a0, 24 [pid 530] <... futex resumed>) = 0 [pid 523] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 520] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE [pid 530] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 535] <... set_robust_list resumed>) = 0 [pid 523] <... openat resumed>) = 3 [pid 520] <... mprotect resumed>) = 0 [pid 535] rt_sigprocmask(SIG_SETMASK, [], [pid 523] chdir("./file0" [pid 520] rt_sigprocmask(SIG_BLOCK, ~[], [pid 535] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 523] <... chdir resumed>) = 0 [pid 520] <... rt_sigprocmask resumed>[], 8) = 0 [pid 523] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 535] memfd_create("syzkaller", 0 [pid 520] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} [pid 535] <... memfd_create resumed>) = 3 [pid 520] <... clone3 resumed> ) = ? [pid 535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 521] +++ killed by SIGBUS +++ [pid 520] +++ killed by SIGBUS +++ [pid 527] <... close resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=520, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 527] mkdir("./file0", 0777 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 292] <... restart_syscall resumed>) = 0 [pid 535] <... write resumed>) = 1048576 [pid 292] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 535] munmap(0x7f391b0c1000, 138412032 [pid 292] <... openat resumed>) = 3 [pid 535] <... munmap resumed>) = 0 [pid 292] newfstatat(3, "", [pid 535] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, [pid 527] <... mkdir resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 527] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 292] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./9/binderfs") = 0 [pid 292] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 535] <... openat resumed>) = 4 [pid 523] <... openat resumed>) = 4 [pid 289] <... close resumed>) = 0 [pid 535] ioctl(4, LOOP_SET_FD, 3 [pid 523] ioctl(4, LOOP_CLR_FD [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 537 ./strace-static-x86_64: Process 537 attached [ 26.479488][ T521] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.495214][ T523] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 537] set_robust_list(0x5555568d86a0, 24) = 0 [pid 537] chdir("./8") = 0 [pid 537] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 537] setpgid(0, 0) = 0 [pid 537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 537] write(3, "1000", 4) = 4 [pid 537] close(3) = 0 [pid 537] symlink("/dev/binderfs", "./binderfs") = 0 [pid 537] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 537] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 537] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 537] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 537] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0}./strace-static-x86_64: Process 540 attached => {parent_tid=[540]}, 88) = 540 [pid 537] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 537] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 540] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 540] memfd_create("syzkaller", 0) = 3 [pid 540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 292] <... umount2 resumed>) = 0 [pid 292] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 523] <... ioctl resumed>) = 0 [pid 523] close(4 [pid 292] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./9/file0") = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./9") = 0 [pid 292] mkdir("./10", 0777 [pid 535] <... ioctl resumed>) = 0 [pid 523] <... close resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 523] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 535] close(3 [pid 523] <... open resumed>) = 4 [pid 523] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 523] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 523] creat("./bus", 000 [pid 522] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] <... close resumed>) = 0 [pid 523] <... creat resumed>) = 5 [pid 522] <... futex resumed>) = 0 [pid 523] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 523] creat("./bus", 000 [pid 522] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... creat resumed>) = 6 [pid 522] <... futex resumed>) = 0 [pid 535] close(4 [pid 523] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... openat resumed>) = 3 [pid 535] <... close resumed>) = 0 [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] ioctl(3, LOOP_CLR_FD [pid 523] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 522] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 523] <... open resumed>) = 7 [pid 522] <... futex resumed>) = 0 [pid 292] close(3 [pid 523] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... close resumed>) = 0 [pid 535] mkdir("./file0", 0777 [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 535] <... mkdir resumed>) = 0 [pid 523] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 522] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 523] <... mmap resumed>) = 0x20000000 [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 542 [pid 523] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 523] ftruncate(6, 31 [pid 522] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... ftruncate resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 523] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 523] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 522] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 522] <... futex resumed>) = 0 [pid 540] <... write resumed>) = 1048576 [pid 527] <... mount resumed>) = 0 [pid 522] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] munmap(0x7f391b0c1000, 138412032 [pid 522] <... futex resumed>) = 0 [pid 522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 542 attached [pid 542] set_robust_list(0x5555568d86a0, 24) = 0 [pid 542] chdir("./10") = 0 [pid 542] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 542] setpgid(0, 0) = 0 [pid 542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 542] write(3, "1000", 4) = 4 [pid 542] close(3) = 0 [pid 542] symlink("/dev/binderfs", "./binderfs") = 0 [pid 542] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 542] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 542] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 542] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 542] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[545]}, 88) = 545 [pid 542] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 542] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 545 attached [pid 545] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 545] memfd_create("syzkaller", 0) = 3 [pid 545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 527] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 540] <... munmap resumed>) = 0 [pid 527] <... openat resumed>) = 3 [ 26.544798][ T527] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 26.578752][ T523] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 540] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 527] chdir("./file0") = 0 [pid 540] ioctl(4, LOOP_SET_FD, 3 [pid 527] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 523] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 522] <... mmap resumed>) = 0x7f39234a0000 [pid 522] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 522] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[547]}, 88) = 547 [pid 522] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 522] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = ? [pid 535] <... mount resumed>) = 0 [pid 540] <... ioctl resumed>) = 0 [pid 527] <... openat resumed>) = 4 [pid 540] close(3 [pid 527] ioctl(4, LOOP_CLR_FD) = 0 [pid 540] <... close resumed>) = 0 [pid 545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 540] close(4 [pid 527] close(4./strace-static-x86_64: Process 547 attached ) = 0 [pid 540] <... close resumed>) = 0 [pid 540] mkdir("./file0", 0777 [pid 535] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 527] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... mkdir resumed>) = 0 [pid 540] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 527] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 547] +++ killed by SIGBUS +++ [pid 527] <... open resumed>) = 4 [pid 527] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... write resumed>) = 9 [pid 527] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] <... futex resumed>) = 0 [pid 527] creat("./bus", 000 [pid 526] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... creat resumed>) = 5 [pid 526] <... futex resumed>) = 0 [pid 527] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... futex resumed>) = 0 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] creat("./bus", 000 [pid 526] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... creat resumed>) = 6 [pid 526] <... futex resumed>) = 0 [pid 523] +++ killed by SIGBUS +++ [pid 522] +++ killed by SIGBUS +++ [pid 527] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=522, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 527] <... futex resumed>) = 0 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 526] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... open resumed>) = 7 [pid 526] <... futex resumed>) = 0 [pid 527] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... futex resumed>) = 0 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 526] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... mmap resumed>) = 0x20000000 [pid 526] <... futex resumed>) = 0 [pid 527] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 527] <... futex resumed>) = 0 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] ftruncate(6, 31 [pid 526] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... ftruncate resumed>) = 0 [pid 526] <... futex resumed>) = 0 [pid 527] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... futex resumed>) = 0 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 535] <... openat resumed>) = 3 [pid 526] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 545] <... write resumed>) = 1048576 [pid 545] munmap(0x7f391b0c1000, 138412032) = 0 [pid 545] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 545] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 545] close(3) = 0 [pid 545] close(4 [pid 526] <... mmap resumed>) = 0x7f39234a0000 [pid 526] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 526] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[549]}, 88) = 549 [pid 526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 526] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 526] <... futex resumed>) = ? ./strace-static-x86_64: Process 549 attached [pid 288] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 535] chdir("./file0" [pid 288] <... openat resumed>) = 3 [pid 535] <... chdir resumed>) = 0 [pid 288] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 535] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 288] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 288] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./8/binderfs") = 0 [ 26.599947][ T535] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 26.625267][ T527] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 288] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 549] +++ killed by SIGBUS +++ [pid 545] <... close resumed>) = 0 [pid 535] <... openat resumed>) = 4 [pid 540] <... mount resumed>) = 0 [pid 545] mkdir("./file0", 0777 [pid 535] ioctl(4, LOOP_CLR_FD [pid 540] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 540] chdir("./file0" [pid 527] +++ killed by SIGBUS +++ [pid 526] +++ killed by SIGBUS +++ [pid 545] <... mkdir resumed>) = 0 [pid 545] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=526, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 290] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 540] <... chdir resumed>) = 0 [pid 290] newfstatat(3, "", [pid 540] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./8/binderfs") = 0 [pid 290] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 535] <... ioctl resumed>) = 0 [pid 288] <... umount2 resumed>) = 0 [pid 535] close(4) = 0 [pid 288] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 535] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 535] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] newfstatat(AT_FDCWD, "./8/file0", [pid 535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] <... futex resumed>) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 535] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 530] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 535] <... open resumed>) = 4 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 535] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 535] <... futex resumed>) = 1 [pid 530] <... futex resumed>) = 0 [pid 288] <... openat resumed>) = 4 [pid 535] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] newfstatat(4, "", [pid 535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] <... futex resumed>) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 535] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 530] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] getdents64(4, [pid 535] <... write resumed>) = 9 [pid 288] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 535] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] getdents64(4, [pid 540] <... openat resumed>) = 4 [pid 535] <... futex resumed>) = 1 [pid 530] <... futex resumed>) = 0 [pid 288] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 540] ioctl(4, LOOP_CLR_FD [pid 535] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] close(4 [pid 535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] <... futex resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 535] creat("./bus", 000 [pid 530] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] rmdir("./8/file0" [pid 535] <... creat resumed>) = 5 [pid 535] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 535] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] <... futex resumed>) = 0 [pid 288] <... rmdir resumed>) = 0 [pid 535] creat("./bus", 000 [pid 530] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] getdents64(3, [pid 535] <... creat resumed>) = 6 [pid 535] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 535] <... futex resumed>) = 1 [pid 530] <... futex resumed>) = 0 [pid 288] close(3 [pid 535] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] <... futex resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 535] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 530] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] rmdir("./8" [pid 535] <... open resumed>) = 7 [pid 535] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 535] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] <... futex resumed>) = 0 [pid 288] <... rmdir resumed>) = 0 [pid 535] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 530] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] mkdir("./9", 0777 [pid 535] <... mmap resumed>) = 0x20000000 [pid 535] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 535] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] <... futex resumed>) = 0 [pid 535] ftruncate(6, 31 [pid 530] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] <... mkdir resumed>) = 0 [pid 535] <... ftruncate resumed>) = 0 [pid 288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 535] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 535] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 26.651871][ T540] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 530] <... futex resumed>) = 0 [pid 530] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 530] <... futex resumed>) = 0 [pid 288] <... openat resumed>) = 3 [pid 288] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 288] close(3) = 0 [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 554 [pid 540] <... ioctl resumed>) = 0 [pid 540] close(4) = 0 [pid 540] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 537] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... umount2 resumed>) = 0 [pid 540] <... futex resumed>) = 1 [pid 540] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 540] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 537] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 1 [pid 540] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 540] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 537] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 1 [pid 540] creat("./bus", 000) = 5 [pid 540] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 537] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 1 [pid 540] creat("./bus", 000) = 6 [pid 540] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 537] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 1 [pid 540] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 7 [pid 540] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 537] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 1 [pid 540] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 540] ftruncate(6, 31 [pid 537] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... ftruncate resumed>) = 0 [pid 537] <... futex resumed>) = 0 [pid 540] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 0 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234a0000 [pid 537] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 537] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 537] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[555]}, 88) = 555 [pid 537] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 537] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 537] <... futex resumed>) = ? ./strace-static-x86_64: Process 554 attached [pid 554] set_robust_list(0x5555568d86a0, 24) = 0 [pid 554] chdir("./9") = 0 [pid 554] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 26.702970][ T535] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.733233][ T540] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 554] setpgid(0, 0) = 0 [pid 554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 554] write(3, "1000", 4) = 4 [pid 554] close(3) = 0 [pid 554] symlink("/dev/binderfs", "./binderfs") = 0 [pid 554] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 290] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 554] <... rt_sigaction resumed>NULL, 8) = 0 [pid 554] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 554] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 554] <... mmap resumed>) = 0x7f39234c1000 [pid 554] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 554] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 554] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[556]}, 88) = 556 [pid 290] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 554] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 554] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 556 attached [pid 535] +++ killed by SIGBUS +++ [pid 530] +++ killed by SIGBUS +++ [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=530, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 290] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 290] <... openat resumed>) = 4 [pid 291] <... restart_syscall resumed>) = 0 [pid 290] newfstatat(4, "", [pid 291] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] newfstatat(3, "", [pid 290] getdents64(4, ./strace-static-x86_64: Process 555 attached [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 555] +++ killed by SIGBUS +++ [pid 556] set_robust_list(0x7f39234e19a0, 24 [pid 545] <... mount resumed>) = 0 [pid 291] getdents64(3, [pid 290] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 556] <... set_robust_list resumed>) = 0 [pid 545] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 291] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 290] getdents64(4, [pid 291] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 540] +++ killed by SIGBUS +++ [pid 556] rt_sigprocmask(SIG_SETMASK, [], [pid 537] +++ killed by SIGBUS +++ [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] close(4 [pid 545] <... openat resumed>) = 3 [pid 291] newfstatat(AT_FDCWD, "./9/binderfs", [pid 290] <... close resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] rmdir("./8/file0" [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=537, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 556] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 545] chdir("./file0" [pid 556] memfd_create("syzkaller", 0 [pid 545] <... chdir resumed>) = 0 [pid 291] unlink("./9/binderfs" [pid 289] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... unlink resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 289] <... restart_syscall resumed>) = 0 [pid 291] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] getdents64(3, [pid 556] <... memfd_create resumed>) = 3 [pid 545] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 290] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./8") = 0 [pid 289] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] mkdir("./9", 0777) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 289] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 289] <... openat resumed>) = 3 [pid 290] close(3 [pid 556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 545] <... openat resumed>) = 4 [pid 290] <... close resumed>) = 0 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 289] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./8/binderfs") = 0 [pid 289] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 556] <... mmap resumed>) = 0x7f391b0c1000 [pid 545] ioctl(4, LOOP_CLR_FD [pid 290] <... clone resumed>, child_tidptr=0x5555568d8690) = 557 ./strace-static-x86_64: Process 557 attached [pid 557] set_robust_list(0x5555568d86a0, 24) = 0 [pid 557] chdir("./9") = 0 [pid 557] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 557] setpgid(0, 0) = 0 [pid 557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 557] write(3, "1000", 4) = 4 [pid 557] close(3) = 0 [pid 557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 557] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 557] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 556] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 557] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [ 26.733482][ T545] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 557] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[558]}, 88) = 558 [pid 557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 557] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 558 attached [pid 558] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 558] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 558] memfd_create("syzkaller", 0) = 3 [pid 558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 556] <... write resumed>) = 1048576 [pid 556] munmap(0x7f391b0c1000, 138412032) = 0 [pid 556] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 558] munmap(0x7f391b0c1000, 138412032) = 0 [pid 558] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./9/file0") = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./9") = 0 [pid 291] mkdir("./10", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 556] <... openat resumed>) = 4 [pid 545] <... ioctl resumed>) = 0 [pid 556] ioctl(4, LOOP_SET_FD, 3 [pid 545] close(4 [pid 556] <... ioctl resumed>) = 0 [pid 556] close(3) = 0 [pid 556] close(4 [pid 558] <... openat resumed>) = 4 [pid 558] ioctl(4, LOOP_SET_FD, 3 [pid 289] <... umount2 resumed>) = 0 [pid 289] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 289] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 289] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 289] close(4) = 0 [pid 289] rmdir("./8/file0") = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./8") = 0 [pid 289] mkdir("./9", 0777) = 0 [pid 289] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 556] <... close resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 560 ./strace-static-x86_64: Process 560 attached [pid 560] set_robust_list(0x5555568d86a0, 24) = 0 [pid 560] chdir("./10") = 0 [pid 560] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 560] setpgid(0, 0) = 0 [pid 560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 560] write(3, "1000", 4) = 4 [pid 560] close(3) = 0 [pid 560] symlink("/dev/binderfs", "./binderfs") = 0 [pid 560] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 560] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 560] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 556] mkdir("./file0", 0777 [pid 545] <... close resumed>) = 0 [pid 560] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 556] <... mkdir resumed>) = 0 [pid 545] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 545] <... futex resumed>) = 1 [pid 542] <... futex resumed>) = 0 [pid 545] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 542] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] <... futex resumed>) = 0 [pid 545] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 542] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... open resumed>) = 4 [pid 545] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 542] <... futex resumed>) = 0 [pid 545] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 542] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... write resumed>) = 9 [pid 542] <... futex resumed>) = 0 [pid 545] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 0 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 545] creat("./bus", 000 [pid 542] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... creat resumed>) = 5 [pid 542] <... futex resumed>) = 0 [pid 545] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 0 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 545] creat("./bus", 000 [pid 542] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... creat resumed>) = 6 [pid 542] <... futex resumed>) = 0 [pid 545] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 0 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 545] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 542] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... open resumed>) = 7 [pid 542] <... futex resumed>) = 0 [pid 545] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 0 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 545] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 542] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... mmap resumed>) = 0x20000000 [pid 542] <... futex resumed>) = 0 [pid 545] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 0 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 545] ftruncate(6, 31 [pid 542] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... ftruncate resumed>) = 0 [pid 542] <... futex resumed>) = 0 [pid 545] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 0 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 289] <... openat resumed>) = 3 [pid 558] <... ioctl resumed>) = 0 [pid 542] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] ioctl(3, LOOP_CLR_FD [pid 542] <... futex resumed>) = 0 [pid 542] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 289] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 558] close(3 [pid 289] close(3) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 542] <... mmap resumed>) = 0x7f39234a0000 [pid 542] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 542] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 289] <... clone resumed>, child_tidptr=0x5555568d8690) = 562 [pid 542] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[563]}, 88) = 563 [pid 542] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 542] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 542] <... futex resumed>) = ? [pid 558] <... close resumed>) = 0 [pid 560] <... mmap resumed>) = 0x7f39234c1000 [pid 558] close(4 [pid 560] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 562 attached [pid 562] set_robust_list(0x5555568d86a0, 24 [pid 560] rt_sigprocmask(SIG_BLOCK, ~[], [pid 562] <... set_robust_list resumed>) = 0 [pid 560] <... rt_sigprocmask resumed>[], 8) = 0 [pid 560] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 562] chdir("./9") = 0 [pid 562] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 560] <... clone3 resumed> => {parent_tid=[564]}, 88) = 564 [pid 562] <... prctl resumed>) = 0 [pid 560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 562] setpgid(0, 0 [pid 560] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... setpgid resumed>) = 0 [pid 560] <... futex resumed>) = 0 [pid 562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 560] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 563 attached ./strace-static-x86_64: Process 564 attached [pid 562] <... openat resumed>) = 3 [pid 562] write(3, "1000", 4) = 4 [pid 564] set_robust_list(0x7f39234e19a0, 24 [pid 563] +++ killed by SIGBUS +++ [pid 562] close(3) = 0 [pid 562] symlink("/dev/binderfs", "./binderfs") = 0 [pid 562] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 562] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 562] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 562] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 562] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 564] <... set_robust_list resumed>) = 0 [pid 562] <... clone3 resumed> => {parent_tid=[566]}, 88) = 566 [pid 562] rt_sigprocmask(SIG_SETMASK, [], [pid 564] rt_sigprocmask(SIG_SETMASK, [], [pid 562] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 562] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 545] +++ killed by SIGBUS +++ [pid 542] +++ killed by SIGBUS +++ [pid 562] <... futex resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=542, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 562] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 564] memfd_create("syzkaller", 0 [pid 292] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 566 attached [pid 292] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 566] set_robust_list(0x7f39234e19a0, 24 [pid 564] <... memfd_create resumed>) = 3 [pid 566] <... set_robust_list resumed>) = 0 [pid 564] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 566] rt_sigprocmask(SIG_SETMASK, [], [pid 564] <... mmap resumed>) = 0x7f391b0c1000 [pid 566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 564] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 558] <... close resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 558] mkdir("./file0", 0777 [pid 292] newfstatat(3, "", [pid 566] memfd_create("syzkaller", 0 [pid 558] <... mkdir resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 558] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 292] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./10/binderfs") = 0 [pid 292] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 556] <... mount resumed>) = 0 [pid 566] <... memfd_create resumed>) = 3 [pid 556] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 564] <... write resumed>) = 1048576 [pid 556] <... openat resumed>) = 3 [pid 556] chdir("./file0") = 0 [pid 566] <... mmap resumed>) = 0x7f391b0c1000 [pid 556] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 564] munmap(0x7f391b0c1000, 138412032) = 0 [pid 564] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 566] munmap(0x7f391b0c1000, 138412032) = 0 [ 26.910019][ T545] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.946320][ T556] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 566] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 564] <... openat resumed>) = 4 [pid 556] <... openat resumed>) = 4 [pid 292] <... umount2 resumed>) = 0 [pid 566] ioctl(4, LOOP_SET_FD, 3 [pid 564] ioctl(4, LOOP_SET_FD, 3 [pid 556] ioctl(4, LOOP_CLR_FD [pid 292] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 566] <... ioctl resumed>) = 0 [pid 564] <... ioctl resumed>) = 0 [pid 556] <... ioctl resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 566] close(3 [pid 564] close(3 [pid 556] close(4 [pid 292] newfstatat(AT_FDCWD, "./10/file0", [pid 566] <... close resumed>) = 0 [pid 564] <... close resumed>) = 0 [pid 556] <... close resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 566] close(4 [pid 564] close(4 [pid 558] <... mount resumed>) = 0 [pid 556] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 556] <... futex resumed>) = 1 [pid 554] <... futex resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 556] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 554] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 554] <... futex resumed>) = 0 [pid 292] <... openat resumed>) = 4 [pid 556] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 554] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] newfstatat(4, "", [pid 558] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 556] <... open resumed>) = 4 [pid 292] getdents64(4, [pid 556] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 556] <... futex resumed>) = 1 [pid 554] <... futex resumed>) = 0 [pid 292] getdents64(4, [pid 556] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 554] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 554] <... futex resumed>) = 0 [pid 292] close(4 [pid 556] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 554] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... close resumed>) = 0 [pid 556] <... write resumed>) = 9 [pid 292] rmdir("./10/file0" [pid 558] <... openat resumed>) = 3 [pid 556] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... rmdir resumed>) = 0 [pid 556] <... futex resumed>) = 1 [pid 554] <... futex resumed>) = 0 [pid 292] getdents64(3, [pid 556] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 554] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 554] <... futex resumed>) = 0 [pid 292] close(3 [pid 556] creat("./bus", 000 [pid 554] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... close resumed>) = 0 [pid 556] <... creat resumed>) = 5 [pid 292] rmdir("./10" [pid 556] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... rmdir resumed>) = 0 [pid 556] <... futex resumed>) = 1 [pid 554] <... futex resumed>) = 0 [pid 292] mkdir("./11", 0777 [pid 558] chdir("./file0" [pid 556] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 554] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... mkdir resumed>) = 0 [pid 556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 554] <... futex resumed>) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 556] creat("./bus", 000 [pid 554] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] <... creat resumed>) = 6 [pid 556] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] <... futex resumed>) = 0 [pid 556] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 554] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 554] <... futex resumed>) = 0 [pid 556] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 554] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] <... open resumed>) = 7 [pid 558] <... chdir resumed>) = 0 [pid 556] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] <... futex resumed>) = 0 [pid 558] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 556] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 554] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 554] <... futex resumed>) = 0 [pid 556] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 554] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] <... mmap resumed>) = 0x20000000 [pid 556] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] <... futex resumed>) = 0 [pid 556] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 554] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 554] <... futex resumed>) = 0 [pid 556] ftruncate(6, 31 [pid 554] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 556] <... ftruncate resumed>) = 0 [pid 556] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] <... futex resumed>) = 0 [pid 556] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 554] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 554] <... futex resumed>) = 0 [pid 554] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234a0000 [pid 554] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE [pid 566] <... close resumed>) = 0 [pid 556] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 554] <... mprotect resumed>) = 0 [pid 566] mkdir("./file0", 0777) = 0 [pid 566] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 556] +++ killed by SIGBUS +++ [pid 554] +++ killed by SIGBUS +++ [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=554, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 288] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 288] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 288] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 288] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./9/binderfs") = 0 [pid 288] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 564] <... close resumed>) = 0 [pid 558] <... openat resumed>) = 4 [pid 292] <... openat resumed>) = 3 [pid 292] ioctl(3, LOOP_CLR_FD [pid 564] mkdir("./file0", 0777 [pid 558] ioctl(4, LOOP_CLR_FD [pid 564] <... mkdir resumed>) = 0 [ 27.041959][ T558] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 27.060672][ T556] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 564] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] close(3 [pid 558] <... ioctl resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 288] <... umount2 resumed>) = 0 [pid 558] close(4 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 558] <... close resumed>) = 0 [pid 288] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 558] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 557] <... futex resumed>) = 0 [pid 558] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 557] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 557] <... futex resumed>) = 0 [pid 558] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 557] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... open resumed>) = 4 [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 576 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 558] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 557] <... futex resumed>) = 0 [pid 288] newfstatat(AT_FDCWD, "./9/file0", [pid 558] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 557] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 557] <... futex resumed>) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 558] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 557] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] <... write resumed>) = 9 [pid 288] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 558] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 557] <... futex resumed>) = 0 [pid 558] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 557] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 557] <... futex resumed>) = 0 [pid 558] creat("./bus", 000 [pid 557] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 576 attached [pid 558] <... creat resumed>) = 5 [pid 576] set_robust_list(0x5555568d86a0, 24 [pid 558] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... set_robust_list resumed>) = 0 [pid 558] <... futex resumed>) = 1 [pid 557] <... futex resumed>) = 0 [pid 288] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 576] chdir("./11" [pid 558] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 557] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... chdir resumed>) = 0 [pid 558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 557] <... futex resumed>) = 0 [pid 288] <... openat resumed>) = 4 [pid 576] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 558] creat("./bus", 000 [pid 557] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] newfstatat(4, "", [pid 576] <... prctl resumed>) = 0 [pid 558] <... creat resumed>) = 6 [pid 576] setpgid(0, 0 [pid 558] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 576] <... setpgid resumed>) = 0 [pid 558] <... futex resumed>) = 1 [pid 557] <... futex resumed>) = 0 [pid 288] getdents64(4, [pid 576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 558] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 557] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... openat resumed>) = 3 [pid 558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 557] <... futex resumed>) = 0 [pid 288] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 576] write(3, "1000", 4 [pid 558] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 557] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] getdents64(4, [pid 576] <... write resumed>) = 4 [pid 558] <... open resumed>) = 7 [pid 288] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 576] close(3 [pid 558] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] close(4 [pid 576] <... close resumed>) = 0 [pid 558] <... futex resumed>) = 1 [pid 557] <... futex resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 576] symlink("/dev/binderfs", "./binderfs" [pid 558] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 557] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] rmdir("./9/file0" [pid 576] <... symlink resumed>) = 0 [pid 558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 557] <... futex resumed>) = 0 [pid 576] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 558] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 557] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 0 [pid 558] <... mmap resumed>) = 0x20000000 [pid 288] <... rmdir resumed>) = 0 [pid 576] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 558] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... rt_sigaction resumed>NULL, 8) = 0 [pid 558] <... futex resumed>) = 1 [pid 557] <... futex resumed>) = 0 [pid 576] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 558] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 557] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 557] <... futex resumed>) = 0 [pid 576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 558] ftruncate(6, 31 [pid 557] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... mmap resumed>) = 0x7f39234c1000 [pid 558] <... ftruncate resumed>) = 0 [pid 576] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 558] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... mprotect resumed>) = 0 [pid 558] <... futex resumed>) = 1 [pid 557] <... futex resumed>) = 0 [pid 576] rt_sigprocmask(SIG_BLOCK, ~[], [pid 558] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 557] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... rt_sigprocmask resumed>[], 8) = 0 [pid 558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 557] <... futex resumed>) = 0 [pid 576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 566] <... mount resumed>) = 0 [pid 288] getdents64(3, [pid 566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 288] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 566] <... openat resumed>) = 3 [pid 288] close(3 [pid 566] chdir("./file0" [pid 288] <... close resumed>) = 0 [pid 566] <... chdir resumed>) = 0 [pid 288] rmdir("./9" [pid 566] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 288] <... rmdir resumed>) = 0 [pid 566] <... openat resumed>) = 4 [pid 288] mkdir("./10", 0777 [pid 566] ioctl(4, LOOP_CLR_FD [pid 288] <... mkdir resumed>) = 0 [pid 566] <... ioctl resumed>) = 0 [pid 288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 566] close(4 [pid 288] <... openat resumed>) = 3 [pid 566] <... close resumed>) = 0 [pid 288] ioctl(3, LOOP_CLR_FD [pid 566] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 566] <... futex resumed>) = 1 [pid 562] <... futex resumed>) = 0 [pid 288] close(3 [pid 566] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 562] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 557] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... close resumed>) = 0 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 562] <... futex resumed>) = 0 [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 566] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 562] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] <... clone resumed>, child_tidptr=0x5555568d8690) = 577 [pid 558] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 576] <... clone3 resumed> => {parent_tid=[578]}, 88) = 578 [pid 576] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 576] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 578 attached [pid 578] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 578] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 578] memfd_create("syzkaller", 0) = 3 [pid 578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 557] <... futex resumed>) = ? [pid 566] <... open resumed>) = 4 [pid 566] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 577 attached ) = 1 [pid 562] <... futex resumed>) = 0 [pid 566] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 562] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] <... write resumed>) = 9 [pid 562] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 558] +++ killed by SIGBUS +++ [pid 557] +++ killed by SIGBUS +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=557, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 566] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] set_robust_list(0x5555568d86a0, 24 [pid 566] <... futex resumed>) = 1 [pid 562] <... futex resumed>) = 0 [pid 577] <... set_robust_list resumed>) = 0 [pid 566] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 562] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] creat("./bus", 000 [pid 562] <... futex resumed>) = 0 [pid 577] chdir("./10" [pid 290] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 577] <... chdir resumed>) = 0 [pid 566] <... creat resumed>) = 5 [pid 562] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 577] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 566] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 566] <... futex resumed>) = 0 [pid 562] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 577] <... prctl resumed>) = 0 [pid 566] creat("./bus", 000 [pid 562] <... futex resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 577] setpgid(0, 0 [pid 566] <... creat resumed>) = 6 [pid 562] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] newfstatat(3, "", [pid 577] <... setpgid resumed>) = 0 [pid 566] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 566] <... futex resumed>) = 0 [pid 562] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 566] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 562] <... futex resumed>) = 0 [pid 577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] getdents64(3, [pid 566] <... open resumed>) = 7 [pid 562] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... openat resumed>) = 3 [pid 566] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 564] <... mount resumed>) = 0 [pid 577] write(3, "1000", 4 [pid 566] <... futex resumed>) = 1 [pid 562] <... futex resumed>) = 0 [pid 290] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 577] <... write resumed>) = 4 [pid 566] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 562] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] close(3 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 562] <... futex resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 577] <... close resumed>) = 0 [pid 566] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 564] <... openat resumed>) = 3 [pid 562] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] newfstatat(AT_FDCWD, "./9/binderfs", [pid 577] symlink("/dev/binderfs", "./binderfs" [pid 566] <... mmap resumed>) = 0x20000000 [pid 564] chdir("./file0" [pid 566] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 566] <... futex resumed>) = 1 [pid 562] <... futex resumed>) = 0 [pid 290] unlink("./9/binderfs" [pid 566] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 562] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 562] <... futex resumed>) = 0 [pid 290] <... unlink resumed>) = 0 [pid 577] <... symlink resumed>) = 0 [pid 566] ftruncate(6, 31 [pid 564] <... chdir resumed>) = 0 [pid 562] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 566] <... ftruncate resumed>) = 0 [pid 566] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 578] munmap(0x7f391b0c1000, 138412032) = 0 [ 27.208125][ T566] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 27.209748][ T558] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.233150][ T564] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 578] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 578] ioctl(4, LOOP_SET_FD, 3 [pid 577] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 577] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 577] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 577] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 577] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[580]}, 88) = 580 [pid 577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 577] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 580 attached [pid 580] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 580] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 580] memfd_create("syzkaller", 0) = 3 [pid 580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 564] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 566] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 562] <... futex resumed>) = 0 [pid 578] <... ioctl resumed>) = 0 [pid 564] <... openat resumed>) = 4 [pid 564] ioctl(4, LOOP_CLR_FD [pid 578] close(3 [pid 564] <... ioctl resumed>) = 0 [pid 578] <... close resumed>) = 0 [pid 564] close(4 [pid 580] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 578] close(4 [pid 566] +++ killed by SIGBUS +++ [pid 564] <... close resumed>) = 0 [pid 562] +++ killed by SIGBUS +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=562, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 289] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", [pid 578] <... close resumed>) = 0 [pid 564] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] mkdir("./file0", 0777 [pid 564] <... futex resumed>) = 1 [pid 560] <... futex resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, [pid 578] <... mkdir resumed>) = 0 [pid 564] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 578] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 560] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 560] <... futex resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 564] <... open resumed>) = 4 [pid 560] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 289] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 564] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [pid 560] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 560] <... futex resumed>) = 0 [pid 564] <... write resumed>) = 9 [pid 560] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 564] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [pid 560] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] creat("./bus", 000 [pid 560] <... futex resumed>) = 0 [pid 564] <... creat resumed>) = 5 [pid 560] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 289] newfstatat(AT_FDCWD, "./9/binderfs", [pid 564] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 564] <... futex resumed>) = 0 [pid 560] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] unlink("./9/binderfs" [pid 564] creat("./bus", 000 [pid 560] <... futex resumed>) = 0 [pid 580] <... write resumed>) = 1048576 [pid 289] <... unlink resumed>) = 0 [pid 564] <... creat resumed>) = 6 [pid 560] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 289] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 580] munmap(0x7f391b0c1000, 138412032 [pid 564] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [pid 560] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 560] <... futex resumed>) = 0 [pid 564] <... open resumed>) = 7 [pid 560] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 564] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [pid 560] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 560] <... futex resumed>) = 0 [pid 564] <... mmap resumed>) = 0x20000000 [pid 560] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 564] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [pid 560] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] ftruncate(6, 31 [pid 560] <... futex resumed>) = 0 [pid 564] <... ftruncate resumed>) = 0 [pid 560] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 564] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [pid 560] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... munmap resumed>) = 0 [pid 580] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 564] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 560] <... futex resumed>) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 564] +++ killed by SIGBUS +++ [pid 560] +++ killed by SIGBUS +++ [pid 580] <... openat resumed>) = 4 [pid 580] ioctl(4, LOOP_SET_FD, 3 [pid 290] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=560, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(AT_FDCWD, "./9/file0", [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] newfstatat(AT_FDCWD, "./10/binderfs", [pid 580] <... ioctl resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... openat resumed>) = 4 [pid 291] unlink("./10/binderfs" [pid 290] newfstatat(4, "", [pid 291] <... unlink resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 27.249736][ T566] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.281280][ T564] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 291] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] getdents64(4, [pid 580] close(3 [pid 290] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 580] <... close resumed>) = 0 [pid 290] getdents64(4, [pid 580] close(4 [pid 290] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./9/file0") = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./9") = 0 [pid 290] mkdir("./10", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 578] <... mount resumed>) = 0 [pid 578] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 578] chdir("./file0") = 0 [pid 578] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 580] <... close resumed>) = 0 [pid 578] <... openat resumed>) = 4 [pid 290] <... openat resumed>) = 3 [pid 289] <... umount2 resumed>) = 0 [pid 580] mkdir("./file0", 0777 [pid 578] ioctl(4, LOOP_CLR_FD [pid 290] ioctl(3, LOOP_CLR_FD [pid 289] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 289] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 580] <... mkdir resumed>) = 0 [pid 289] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 289] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 289] close(4 [pid 580] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 289] <... close resumed>) = 0 [pid 289] rmdir("./9/file0") = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./9") = 0 [pid 289] mkdir("./10", 0777) = 0 [ 27.305714][ T578] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 289] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./10/file0") = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./10") = 0 [pid 291] mkdir("./11", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 578] <... ioctl resumed>) = 0 [pid 290] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 289] <... openat resumed>) = 3 [pid 289] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 289] close(3) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 584 ./strace-static-x86_64: Process 584 attached [pid 584] set_robust_list(0x5555568d86a0, 24) = 0 [pid 584] chdir("./10") = 0 [pid 584] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 584] setpgid(0, 0) = 0 [pid 584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 584] write(3, "1000", 4) = 4 [pid 584] close(3) = 0 [pid 584] symlink("/dev/binderfs", "./binderfs") = 0 [pid 584] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 291] <... openat resumed>) = 3 [pid 290] close(3 [pid 578] close(4 [pid 291] ioctl(3, LOOP_CLR_FD [pid 584] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 584] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 584] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 584] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 584] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[585]}, 88) = 585 [pid 584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 584] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 584] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 290] <... close resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 586 [pid 578] <... close resumed>) = 0 [pid 578] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 578] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 585 attached [pid 585] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 585] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 576] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] close(3 [pid 578] <... futex resumed>) = 0 [pid 576] <... futex resumed>) = 1 [pid 578] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 576] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... close resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 578] <... open resumed>) = 4 [pid 291] <... clone resumed>, child_tidptr=0x5555568d8690) = 587 [pid 578] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 578] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 576] <... futex resumed>) = 0 [pid 578] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 576] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... write resumed>) = 9 [pid 578] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 578] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 576] <... futex resumed>) = 0 [pid 578] creat("./bus", 000 [pid 576] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... creat resumed>) = 5 [pid 578] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 578] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 576] <... futex resumed>) = 0 [pid 578] creat("./bus", 000 [pid 576] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... creat resumed>) = 6 [pid 578] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 578] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 576] <... futex resumed>) = 0 [pid 578] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 576] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... open resumed>) = 7 [pid 578] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 578] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 576] <... futex resumed>) = 0 [pid 578] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 576] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... mmap resumed>) = 0x20000000 [pid 578] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 578] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 576] <... futex resumed>) = 0 [pid 578] ftruncate(6, 31 [pid 576] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 578] <... ftruncate resumed>) = 0 [pid 578] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 578] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] memfd_create("syzkaller", 0) = 3 [pid 585] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 585] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 585] munmap(0x7f391b0c1000, 138412032) = 0 [pid 585] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 576] <... futex resumed>) = 0 [pid 576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 585] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 586 attached [pid 586] set_robust_list(0x5555568d86a0, 24./strace-static-x86_64: Process 587 attached [pid 578] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 576] <... mmap resumed>) = 0x7f39234a0000 [pid 587] set_robust_list(0x5555568d86a0, 24) = 0 [pid 587] chdir("./11" [pid 578] +++ killed by SIGBUS +++ [pid 576] +++ killed by SIGBUS +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=576, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 292] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 587] <... chdir resumed>) = 0 [pid 292] newfstatat(3, "", [pid 587] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 587] setpgid(0, 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./11/binderfs", [pid 587] <... setpgid resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 292] unlink("./11/binderfs" [pid 587] write(3, "1000", 4 [pid 292] <... unlink resumed>) = 0 [pid 587] <... write resumed>) = 4 [pid 292] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 587] close(3) = 0 [pid 587] symlink("/dev/binderfs", "./binderfs") = 0 [pid 587] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 587] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 586] <... set_robust_list resumed>) = 0 [pid 585] <... ioctl resumed>) = 0 [pid 587] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 586] chdir("./10" [pid 585] close(3 [pid 587] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 586] <... chdir resumed>) = 0 [pid 585] <... close resumed>) = 0 [pid 587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 586] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 585] close(4 [pid 587] <... mmap resumed>) = 0x7f39234c1000 [pid 586] <... prctl resumed>) = 0 [pid 587] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 586] setpgid(0, 0 [pid 587] <... mprotect resumed>) = 0 [pid 586] <... setpgid resumed>) = 0 [pid 580] <... mount resumed>) = 0 [pid 587] rt_sigprocmask(SIG_BLOCK, ~[], [pid 586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 580] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 587] <... rt_sigprocmask resumed>[], 8) = 0 [pid 586] <... openat resumed>) = 3 [pid 580] <... openat resumed>) = 3 [pid 587] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 586] write(3, "1000", 4 [pid 580] chdir("./file0"./strace-static-x86_64: Process 592 attached [pid 586] <... write resumed>) = 4 [pid 580] <... chdir resumed>) = 0 [pid 587] <... clone3 resumed> => {parent_tid=[592]}, 88) = 592 [pid 586] close(3 [pid 580] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 587] rt_sigprocmask(SIG_SETMASK, [], [pid 586] <... close resumed>) = 0 [pid 587] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 586] symlink("/dev/binderfs", "./binderfs" [pid 587] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... symlink resumed>) = 0 [pid 587] <... futex resumed>) = 0 [pid 586] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 586] <... futex resumed>) = 0 [pid 586] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 586] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 586] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 586] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 586] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[593]}, 88) = 593 [pid 586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 586] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 592] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 592] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 593 attached [pid 592] memfd_create("syzkaller", 0 [pid 593] set_robust_list(0x7f39234e19a0, 24 [pid 592] <... memfd_create resumed>) = 3 [pid 593] <... set_robust_list resumed>) = 0 [pid 592] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 593] rt_sigprocmask(SIG_SETMASK, [], [pid 592] <... mmap resumed>) = 0x7f391b0c1000 [pid 593] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 593] memfd_create("syzkaller", 0) = 3 [pid 593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 592] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 592] <... write resumed>) = 1048576 [pid 592] munmap(0x7f391b0c1000, 138412032) = 0 [pid 592] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 593] <... write resumed>) = 1048576 [pid 593] munmap(0x7f391b0c1000, 138412032) = 0 [pid 593] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 592] <... openat resumed>) = 4 [pid 585] <... close resumed>) = 0 [pid 580] <... openat resumed>) = 4 [pid 292] <... umount2 resumed>) = 0 [pid 585] mkdir("./file0", 0777 [pid 580] ioctl(4, LOOP_CLR_FD [pid 593] ioctl(4, LOOP_SET_FD, 3 [pid 592] ioctl(4, LOOP_SET_FD, 3 [pid 585] <... mkdir resumed>) = 0 [pid 292] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 585] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./11/file0") = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./11") = 0 [ 27.437733][ T578] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.455532][ T580] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 292] mkdir("./12", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 593] <... ioctl resumed>) = 0 [pid 592] <... ioctl resumed>) = 0 [pid 580] <... ioctl resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 593] close(3 [pid 592] close(3 [pid 580] close(4 [pid 292] ioctl(3, LOOP_CLR_FD [pid 593] <... close resumed>) = 0 [pid 592] <... close resumed>) = 0 [pid 580] <... close resumed>) = 0 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 593] close(4 [pid 592] close(4 [pid 580] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] close(3 [pid 593] <... close resumed>) = 0 [pid 592] <... close resumed>) = 0 [pid 580] <... futex resumed>) = 1 [pid 577] <... futex resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 593] mkdir("./file0", 0777 [pid 592] mkdir("./file0", 0777 [pid 580] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 593] <... mkdir resumed>) = 0 [pid 592] <... mkdir resumed>) = 0 [pid 580] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] <... futex resumed>) = 0 [pid 593] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 592] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 580] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 577] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 596 ./strace-static-x86_64: Process 596 attached [pid 596] set_robust_list(0x5555568d86a0, 24) = 0 [pid 596] chdir("./12") = 0 [pid 596] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 596] setpgid(0, 0) = 0 [pid 596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 596] write(3, "1000", 4) = 4 [pid 596] close(3) = 0 [pid 596] symlink("/dev/binderfs", "./binderfs") = 0 [pid 596] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 596] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 596] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 596] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 596] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[597]}, 88) = 597 [pid 596] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 596] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 597 attached [pid 597] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 597] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 597] memfd_create("syzkaller", 0) = 3 [pid 597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 580] <... open resumed>) = 4 [pid 580] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 577] <... futex resumed>) = 0 [pid 580] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 577] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... write resumed>) = 9 [pid 580] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 577] <... futex resumed>) = 0 [pid 580] creat("./bus", 000 [pid 577] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... creat resumed>) = 5 [pid 577] <... futex resumed>) = 0 [pid 580] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 0 [pid 577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 580] creat("./bus", 000 [pid 577] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... creat resumed>) = 6 [pid 577] <... futex resumed>) = 0 [pid 580] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 0 [pid 577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 580] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 577] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... open resumed>) = 7 [pid 577] <... futex resumed>) = 0 [pid 580] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 0 [pid 577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 580] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 577] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... mmap resumed>) = 0x20000000 [pid 577] <... futex resumed>) = 0 [pid 580] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 0 [pid 577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 580] ftruncate(6, 31 [pid 577] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... ftruncate resumed>) = 0 [pid 577] <... futex resumed>) = 0 [pid 580] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 580] <... futex resumed>) = 0 [pid 577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 577] <... futex resumed>) = 0 [pid 577] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234a0000 [pid 577] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 577] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 577] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[599]}, 88) = 599 [pid 577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 577] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = ? ./strace-static-x86_64: Process 599 attached [pid 597] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 599] +++ killed by SIGBUS +++ [pid 580] +++ killed by SIGBUS +++ [pid 577] +++ killed by SIGBUS +++ [pid 585] <... mount resumed>) = 0 [pid 585] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=577, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 585] chdir("./file0") = 0 [pid 288] restart_syscall(<... resuming interrupted clone ...> [pid 585] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 288] <... restart_syscall resumed>) = 0 [pid 288] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 288] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 288] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./10/binderfs") = 0 [pid 288] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 597] <... write resumed>) = 1048576 [pid 597] munmap(0x7f391b0c1000, 138412032) = 0 [pid 597] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 597] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 593] <... mount resumed>) = 0 [pid 585] <... openat resumed>) = 4 [pid 597] close(3 [pid 593] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 585] ioctl(4, LOOP_CLR_FD [pid 597] <... close resumed>) = 0 [pid 585] <... ioctl resumed>) = 0 [pid 597] close(4 [pid 585] close(4 [pid 597] <... close resumed>) = 0 [pid 593] <... openat resumed>) = 3 [pid 592] <... mount resumed>) = 0 [pid 585] <... close resumed>) = 0 [pid 597] mkdir("./file0", 0777 [pid 585] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] chdir("./file0") = 0 [pid 593] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 597] <... mkdir resumed>) = 0 [pid 597] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 585] <... futex resumed>) = 1 [pid 584] <... futex resumed>) = 0 [pid 593] <... openat resumed>) = 4 [pid 584] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 584] <... futex resumed>) = 0 [pid 584] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] ioctl(4, LOOP_CLR_FD [pid 585] <... open resumed>) = 4 [pid 585] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 584] <... futex resumed>) = 0 [pid 585] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 584] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] <... write resumed>) = 9 [pid 584] <... futex resumed>) = 0 [pid 585] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] <... futex resumed>) = 0 [pid 584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 585] creat("./bus", 000 [pid 584] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 584] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] <... creat resumed>) = 5 [pid 585] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 584] <... futex resumed>) = 0 [pid 584] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 585] creat("./bus", 000 [pid 584] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 592] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 585] <... creat resumed>) = 6 [pid 585] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 584] <... futex resumed>) = 0 [pid 585] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 584] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 584] <... futex resumed>) = 0 [pid 585] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 584] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 592] <... openat resumed>) = 3 [pid 585] <... open resumed>) = 7 [pid 592] chdir("./file0" [pid 585] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... chdir resumed>) = 0 [pid 585] <... futex resumed>) = 1 [pid 584] <... futex resumed>) = 0 [pid 592] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 585] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 584] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 585] <... mmap resumed>) = 0x20000000 [pid 584] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 585] <... futex resumed>) = 0 [pid 584] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 585] ftruncate(6, 31 [pid 584] <... futex resumed>) = 0 [pid 585] <... ftruncate resumed>) = 0 [pid 584] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 585] <... futex resumed>) = 0 [ 27.566571][ T580] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.585823][ T585] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 27.597869][ T593] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 27.607684][ T592] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 584] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 584] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234a0000 [pid 585] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 585] +++ killed by SIGBUS +++ [pid 584] +++ killed by SIGBUS +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=584, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 289] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 289] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 289] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./10/binderfs") = 0 [pid 289] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 597] <... mount resumed>) = 0 [pid 593] <... ioctl resumed>) = 0 [pid 288] <... umount2 resumed>) = 0 [pid 593] close(4 [pid 288] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 593] <... close resumed>) = 0 [pid 592] <... openat resumed>) = 4 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 593] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] ioctl(4, LOOP_CLR_FD [pid 288] newfstatat(AT_FDCWD, "./10/file0", [pid 593] <... futex resumed>) = 1 [pid 592] <... ioctl resumed>) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 593] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] close(4 [pid 586] <... futex resumed>) = 0 [pid 288] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 592] <... close resumed>) = 0 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 592] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 592] <... futex resumed>) = 1 [pid 587] <... futex resumed>) = 0 [pid 586] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... openat resumed>) = 4 [pid 593] <... futex resumed>) = 0 [pid 592] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 1 [pid 288] newfstatat(4, "", [pid 597] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 593] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [pid 586] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 597] <... openat resumed>) = 3 [pid 593] <... open resumed>) = 4 [pid 592] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 587] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] getdents64(4, [pid 597] chdir("./file0" [pid 593] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... chdir resumed>) = 0 [pid 593] <... futex resumed>) = 1 [pid 586] <... futex resumed>) = 0 [pid 597] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 593] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 586] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 592] <... open resumed>) = 4 [pid 586] <... futex resumed>) = 0 [pid 288] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 593] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 592] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] getdents64(4, [pid 593] <... write resumed>) = 9 [pid 592] <... futex resumed>) = 1 [pid 587] <... futex resumed>) = 0 [pid 288] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 593] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] close(4 [pid 593] <... futex resumed>) = 1 [pid 592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [pid 586] <... futex resumed>) = 0 [pid 593] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 587] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 586] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... close resumed>) = 0 [pid 593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 586] <... futex resumed>) = 0 [pid 593] creat("./bus", 000 [pid 586] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... creat resumed>) = 5 [pid 592] <... write resumed>) = 9 [pid 288] rmdir("./10/file0" [pid 593] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] <... futex resumed>) = 1 [pid 586] <... futex resumed>) = 0 [pid 593] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 586] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 586] <... futex resumed>) = 0 [pid 592] <... futex resumed>) = 1 [pid 587] <... futex resumed>) = 0 [pid 288] <... rmdir resumed>) = 0 [pid 593] creat("./bus", 000 [pid 592] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] getdents64(3, [pid 593] <... creat resumed>) = 6 [pid 592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [pid 593] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] creat("./bus", 000 [pid 587] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 593] <... futex resumed>) = 1 [pid 586] <... futex resumed>) = 0 [pid 593] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] <... creat resumed>) = 5 [pid 586] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] close(3 [pid 593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 592] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 0 [pid 593] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 592] <... futex resumed>) = 1 [pid 587] <... futex resumed>) = 0 [pid 586] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] <... close resumed>) = 0 [pid 593] <... open resumed>) = 7 [pid 592] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] rmdir("./10" [pid 593] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [pid 593] <... futex resumed>) = 1 [pid 587] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 586] <... futex resumed>) = 0 [pid 593] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 586] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 592] creat("./bus", 000 [pid 586] <... futex resumed>) = 0 [pid 288] <... rmdir resumed>) = 0 [pid 593] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 592] <... creat resumed>) = 6 [pid 586] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... mmap resumed>) = 0x20000000 [pid 592] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] mkdir("./11", 0777 [pid 593] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 1 [pid 587] <... futex resumed>) = 0 [pid 593] <... futex resumed>) = 1 [pid 587] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 0 [pid 593] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 288] <... mkdir resumed>) = 0 [pid 593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 592] <... open resumed>) = 7 [pid 587] <... futex resumed>) = 0 [pid 586] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 593] ftruncate(6, 31 [pid 592] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 586] <... futex resumed>) = 0 [pid 593] <... ftruncate resumed>) = 0 [pid 592] <... futex resumed>) = 0 [pid 587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 586] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 27.624741][ T585] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.641090][ T597] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 593] <... futex resumed>) = 0 [pid 592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [pid 586] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 587] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 587] <... futex resumed>) = 1 [pid 592] ftruncate(6, 31 [pid 587] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 592] <... ftruncate resumed>) = 0 [pid 592] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 587] <... futex resumed>) = 0 [pid 592] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 587] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 587] <... futex resumed>) = 0 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234a0000 [pid 586] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 586] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 586] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[608]}, 88) = 608 [pid 586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 586] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 586] <... futex resumed>) = ? [pid 587] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 608 attached [pid 608] +++ killed by SIGBUS +++ [pid 593] +++ killed by SIGBUS +++ [pid 586] +++ killed by SIGBUS +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=586, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 290] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 290] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./10/binderfs") = 0 [pid 290] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 592] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 587] <... mmap resumed>) = 0x7f39234a0000 [pid 587] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 587] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 587] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[609]}, 88) = 609 [pid 587] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 587] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 587] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = ? ./strace-static-x86_64: Process 609 attached [pid 289] <... umount2 resumed>) = 0 [pid 289] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 289] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 289] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 289] close(4) = 0 [pid 289] rmdir("./10/file0") = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 289] close(3) = 0 [pid 289] rmdir("./10") = 0 [pid 289] mkdir("./11", 0777 [pid 597] <... openat resumed>) = 4 [pid 288] <... openat resumed>) = 3 [pid 289] <... mkdir resumed>) = 0 [pid 289] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 289] ioctl(3, LOOP_CLR_FD [pid 597] ioctl(4, LOOP_CLR_FD [pid 289] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 288] ioctl(3, LOOP_CLR_FD [pid 597] <... ioctl resumed>) = 0 [pid 288] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 597] close(4 [pid 288] close(3 [pid 597] <... close resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 597] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 610 attached [pid 609] +++ killed by SIGBUS +++ [pid 597] <... futex resumed>) = 1 [pid 596] <... futex resumed>) = 0 [pid 289] close(3 [pid 597] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 596] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... clone resumed>, child_tidptr=0x5555568d8690) = 610 [pid 597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 596] <... futex resumed>) = 0 [pid 597] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 596] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 597] <... open resumed>) = 4 [pid 597] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 596] <... futex resumed>) = 0 [pid 597] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 596] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 596] <... futex resumed>) = 0 [pid 597] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 596] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 597] <... write resumed>) = 9 [pid 592] +++ killed by SIGBUS +++ [pid 587] +++ killed by SIGBUS +++ [pid 597] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=587, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 597] <... futex resumed>) = 1 [pid 596] <... futex resumed>) = 0 [pid 597] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 596] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 596] <... futex resumed>) = 0 [pid 291] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 597] creat("./bus", 000 [pid 596] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 597] <... creat resumed>) = 5 [pid 291] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 597] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... openat resumed>) = 3 [pid 597] <... futex resumed>) = 1 [pid 596] <... futex resumed>) = 0 [pid 291] newfstatat(3, "", [pid 597] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 596] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 596] <... futex resumed>) = 0 [pid 291] getdents64(3, [pid 597] creat("./bus", 000 [pid 596] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 597] <... creat resumed>) = 6 [pid 291] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 597] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 597] <... futex resumed>) = 1 [pid 596] <... futex resumed>) = 0 [pid 291] newfstatat(AT_FDCWD, "./11/binderfs", [pid 597] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 596] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 596] <... futex resumed>) = 0 [pid 291] unlink("./11/binderfs" [pid 597] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 596] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... unlink resumed>) = 0 [pid 597] <... open resumed>) = 7 [pid 291] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 597] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 596] <... futex resumed>) = 0 [pid 610] set_robust_list(0x5555568d86a0, 24 [pid 596] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 596] <... futex resumed>) = 0 [pid 610] <... set_robust_list resumed>) = 0 [pid 597] <... mmap resumed>) = 0x20000000 [pid 596] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 597] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 610] chdir("./11" [pid 597] <... futex resumed>) = 0 [pid 596] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 597] ftruncate(6, 31 [pid 596] <... futex resumed>) = 0 [pid 597] <... ftruncate resumed>) = 0 [pid 596] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 610] <... chdir resumed>) = 0 [pid 597] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 610] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 597] <... futex resumed>) = 0 [pid 596] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... prctl resumed>) = 0 [ 27.669405][ T593] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.672031][ T592] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 610] setpgid(0, 0) = 0 [pid 610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 610] write(3, "1000", 4) = 4 [pid 610] close(3) = 0 [pid 610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 610] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 610] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 610] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[611]}, 88) = 611 [pid 610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 610] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 611 attached [pid 611] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 611] memfd_create("syzkaller", 0) = 3 [pid 611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 596] <... futex resumed>) = 0 [pid 597] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 596] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 597] +++ killed by SIGBUS +++ [pid 596] +++ killed by SIGBUS +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=596, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 292] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 611] <... write resumed>) = 1048576 [pid 292] getdents64(3, [pid 611] munmap(0x7f391b0c1000, 138412032) = 0 [pid 292] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 611] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 292] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./12/binderfs") = 0 [pid 292] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 291] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./11/file0") = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./11") = 0 [pid 291] mkdir("./12", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = 0 [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 612 ./strace-static-x86_64: Process 612 attached [pid 612] set_robust_list(0x5555568d86a0, 24) = 0 [pid 612] chdir("./12") = 0 [pid 612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 612] setpgid(0, 0) = 0 [pid 612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 290] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 612] <... openat resumed>) = 3 [pid 612] write(3, "1000", 4) = 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 612] close(3) = 0 [pid 612] symlink("/dev/binderfs", "./binderfs" [pid 290] newfstatat(AT_FDCWD, "./10/file0", [pid 612] <... symlink resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 612] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 290] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 612] <... rt_sigaction resumed>NULL, 8) = 0 [pid 612] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 612] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 290] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 612] <... clone3 resumed> => {parent_tid=[613]}, 88) = 613 [pid 612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 612] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 290] getdents64(4, ./strace-static-x86_64: Process 613 attached [pid 613] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 290] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 613] rt_sigprocmask(SIG_SETMASK, [], [pid 290] getdents64(4, [pid 613] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 613] memfd_create("syzkaller", 0) = 3 [pid 290] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 290] close(4 [pid 613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 290] <... close resumed>) = 0 [pid 613] <... mmap resumed>) = 0x7f391b0c1000 [pid 290] rmdir("./10/file0") = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./10") = 0 [pid 290] mkdir("./11", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 613] munmap(0x7f391b0c1000, 138412032) = 0 [pid 613] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 289] <... close resumed>) = 0 [pid 611] <... openat resumed>) = 4 [pid 290] <... openat resumed>) = 3 [pid 611] ioctl(4, LOOP_SET_FD, 3 [pid 290] ioctl(3, LOOP_CLR_FD [pid 611] <... ioctl resumed>) = 0 [pid 290] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 615 [pid 611] close(3 [pid 290] close(3 [pid 611] <... close resumed>) = 0 [pid 611] close(4./strace-static-x86_64: Process 615 attached [pid 615] set_robust_list(0x5555568d86a0, 24) = 0 [pid 615] chdir("./11") = 0 [pid 615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 27.719715][ T597] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 615] setpgid(0, 0) = 0 [pid 615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 615] write(3, "1000", 4) = 4 [pid 615] close(3) = 0 [pid 615] symlink("/dev/binderfs", "./binderfs") = 0 [pid 615] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 615] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 615] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 615] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 615] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 615] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0}./strace-static-x86_64: Process 616 attached [pid 616] set_robust_list(0x7f39234e19a0, 24 [pid 615] <... clone3 resumed> => {parent_tid=[616]}, 88) = 616 [pid 616] <... set_robust_list resumed>) = 0 [pid 615] rt_sigprocmask(SIG_SETMASK, [], [pid 616] rt_sigprocmask(SIG_SETMASK, [], [pid 615] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 616] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 615] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 616] memfd_create("syzkaller", 0 [pid 615] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 616] <... memfd_create resumed>) = 3 [pid 616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 292] <... umount2 resumed>) = 0 [pid 613] <... openat resumed>) = 4 [pid 292] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 613] ioctl(4, LOOP_SET_FD, 3 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 292] close(4 [pid 616] <... write resumed>) = 1048576 [pid 292] <... close resumed>) = 0 [pid 616] munmap(0x7f391b0c1000, 138412032 [pid 292] rmdir("./12/file0") = 0 [pid 292] getdents64(3, [pid 616] <... munmap resumed>) = 0 [pid 292] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 616] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 292] close(3) = 0 [pid 292] rmdir("./12") = 0 [pid 292] mkdir("./13", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 611] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 616] <... openat resumed>) = 4 [pid 613] <... ioctl resumed>) = 0 [pid 611] mkdir("./file0", 0777 [pid 292] <... openat resumed>) = 3 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 618 attached [pid 616] ioctl(4, LOOP_SET_FD, 3 [pid 613] close(3 [pid 611] <... mkdir resumed>) = 0 [pid 292] ioctl(3, LOOP_CLR_FD [pid 290] <... clone resumed>, child_tidptr=0x5555568d8690) = 618 [pid 613] <... close resumed>) = 0 [pid 611] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 618] set_robust_list(0x5555568d86a0, 24 [pid 613] close(4 [pid 618] <... set_robust_list resumed>) = 0 [pid 618] chdir("./11") = 0 [pid 618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 618] setpgid(0, 0) = 0 [pid 618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 618] write(3, "1000", 4) = 4 [pid 618] close(3) = 0 [pid 618] symlink("/dev/binderfs", "./binderfs") = 0 [pid 618] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 618] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 618] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 618] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 618] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0}./strace-static-x86_64: Process 619 attached => {parent_tid=[619]}, 88) = 619 [pid 619] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 618] rt_sigprocmask(SIG_SETMASK, [], [pid 619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 619] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 618] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 618] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 618] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 619] memfd_create("syzkaller", 0) = 3 [pid 619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 619] munmap(0x7f391b0c1000, 138412032) = 0 [pid 619] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 613] <... close resumed>) = 0 [pid 613] mkdir("./file0", 0777) = 0 [pid 619] <... openat resumed>) = 4 [pid 616] <... ioctl resumed>) = 0 [pid 613] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] close(3 [pid 619] ioctl(4, LOOP_SET_FD, 3 [pid 616] close(3) = 0 [pid 616] close(4 [pid 611] <... mount resumed>) = 0 [pid 611] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 611] chdir("./file0") = 0 [pid 611] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 292] <... close resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 623 ./strace-static-x86_64: Process 623 attached [pid 623] set_robust_list(0x5555568d86a0, 24) = 0 [pid 623] chdir("./13") = 0 [pid 623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 623] setpgid(0, 0) = 0 [pid 623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 623] write(3, "1000", 4) = 4 [pid 623] close(3) = 0 [pid 623] symlink("/dev/binderfs", "./binderfs") = 0 [pid 623] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 613] <... mount resumed>) = 0 [pid 613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 616] <... close resumed>) = 0 [pid 613] <... openat resumed>) = 3 [pid 613] chdir("./file0" [pid 616] mkdir("./file0", 0777 [pid 613] <... chdir resumed>) = 0 [pid 613] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 623] <... rt_sigaction resumed>NULL, 8) = 0 [pid 623] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 616] <... mkdir resumed>) = 0 [pid 623] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 619] <... ioctl resumed>) = 0 [pid 619] close(3 [pid 616] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 623] <... mprotect resumed>) = 0 [pid 623] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 623] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[627]}, 88) = 627 [pid 623] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 623] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 627 attached [pid 627] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 619] <... close resumed>) = 0 [pid 619] close(4) = 0 [pid 619] mkdir("./file0", 0777 [pid 627] memfd_create("syzkaller", 0) = 3 [pid 619] <... mkdir resumed>) = 0 [pid 627] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 619] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 627] <... mmap resumed>) = 0x7f391b0c1000 [ 27.912825][ T611] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 27.941627][ T613] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 613] <... openat resumed>) = 4 [pid 613] ioctl(4, LOOP_CLR_FD) = 0 [pid 613] close(4) = 0 [pid 613] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] <... futex resumed>) = 0 [pid 613] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 612] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... open resumed>) = 4 [pid 613] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] <... futex resumed>) = 0 [pid 613] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 612] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... write resumed>) = 9 [pid 613] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 613] creat("./bus", 000 [pid 612] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... creat resumed>) = 5 [pid 613] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] <... futex resumed>) = 0 [pid 613] creat("./bus", 000 [pid 612] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... creat resumed>) = 6 [pid 613] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] <... futex resumed>) = 0 [pid 613] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 612] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... open resumed>) = 7 [pid 613] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 612] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... mmap resumed>) = 0x20000000 [pid 613] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] <... futex resumed>) = 0 [pid 613] ftruncate(6, 31 [pid 612] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... ftruncate resumed>) = 0 [pid 613] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] <... futex resumed>) = 0 [pid 627] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 627] munmap(0x7f391b0c1000, 138412032) = 0 [pid 627] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 627] ioctl(4, LOOP_SET_FD, 3 [pid 611] <... openat resumed>) = 4 [pid 611] ioctl(4, LOOP_CLR_FD [pid 612] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 627] <... ioctl resumed>) = 0 [pid 611] <... ioctl resumed>) = 0 [pid 611] close(4) = 0 [pid 611] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 610] <... futex resumed>) = 0 [pid 611] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 610] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... open resumed>) = 4 [pid 610] <... futex resumed>) = 0 [pid 611] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 0 [pid 610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 627] close(3 [pid 611] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 610] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... write resumed>) = 9 [pid 610] <... futex resumed>) = 0 [pid 627] <... close resumed>) = 0 [pid 611] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 0 [pid 610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 611] creat("./bus", 000 [pid 610] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... creat resumed>) = 5 [pid 610] <... futex resumed>) = 0 [pid 627] close(4 [pid 611] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 0 [pid 610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 611] creat("./bus", 000 [pid 610] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... close resumed>) = 0 [pid 627] mkdir("./file0", 0777 [pid 611] <... creat resumed>) = 6 [pid 610] <... futex resumed>) = 0 [pid 611] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 0 [pid 610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 611] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 610] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... mkdir resumed>) = 0 [pid 611] <... open resumed>) = 7 [pid 610] <... futex resumed>) = 0 [pid 611] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 0 [pid 610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 611] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 610] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 611] <... mmap resumed>) = 0x20000000 [pid 610] <... futex resumed>) = 0 [pid 611] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 0 [pid 610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 611] ftruncate(6, 31 [pid 610] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... ftruncate resumed>) = 0 [pid 610] <... futex resumed>) = 0 [pid 611] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 0 [pid 610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 611] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 610] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 610] <... futex resumed>) = 0 [pid 613] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 612] <... mmap resumed>) = 0 [pid 610] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 611] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 619] <... mount resumed>) = 0 [pid 613] +++ killed by SIGBUS +++ [pid 612] +++ killed by SIGBUS +++ [pid 610] <... futex resumed>) = ? [pid 619] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 611] +++ killed by SIGBUS +++ [pid 610] +++ killed by SIGBUS +++ [ 27.964350][ T613] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.986918][ T611] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.002738][ T619] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=612, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=610, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 288] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 288] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] getdents64(3, [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 291] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 288] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... openat resumed>) = 3 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(3, "", [pid 288] newfstatat(AT_FDCWD, "./11/binderfs", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] getdents64(3, [pid 288] unlink("./11/binderfs" [pid 619] <... openat resumed>) = 3 [pid 616] <... mount resumed>) = 0 [pid 291] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 288] <... unlink resumed>) = 0 [pid 619] chdir("./file0" [pid 616] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 619] <... chdir resumed>) = 0 [pid 616] <... openat resumed>) = 3 [pid 619] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 616] chdir("./file0" [pid 619] <... openat resumed>) = 4 [pid 616] <... chdir resumed>) = 0 [pid 619] ioctl(4, LOOP_CLR_FD [pid 616] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 619] <... ioctl resumed>) = 0 [pid 616] <... openat resumed>) = 4 [pid 619] close(4 [pid 616] ioctl(4, LOOP_CLR_FD [pid 627] <... mount resumed>) = 0 [pid 619] <... close resumed>) = 0 [pid 291] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 627] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 619] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... ioctl resumed>) = 0 [pid 619] <... futex resumed>) = 1 [pid 616] close(4 [pid 619] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 618] <... futex resumed>) = 0 [pid 616] <... close resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 616] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 615] <... futex resumed>) = 0 [pid 616] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 615] <... futex resumed>) = 0 [pid 616] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 615] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] <... open resumed>) = 4 [pid 616] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 615] <... futex resumed>) = 0 [pid 616] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 615] <... futex resumed>) = 0 [pid 616] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 615] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] <... write resumed>) = 9 [pid 616] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 615] <... futex resumed>) = 0 [pid 616] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 615] <... futex resumed>) = 0 [pid 616] creat("./bus", 000 [pid 615] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... openat resumed>) = 3 [pid 618] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... creat resumed>) = 5 [pid 291] newfstatat(AT_FDCWD, "./12/binderfs", [pid 627] chdir("./file0" [pid 619] <... futex resumed>) = 0 [pid 618] <... futex resumed>) = 1 [pid 616] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... chdir resumed>) = 0 [pid 616] <... futex resumed>) = 1 [pid 615] <... futex resumed>) = 0 [pid 627] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 619] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 618] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 615] <... futex resumed>) = 0 [pid 616] creat("./bus", 000 [pid 615] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] <... creat resumed>) = 6 [pid 616] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 615] <... futex resumed>) = 0 [pid 616] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 615] <... futex resumed>) = 0 [pid 619] <... open resumed>) = 4 [pid 616] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 615] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] unlink("./12/binderfs" [pid 619] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... open resumed>) = 7 [pid 616] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 615] <... futex resumed>) = 0 [pid 616] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 615] <... futex resumed>) = 0 [pid 619] <... futex resumed>) = 1 [pid 618] <... futex resumed>) = 0 [pid 616] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 615] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... unlink resumed>) = 0 [pid 619] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 618] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... mmap resumed>) = 0x20000000 [pid 618] <... futex resumed>) = 0 [pid 616] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 618] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] <... futex resumed>) = 1 [pid 615] <... futex resumed>) = 0 [pid 616] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... write resumed>) = 9 [pid 616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 615] <... futex resumed>) = 0 [pid 616] ftruncate(6, 31 [pid 615] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... ftruncate resumed>) = 0 [pid 619] <... futex resumed>) = 1 [pid 618] <... futex resumed>) = 0 [pid 616] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 618] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... futex resumed>) = 1 [pid 615] <... futex resumed>) = 0 [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 618] <... futex resumed>) = 0 [pid 616] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 615] <... futex resumed>) = 0 [pid 619] creat("./bus", 000 [pid 618] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... creat resumed>) = 5 [pid 619] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 618] <... futex resumed>) = 0 [pid 619] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 618] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 618] <... futex resumed>) = 0 [pid 619] creat("./bus", 000 [pid 618] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... creat resumed>) = 6 [pid 619] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 618] <... futex resumed>) = 0 [pid 619] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 618] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 618] <... futex resumed>) = 0 [pid 619] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 618] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... open resumed>) = 7 [pid 619] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 618] <... futex resumed>) = 0 [pid 619] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 618] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 618] <... futex resumed>) = 0 [pid 619] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 618] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... mmap resumed>) = 0x20000000 [pid 619] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 618] <... futex resumed>) = 0 [pid 619] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 618] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 618] <... futex resumed>) = 0 [pid 619] ftruncate(6, 31 [pid 618] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... ftruncate resumed>) = 0 [pid 619] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 618] <... futex resumed>) = 0 [pid 619] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 618] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 618] <... futex resumed>) = 0 [pid 616] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 615] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = ? [pid 616] +++ killed by SIGBUS +++ [pid 615] +++ killed by SIGBUS +++ [pid 618] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=615, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [ 28.013273][ T616] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 28.023897][ T627] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 28.047473][ T616] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 619] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 618] <... mmap resumed>) = 0x7f39234a0000 [pid 289] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 619] +++ killed by SIGBUS +++ [pid 618] +++ killed by SIGBUS +++ [pid 289] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=618, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./11/binderfs") = 0 [pid 290] <... restart_syscall resumed>) = 0 [pid 289] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./11/binderfs") = 0 [pid 290] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 627] <... openat resumed>) = 4 [pid 288] <... umount2 resumed>) = 0 [pid 627] ioctl(4, LOOP_CLR_FD [pid 288] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 288] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 288] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 288] close(4) = 0 [pid 288] rmdir("./11/file0") = 0 [pid 288] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 288] close(3) = 0 [pid 288] rmdir("./11") = 0 [pid 288] mkdir("./12", 0777) = 0 [ 28.059604][ T619] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 627] <... ioctl resumed>) = 0 [pid 291] <... umount2 resumed>) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 289] <... umount2 resumed>) = 0 [pid 288] <... openat resumed>) = 3 [pid 289] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] ioctl(3, LOOP_CLR_FD [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 289] newfstatat(AT_FDCWD, "./11/file0", [pid 288] close(3 [pid 627] close(4 [pid 291] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] <... close resumed>) = 0 [pid 627] <... close resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 627] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] newfstatat(AT_FDCWD, "./12/file0", [pid 290] newfstatat(AT_FDCWD, "./11/file0", [pid 627] <... futex resumed>) = 1 [pid 623] <... futex resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 627] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 291] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 623] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... openat resumed>) = 4 [pid 290] <... openat resumed>) = 4 [pid 291] newfstatat(4, "", [pid 290] newfstatat(4, "", [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 627] <... futex resumed>) = 0 [pid 623] <... futex resumed>) = 1 [pid 291] getdents64(4, [pid 290] getdents64(4, [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 627] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 623] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 290] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 289] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 288] <... clone resumed>, child_tidptr=0x5555568d8690) = 635 [pid 291] getdents64(4, [pid 290] getdents64(4, [pid 627] <... open resumed>) = 4 [pid 291] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 289] <... openat resumed>) = 4 [pid 627] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] close(4 [pid 290] close(4 [pid 627] <... futex resumed>) = 1 [pid 623] <... futex resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 289] newfstatat(4, "", [pid 627] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 623] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] rmdir("./12/file0" [pid 290] rmdir("./11/file0" [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 623] <... futex resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 289] getdents64(4, [pid 627] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 623] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] getdents64(3, [pid 290] getdents64(3, [pid 291] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 290] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 291] close(3 [pid 290] close(3 [pid 291] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 627] <... write resumed>) = 9 [pid 291] rmdir("./12" [pid 290] rmdir("./11" [pid 289] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 627] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... rmdir resumed>) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 627] <... futex resumed>) = 1 [pid 623] <... futex resumed>) = 0 [pid 291] mkdir("./13", 0777 [pid 290] mkdir("./12", 0777 [pid 289] getdents64(4, ./strace-static-x86_64: Process 635 attached [pid 627] creat("./bus", 000 [pid 623] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... mkdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 627] <... creat resumed>) = 5 [pid 623] <... futex resumed>) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 289] close(4 [pid 635] set_robust_list(0x5555568d86a0, 24 [pid 627] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 635] <... set_robust_list resumed>) = 0 [pid 627] <... futex resumed>) = 0 [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 291] ioctl(3, LOOP_CLR_FD [pid 290] ioctl(3, LOOP_CLR_FD [pid 289] <... close resumed>) = 0 [pid 635] chdir("./12" [pid 627] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 623] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 290] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 289] rmdir("./11/file0" [pid 635] <... chdir resumed>) = 0 [pid 627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 623] <... futex resumed>) = 0 [pid 291] close(3 [pid 290] close(3 [pid 291] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 627] creat("./bus", 000 [pid 623] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 289] <... rmdir resumed>) = 0 [pid 627] <... creat resumed>) = 6 [pid 291] <... clone resumed>, child_tidptr=0x5555568d8690) = 636 [pid 290] <... clone resumed>, child_tidptr=0x5555568d8690) = 637 [pid 289] getdents64(3, [pid 627] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 627] <... futex resumed>) = 1 [pid 623] <... futex resumed>) = 0 [pid 289] close(3 [pid 627] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 623] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 623] <... futex resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 627] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 623] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 289] rmdir("./11" [pid 627] <... open resumed>) = 7 ./strace-static-x86_64: Process 636 attached [pid 636] set_robust_list(0x5555568d86a0, 24) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 627] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] mkdir("./12", 0777 [pid 627] <... futex resumed>) = 1 [pid 623] <... futex resumed>) = 0 [pid 636] chdir("./13") = 0 [pid 636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 623] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] <... mkdir resumed>) = 0 [pid 627] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 623] <... futex resumed>) = 0 [pid 289] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 627] <... mmap resumed>) = 0x20000000 [pid 623] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 289] <... openat resumed>) = 3 [pid 627] <... futex resumed>) = 0 [pid 623] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] ioctl(3, LOOP_CLR_FD [pid 627] ftruncate(6, 31 [pid 623] <... futex resumed>) = 0 [pid 289] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 627] <... ftruncate resumed>) = 0 [pid 623] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] close(3 [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 627] <... futex resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 623] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] setpgid(0, 0) = 0 [pid 636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 636] write(3, "1000", 4) = 4 [pid 636] close(3) = 0 [pid 636] symlink("/dev/binderfs", "./binderfs") = 0 [pid 636] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 636] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 636] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[638]}, 88) = 638 [pid 636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 636] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 638 attached [pid 638] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 638] memfd_create("syzkaller", 0) = 3 [pid 638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 623] <... futex resumed>) = 0 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 623] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 289] <... clone resumed>, child_tidptr=0x5555568d8690) = 639 [pid 638] <... write resumed>) = 1048576 [pid 638] munmap(0x7f391b0c1000, 138412032) = 0 [pid 638] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 638] ioctl(4, LOOP_SET_FD, 3 [pid 635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 638] <... ioctl resumed>) = 0 [pid 638] close(3) = 0 [pid 638] close(4 [pid 635] setpgid(0, 0) = 0 [pid 635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 635] write(3, "1000", 4./strace-static-x86_64: Process 639 attached ) = 4 [pid 635] close(3) = 0 [pid 639] set_robust_list(0x5555568d86a0, 24 [pid 635] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 637 attached [pid 639] <... set_robust_list resumed>) = 0 [pid 635] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] chdir("./12" [pid 637] set_robust_list(0x5555568d86a0, 24 [pid 635] <... futex resumed>) = 0 [pid 637] <... set_robust_list resumed>) = 0 [pid 635] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 639] <... chdir resumed>) = 0 [pid 637] chdir("./12" [pid 635] <... rt_sigaction resumed>NULL, 8) = 0 [pid 639] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 635] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 639] <... prctl resumed>) = 0 [pid 637] <... chdir resumed>) = 0 [pid 639] setpgid(0, 0 [pid 637] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 639] <... setpgid resumed>) = 0 [pid 637] <... prctl resumed>) = 0 [pid 623] <... mmap resumed>) = 0x7f39234a0000 [pid 635] <... mmap resumed>) = 0x7f39234c1000 [pid 623] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE [pid 635] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 637] setpgid(0, 0 [pid 639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 623] <... mprotect resumed>) = 0 [pid 637] <... setpgid resumed>) = 0 [pid 635] <... mprotect resumed>) = 0 [pid 639] <... openat resumed>) = 3 [pid 635] rt_sigprocmask(SIG_BLOCK, ~[], [pid 623] rt_sigprocmask(SIG_BLOCK, ~[], [pid 637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 623] <... rt_sigprocmask resumed>[], 8) = 0 [pid 639] write(3, "1000", 4 [pid 635] <... rt_sigprocmask resumed>[], 8) = 0 [pid 623] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} [pid 637] <... openat resumed>) = 3 [pid 635] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 639] <... write resumed>) = 4 [pid 637] write(3, "1000", 4 [pid 623] <... clone3 resumed> => {parent_tid=[641]}, 88) = 641 ./strace-static-x86_64: Process 642 attached [pid 639] close(3 [pid 637] <... write resumed>) = 4 [pid 623] rt_sigprocmask(SIG_SETMASK, [], [pid 642] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 623] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 639] <... close resumed>) = 0 [pid 637] close(3 [pid 635] <... clone3 resumed> => {parent_tid=[642]}, 88) = 642 [pid 642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 642] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 639] symlink("/dev/binderfs", "./binderfs" [pid 623] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... close resumed>) = 0 [pid 623] <... futex resumed>) = 0 [pid 639] <... symlink resumed>) = 0 [pid 623] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] rt_sigprocmask(SIG_SETMASK, [], [pid 637] symlink("/dev/binderfs", "./binderfs" [pid 635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 637] <... symlink resumed>) = 0 [pid 635] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] <... futex resumed>) = 1 [pid 639] <... futex resumed>) = 0 [pid 635] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 641 attached [pid 639] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 637] <... futex resumed>) = 0 [pid 627] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 642] <... futex resumed>) = 0 [pid 639] <... rt_sigaction resumed>NULL, 8) = 0 [pid 642] memfd_create("syzkaller", 0 [pid 639] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 637] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 623] <... futex resumed>) = ? [pid 642] <... memfd_create resumed>) = 3 [pid 642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 639] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 637] <... rt_sigaction resumed>NULL, 8) = 0 [pid 641] +++ killed by SIGBUS +++ [pid 639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 637] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 639] <... mmap resumed>) = 0x7f39234c1000 [pid 637] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 639] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 639] <... mprotect resumed>) = 0 [pid 637] <... mmap resumed>) = 0x7f39234c1000 [pid 627] +++ killed by SIGBUS +++ [pid 623] +++ killed by SIGBUS +++ [pid 639] rt_sigprocmask(SIG_BLOCK, ~[], [pid 637] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=623, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=7} --- [pid 639] <... rt_sigprocmask resumed>[], 8) = 0 [pid 637] <... mprotect resumed>) = 0 [pid 639] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 639] <... clone3 resumed> => {parent_tid=[643]}, 88) = 643 [pid 637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 637] <... clone3 resumed> => {parent_tid=[644]}, 88) = 644 [pid 639] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] rt_sigprocmask(SIG_SETMASK, [], [pid 639] <... futex resumed>) = 0 [pid 637] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 639] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 637] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 292] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 644 attached ) = -1 EINVAL (Invalid argument) [pid 644] set_robust_list(0x7f39234e19a0, 24 [pid 292] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 644] <... set_robust_list resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 644] rt_sigprocmask(SIG_SETMASK, [], [pid 292] newfstatat(3, "", [pid 644] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, [pid 644] memfd_create("syzkaller", 0 [pid 292] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./13/binderfs" [pid 644] <... memfd_create resumed>) = 3 [pid 292] <... unlink resumed>) = 0 [pid 644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 292] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 644] <... mmap resumed>) = 0x7f391b0c1000 ./strace-static-x86_64: Process 643 attached [pid 643] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 643] memfd_create("syzkaller", 0) = 3 [pid 643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 642] <... write resumed>) = 1048576 [pid 642] munmap(0x7f391b0c1000, 138412032 [pid 644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 642] <... munmap resumed>) = 0 [pid 642] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 28.250329][ T627] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 638] <... close resumed>) = 0 [pid 638] mkdir("./file0", 0777) = 0 [pid 638] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 643] <... write resumed>) = 1048576 [pid 643] munmap(0x7f391b0c1000, 138412032) = 0 [pid 643] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 644] <... write resumed>) = 1048576 [pid 644] munmap(0x7f391b0c1000, 138412032) = 0 [pid 644] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 643] <... openat resumed>) = 4 [pid 642] <... openat resumed>) = 4 [pid 292] <... umount2 resumed>) = 0 [pid 644] ioctl(4, LOOP_SET_FD, 3 [pid 643] ioctl(4, LOOP_SET_FD, 3 [pid 642] ioctl(4, LOOP_SET_FD, 3 [pid 292] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 644] <... ioctl resumed>) = 0 [pid 644] close(3) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 644] close(4 [pid 643] <... ioctl resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./13/file0", [pid 644] <... close resumed>) = 0 [pid 644] mkdir("./file0", 0777 [pid 643] close(3 [pid 642] <... ioctl resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 644] <... mkdir resumed>) = 0 [pid 643] <... close resumed>) = 0 [pid 644] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 643] close(4 [pid 642] close(3 [pid 292] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 642] <... close resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 642] close(4 [pid 292] <... openat resumed>) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./13/file0") = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./13") = 0 [pid 292] mkdir("./14", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 638] <... mount resumed>) = 0 [pid 638] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 638] chdir("./file0") = 0 [pid 638] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 642] <... close resumed>) = 0 [pid 643] <... close resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 643] mkdir("./file0", 0777 [pid 642] mkdir("./file0", 0777 [pid 292] ioctl(3, LOOP_CLR_FD [pid 643] <... mkdir resumed>) = 0 [pid 642] <... mkdir resumed>) = 0 [pid 643] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 642] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 644] <... mount resumed>) = 0 [pid 644] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 644] chdir("./file0") = 0 [pid 644] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 638] <... openat resumed>) = 4 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 644] ioctl(4, LOOP_CLR_FD [pid 638] ioctl(4, LOOP_CLR_FD [pid 292] close(3 [pid 638] <... ioctl resumed>) = 0 [pid 644] <... ioctl resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 644] close(4 [pid 638] close(4 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 644] <... close resumed>) = 0 [pid 638] <... close resumed>) = 0 [pid 644] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 656 attached [pid 656] set_robust_list(0x5555568d86a0, 24) = 0 [pid 656] chdir("./14" [pid 638] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = 1 [pid 637] <... futex resumed>) = 0 [pid 656] <... chdir resumed>) = 0 [pid 656] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 642] <... mount resumed>) = 0 [pid 637] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 638] <... futex resumed>) = 1 [pid 636] <... futex resumed>) = 0 [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 656 [pid 636] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 637] <... futex resumed>) = 0 [pid 636] <... futex resumed>) = 0 [pid 656] <... prctl resumed>) = 0 [pid 656] setpgid(0, 0) = 0 [pid 637] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 638] <... open resumed>) = 4 [pid 644] <... open resumed>) = 4 [pid 638] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 656] write(3, "1000", 4) = 4 [pid 656] close(3) = 0 [pid 656] symlink("/dev/binderfs", "./binderfs") = 0 [pid 644] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] <... mount resumed>) = 0 [pid 638] <... futex resumed>) = 1 [pid 636] <... futex resumed>) = 0 [pid 642] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 644] <... futex resumed>) = 1 [pid 643] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 638] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 637] <... futex resumed>) = 0 [pid 636] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 644] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 638] <... write resumed>) = 9 [pid 637] <... futex resumed>) = 0 [pid 636] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] <... openat resumed>) = 3 [pid 656] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] <... openat resumed>) = 3 [pid 656] <... futex resumed>) = 0 [pid 643] chdir("./file0" [pid 642] chdir("./file0" [pid 638] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] <... write resumed>) = 9 [pid 656] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 644] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] <... chdir resumed>) = 0 [pid 642] <... chdir resumed>) = 0 [pid 638] <... futex resumed>) = 1 [pid 636] <... futex resumed>) = 0 [pid 656] <... rt_sigaction resumed>NULL, 8) = 0 [pid 656] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 636] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] creat("./bus", 000 [pid 644] <... futex resumed>) = 1 [pid 637] <... futex resumed>) = 0 [pid 656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 643] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 642] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 637] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 656] <... mmap resumed>) = 0x7f39234c1000 [pid 644] creat("./bus", 000 [pid 643] <... openat resumed>) = 4 [pid 642] <... openat resumed>) = 4 [pid 638] <... creat resumed>) = 5 [pid 637] <... futex resumed>) = 0 [pid 636] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 656] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 637] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 656] <... mprotect resumed>) = 0 [pid 644] <... creat resumed>) = 5 [pid 643] ioctl(4, LOOP_CLR_FD [pid 642] ioctl(4, LOOP_CLR_FD [pid 638] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] <... ioctl resumed>) = 0 [pid 642] <... ioctl resumed>) = 0 [pid 638] <... futex resumed>) = 1 [pid 636] <... futex resumed>) = 0 [pid 644] <... futex resumed>) = 1 [pid 643] close(4 [pid 642] close(4 [pid 638] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 637] <... futex resumed>) = 0 [pid 636] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 643] <... close resumed>) = 0 [pid 642] <... close resumed>) = 0 [pid 638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 656] rt_sigprocmask(SIG_BLOCK, ~[], [pid 644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 643] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] creat("./bus", 000 [pid 637] <... futex resumed>) = 0 [pid 636] <... futex resumed>) = 0 [pid 656] <... rt_sigprocmask resumed>[], 8) = 0 [pid 644] creat("./bus", 000 [pid 643] <... futex resumed>) = 1 [pid 642] <... futex resumed>) = 1 [pid 639] <... futex resumed>) = 0 [pid 638] <... creat resumed>) = 6 [pid 637] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... futex resumed>) = 0 [pid 656] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 644] <... creat resumed>) = 6 [pid 643] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 642] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 639] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 635] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = 0 [pid 656] <... clone3 resumed> => {parent_tid=[658]}, 88) = 658 [pid 644] <... futex resumed>) = 1 [pid 643] <... open resumed>) = 4 [pid 642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... futex resumed>) = 0 [pid 637] <... futex resumed>) = 0 [pid 636] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 656] rt_sigprocmask(SIG_SETMASK, [], [pid 644] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 643] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 638] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 637] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 656] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 643] <... futex resumed>) = 0 [pid 639] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = 0 [pid 656] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 639] <... futex resumed>) = 0 [pid 638] <... open resumed>) = 7 [pid 636] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 656] <... futex resumed>) = 0 [pid 644] <... open resumed>) = 7 [pid 643] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 642] <... open resumed>) = 4 [pid 639] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 656] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 644] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] <... write resumed>) = 9 [pid 642] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... futex resumed>) = 0 [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = 0 [pid 643] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... futex resumed>) = 1 [pid 638] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 637] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = 0 [pid 644] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 643] <... futex resumed>) = 1 [pid 642] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 639] <... futex resumed>) = 0 [pid 638] <... mmap resumed>) = 0x20000000 [pid 637] <... futex resumed>) = 0 [pid 636] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... mmap resumed>) = 0x20000000 [pid 643] creat("./bus", 000 [pid 642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 635] <... futex resumed>) = 0 [pid 644] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] <... creat resumed>) = 5 [pid 642] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 639] <... futex resumed>) = 0 [pid 638] <... futex resumed>) = 0 [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] <... futex resumed>) = 0 [pid 643] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] ftruncate(6, 31 [pid 643] <... futex resumed>) = 0 [pid 642] <... write resumed>) = 9 [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 638] ftruncate(6, 31 [pid 637] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 644] <... ftruncate resumed>) = 0 [pid 643] creat("./bus", 000 [pid 642] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... ftruncate resumed>) = 0 [pid 637] <... futex resumed>) = 0 [pid 636] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 644] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] <... creat resumed>) = 6 [pid 642] <... futex resumed>) = 1 [pid 639] <... futex resumed>) = 0 [pid 638] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 635] <... futex resumed>) = 0 ./strace-static-x86_64: Process 658 attached [pid 644] <... futex resumed>) = 0 [pid 643] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 639] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 638] <... futex resumed>) = 0 [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] set_robust_list(0x7f39234e19a0, 24 [pid 644] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 643] <... futex resumed>) = 0 [pid 642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 635] <... futex resumed>) = 0 [pid 658] <... set_robust_list resumed>) = 0 [pid 639] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] rt_sigprocmask(SIG_SETMASK, [], [pid 639] <... futex resumed>) = 0 [pid 658] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 639] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] memfd_create("syzkaller", 0) = 3 [pid 658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 658] munmap(0x7f391b0c1000, 138412032) = 0 [pid 658] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 658] ioctl(4, LOOP_SET_FD, 3 [pid 644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 642] creat("./bus", 000 [pid 643] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 658] <... ioctl resumed>) = 0 [pid 658] close(3) = 0 [pid 658] close(4 [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 637] <... futex resumed>) = 0 [pid 637] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 638] +++ killed by SIGBUS +++ [pid 636] +++ killed by SIGBUS +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=636, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 642] <... creat resumed>) = 5 [pid 291] <... restart_syscall resumed>) = 0 [pid 291] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./13/binderfs") = 0 [pid 291] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 642] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 635] <... futex resumed>) = 0 [pid 635] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 635] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] creat("./bus", 000) = 6 [pid 642] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 635] <... futex resumed>) = 0 [pid 642] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 635] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... open resumed>) = 7 [pid 635] <... futex resumed>) = 0 [pid 642] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 642] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 635] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... mmap resumed>) = 0x20000000 [pid 635] <... futex resumed>) = 0 [pid 642] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 643] <... open resumed>) = 7 [pid 642] ftruncate(6, 31 [pid 635] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 643] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... ftruncate resumed>) = 0 [pid 635] <... futex resumed>) = 0 [pid 643] <... futex resumed>) = 1 [pid 642] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 635] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] <... futex resumed>) = 0 [pid 639] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... mmap resumed>) = 0x7f39234a0000 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 643] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 639] <... futex resumed>) = 0 [pid 637] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE [pid 635] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 643] <... mmap resumed>) = 0x20000000 [pid 639] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... mprotect resumed>) = 0 [pid 635] <... futex resumed>) = 0 [pid 643] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] rt_sigprocmask(SIG_BLOCK, ~[], [pid 643] <... futex resumed>) = 0 [pid 639] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... rt_sigprocmask resumed>[], 8) = 0 [pid 643] ftruncate(6, 31 [pid 639] <... futex resumed>) = 0 [pid 637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} [pid 643] <... ftruncate resumed>) = 0 [pid 639] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] <... clone3 resumed> => {parent_tid=[660]}, 88) = 660 [pid 643] <... futex resumed>) = 0 [pid 639] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] rt_sigprocmask(SIG_SETMASK, [], [pid 635] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 660 attached ) = 0x7f39234a0000 [pid 635] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 635] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 635] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[661]}, 88) = 661 [pid 635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 635] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 635] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 642] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [ 28.490802][ T638] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.505777][ T644] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.522699][ T642] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 635] <... futex resumed>) = ? ./strace-static-x86_64: Process 661 attached [pid 639] <... futex resumed>) = 0 [pid 639] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 637] <... rt_sigprocmask resumed> ) = ? [pid 660] +++ killed by SIGBUS +++ [pid 644] +++ killed by SIGBUS +++ [pid 637] +++ killed by SIGBUS +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=637, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 290] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./12/binderfs") = 0 [pid 290] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 658] <... close resumed>) = 0 [pid 643] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 639] <... mmap resumed>) = 0x7f39234a0000 [pid 658] mkdir("./file0", 0777 [pid 639] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 639] rt_sigprocmask(SIG_BLOCK, ~[], [pid 658] <... mkdir resumed>) = 0 [pid 639] <... rt_sigprocmask resumed>[], 8) = 0 [pid 658] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 639] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[662]}, 88) = 662 [pid 639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 639] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = ? ./strace-static-x86_64: Process 662 attached [pid 642] +++ killed by SIGBUS +++ [pid 661] +++ killed by SIGBUS +++ [pid 635] +++ killed by SIGBUS +++ [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=635, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 288] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 288] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 288] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 288] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./12/binderfs") = 0 [pid 288] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 662] +++ killed by SIGBUS +++ [pid 643] +++ killed by SIGBUS +++ [pid 639] +++ killed by SIGBUS +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=639, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 289] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 289] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 289] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./12/binderfs") = 0 [pid 289] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] <... umount2 resumed>) = 0 [pid 291] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 291] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./13/file0") = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 291] close(3) = 0 [pid 291] rmdir("./13") = 0 [pid 291] mkdir("./14", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 658] <... mount resumed>) = 0 [ 28.524639][ T643] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 658] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 658] chdir("./file0") = 0 [pid 658] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 291] <... openat resumed>) = 3 [pid 288] <... umount2 resumed>) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 658] ioctl(4, LOOP_CLR_FD [pid 291] ioctl(3, LOOP_CLR_FD [pid 290] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = 0 [pid 288] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 658] <... ioctl resumed>) = 0 [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 658] close(4 [pid 291] close(3 [pid 658] <... close resumed>) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... close resumed>) = 0 [pid 658] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 656] <... futex resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] newfstatat(AT_FDCWD, "./12/file0", [pid 658] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 656] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 656] <... futex resumed>) = 0 [pid 656] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 291] <... clone resumed>, child_tidptr=0x5555568d8690) = 665 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 658] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 290] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 658] <... open resumed>) = 4 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./12/file0", [pid 658] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 658] <... futex resumed>) = 1 [pid 656] <... futex resumed>) = 0 [pid 658] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 290] <... openat resumed>) = 4 [pid 656] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 290] newfstatat(4, "", [pid 289] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 656] <... futex resumed>) = 0 [pid 658] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 656] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 658] <... write resumed>) = 9 [pid 658] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 656] <... futex resumed>) = 0 [pid 658] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 656] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] creat("./bus", 000 [pid 656] <... futex resumed>) = 0 [pid 658] <... creat resumed>) = 5 [pid 656] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 658] <... futex resumed>) = 0 [pid 656] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] creat("./bus", 000 [pid 656] <... futex resumed>) = 0 [pid 658] <... creat resumed>) = 6 [pid 656] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 658] <... futex resumed>) = 0 [pid 656] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 656] <... futex resumed>) = 0 [pid 658] <... open resumed>) = 7 [pid 656] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 658] <... futex resumed>) = 0 [pid 656] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 656] <... futex resumed>) = 0 [pid 658] <... mmap resumed>) = 0x20000000 [pid 656] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 656] <... futex resumed>) = 0 [pid 658] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 656] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 656] <... futex resumed>) = 0 [pid 658] ftruncate(6, 31 [pid 656] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 665 attached [pid 658] <... ftruncate resumed>) = 0 [pid 658] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 656] <... futex resumed>) = 0 [pid 658] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 656] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 656] <... futex resumed>) = 0 [pid 665] set_robust_list(0x5555568d86a0, 24) = 0 [pid 665] chdir("./14") = 0 [pid 665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 665] setpgid(0, 0) = 0 [pid 665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 665] write(3, "1000", 4) = 4 [pid 665] close(3) = 0 [pid 665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 665] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 665] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 665] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234c1000 [pid 665] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 665] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} => {parent_tid=[666]}, 88) = 666 [pid 665] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 665] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 665] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 666 attached [pid 666] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 666] memfd_create("syzkaller", 0) = 3 [pid 666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 666] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 666] munmap(0x7f391b0c1000, 138412032) = 0 [pid 666] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 666] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 656] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] close(3 [pid 290] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 656] <... futex resumed>) = 0 [pid 666] <... close resumed>) = 0 [pid 656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 666] close(4 [pid 290] getdents64(4, [pid 289] newfstatat(AT_FDCWD, "./12/file0", [pid 288] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] close(4 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... close resumed>) = 0 [pid 288] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] rmdir("./12/file0" [pid 288] <... openat resumed>) = 4 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 658] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 656] <... mmap resumed>) = 0x7f39234a0000 [pid 656] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = ? [pid 290] <... rmdir resumed>) = 0 [pid 288] newfstatat(4, "", [pid 289] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] getdents64(3, [pid 288] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... openat resumed>) = 4 [pid 290] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 288] getdents64(4, [pid 289] newfstatat(4, "", [pid 288] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 290] close(3 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(4, [pid 290] <... close resumed>) = 0 [pid 288] getdents64(4, [pid 289] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 290] rmdir("./12" [pid 289] getdents64(4, [pid 288] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 290] <... rmdir resumed>) = 0 [pid 288] close(4 [pid 289] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 288] <... close resumed>) = 0 [pid 289] close(4 [pid 290] mkdir("./13", 0777 [pid 288] rmdir("./12/file0" [pid 289] <... close resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 658] +++ killed by SIGBUS +++ [pid 656] +++ killed by SIGBUS +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=656, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 288] <... rmdir resumed>) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 289] rmdir("./12/file0" [pid 292] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 289] <... rmdir resumed>) = 0 [pid 288] getdents64(3, [pid 292] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] getdents64(3, [pid 288] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] close(3 [pid 289] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 289] close(3 [pid 288] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 292] getdents64(3, [pid 289] rmdir("./12" [pid 288] rmdir("./12" [pid 292] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 292] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] <... rmdir resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./14/binderfs" [pid 288] <... rmdir resumed>) = 0 [pid 289] mkdir("./13", 0777 [pid 288] mkdir("./13", 0777 [pid 292] <... unlink resumed>) = 0 [pid 292] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] <... mkdir resumed>) = 0 [pid 288] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 289] <... mkdir resumed>) = 0 [pid 289] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 666] <... close resumed>) = 0 [pid 666] mkdir("./file0", 0777) = 0 [pid 666] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 292] <... umount2 resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 289] <... openat resumed>) = 3 [pid 288] <... openat resumed>) = 3 [pid 292] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] ioctl(3, LOOP_CLR_FD [pid 289] ioctl(3, LOOP_CLR_FD [pid 288] ioctl(3, LOOP_CLR_FD [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 292] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./14/file0") = 0 [pid 292] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 292] close(3) = 0 [pid 292] rmdir("./14") = 0 [pid 292] mkdir("./15", 0777) = 0 [ 28.774656][ T658] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 292] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 290] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 289] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 288] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 292] <... openat resumed>) = 3 [pid 290] close(3 [pid 289] close(3 [pid 288] close(3 [pid 292] ioctl(3, LOOP_CLR_FD [pid 290] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 292] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 288] <... close resumed>) = 0 [pid 292] close(3 [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] <... close resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555568d8690) = 668 [pid 289] <... clone resumed>, child_tidptr=0x5555568d8690) = 669 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 671 attached [pid 288] <... clone resumed>, child_tidptr=0x5555568d8690) = 670 [pid 292] <... clone resumed>, child_tidptr=0x5555568d8690) = 671 [pid 671] set_robust_list(0x5555568d86a0, 24) = 0 [pid 671] chdir("./15") = 0 [pid 671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 671] setpgid(0, 0) = 0 [pid 671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 671] write(3, "1000", 4) = 4 [pid 671] close(3) = 0 [pid 671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 671] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 670 attached ./strace-static-x86_64: Process 669 attached [pid 670] set_robust_list(0x5555568d86a0, 24 [pid 669] set_robust_list(0x5555568d86a0, 24 [pid 670] <... set_robust_list resumed>) = 0 [pid 669] <... set_robust_list resumed>) = 0 [pid 671] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, NULL, 8) = 0 [pid 670] chdir("./13" [pid 669] chdir("./13" [pid 671] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 670] <... chdir resumed>) = 0 [pid 669] <... chdir resumed>) = 0 [pid 671] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 668 attached [pid 671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 670] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 669] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 671] <... mmap resumed>) = 0x7f39234c1000 [pid 670] <... prctl resumed>) = 0 [pid 669] <... prctl resumed>) = 0 [pid 668] set_robust_list(0x5555568d86a0, 24 [pid 671] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 670] setpgid(0, 0 [pid 669] setpgid(0, 0 [pid 668] <... set_robust_list resumed>) = 0 [pid 671] <... mprotect resumed>) = 0 [pid 670] <... setpgid resumed>) = 0 [pid 669] <... setpgid resumed>) = 0 [pid 668] chdir("./13" [pid 671] rt_sigprocmask(SIG_BLOCK, ~[], [pid 670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 668] <... chdir resumed>) = 0 [pid 671] <... rt_sigprocmask resumed>[], 8) = 0 [pid 670] <... openat resumed>) = 3 [pid 670] write(3, "1000", 4 [pid 669] <... openat resumed>) = 3 [pid 668] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 670] <... write resumed>) = 4 [pid 669] write(3, "1000", 4 [pid 670] close(3 [pid 668] <... prctl resumed>) = 0 [pid 671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 670] <... close resumed>) = 0 [pid 669] <... write resumed>) = 4 [pid 670] symlink("/dev/binderfs", "./binderfs" [pid 669] close(3 [pid 668] setpgid(0, 0 [pid 671] <... clone3 resumed> => {parent_tid=[674]}, 88) = 674 [pid 671] rt_sigprocmask(SIG_SETMASK, [], [pid 670] <... symlink resumed>) = 0 [pid 669] <... close resumed>) = 0 [pid 668] <... setpgid resumed>) = 0 [pid 671] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 671] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] symlink("/dev/binderfs", "./binderfs" [pid 668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 666] <... mount resumed>) = 0 [pid 670] <... futex resumed>) = 0 [pid 666] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 671] <... futex resumed>) = 0 [pid 670] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 666] <... openat resumed>) = 3 [pid 671] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 670] <... rt_sigaction resumed>NULL, 8) = 0 [pid 669] <... symlink resumed>) = 0 [pid 668] <... openat resumed>) = 3 [pid 666] chdir("./file0" [pid 670] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 669] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] write(3, "1000", 4 [pid 666] <... chdir resumed>) = 0 [pid 670] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 669] <... futex resumed>) = 0 [pid 668] <... write resumed>) = 4 [pid 666] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 669] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 668] close(3 [pid 666] <... openat resumed>) = 4 [pid 666] ioctl(4, LOOP_CLR_FD [pid 670] <... mmap resumed>) = 0x7f39234c1000 [pid 669] <... rt_sigaction resumed>NULL, 8) = 0 [pid 668] <... close resumed>) = 0 [pid 666] <... ioctl resumed>) = 0 [pid 666] close(4 [pid 670] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 669] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 668] symlink("/dev/binderfs", "./binderfs" [pid 666] <... close resumed>) = 0 [pid 670] <... mprotect resumed>) = 0 [pid 669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 668] <... symlink resumed>) = 0 [pid 666] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] rt_sigprocmask(SIG_BLOCK, ~[], [pid 669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 668] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = 1 [pid 665] <... futex resumed>) = 0 [pid 670] <... rt_sigprocmask resumed>[], 8) = 0 [pid 669] <... mmap resumed>) = 0x7f39234c1000 [pid 668] <... futex resumed>) = 0 [pid 666] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 665] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 669] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 668] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = 0 ./strace-static-x86_64: Process 674 attached [pid 669] <... mprotect resumed>) = 0 [pid 668] <... rt_sigaction resumed>NULL, 8) = 0 [pid 666] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 665] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] set_robust_list(0x7f39234e19a0, 24 [pid 670] <... clone3 resumed> => {parent_tid=[675]}, 88) = 675 [pid 669] rt_sigprocmask(SIG_BLOCK, ~[], [pid 668] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 666] <... open resumed>) = 4 [pid 674] <... set_robust_list resumed>) = 0 [pid 670] rt_sigprocmask(SIG_SETMASK, [], [pid 669] <... rt_sigprocmask resumed>[], 8) = 0 [pid 668] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 666] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] rt_sigprocmask(SIG_SETMASK, [], [pid 670] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 668] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 666] <... futex resumed>) = 1 [pid 665] <... futex resumed>) = 0 ./strace-static-x86_64: Process 675 attached [pid 674] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 670] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... mmap resumed>) = 0x7f39234c1000 [pid 666] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 665] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 669] <... clone3 resumed> => {parent_tid=[676]}, 88) = 676 [pid 668] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = 0 [pid 670] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 669] rt_sigprocmask(SIG_SETMASK, [], [pid 668] <... mprotect resumed>) = 0 [pid 666] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 665] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 668] rt_sigprocmask(SIG_BLOCK, ~[], [pid 669] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... rt_sigprocmask resumed>[], 8) = 0 [pid 666] <... write resumed>) = 9 [pid 669] <... futex resumed>) = 0 [pid 668] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 666] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 666] <... futex resumed>) = 1 [pid 665] <... futex resumed>) = 0 [pid 668] <... clone3 resumed> => {parent_tid=[677]}, 88) = 677 [pid 666] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 665] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 677 attached ./strace-static-x86_64: Process 676 attached [pid 675] set_robust_list(0x7f39234e19a0, 24 [pid 674] memfd_create("syzkaller", 0 [pid 668] rt_sigprocmask(SIG_SETMASK, [], [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = 0 [pid 677] set_robust_list(0x7f39234e19a0, 24 [pid 676] set_robust_list(0x7f39234e19a0, 24 [pid 675] <... set_robust_list resumed>) = 0 [pid 674] <... memfd_create resumed>) = 3 [pid 668] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 666] creat("./bus", 000 [pid 665] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] rt_sigprocmask(SIG_SETMASK, [], [pid 674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 668] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 668] <... futex resumed>) = 0 [pid 674] <... mmap resumed>) = 0x7f391b0c1000 [pid 666] <... creat resumed>) = 5 [pid 668] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 666] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 665] <... futex resumed>) = 0 [pid 666] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 665] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = 0 [pid 666] creat("./bus", 000 [pid 665] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... creat resumed>) = 6 [pid 666] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 665] <... futex resumed>) = 0 [pid 666] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 665] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = 0 [pid 666] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 665] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... open resumed>) = 7 [pid 666] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 665] <... futex resumed>) = 0 [pid 665] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 665] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 666] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 665] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = 0 [pid 666] ftruncate(6, 31 [pid 665] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... ftruncate resumed>) = 0 [pid 666] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 665] <... futex resumed>) = 0 [pid 666] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 665] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = 0 [pid 665] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 675] memfd_create("syzkaller", 0) = 3 [pid 675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [pid 674] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 674] <... write resumed>) = 1048576 [pid 677] <... set_robust_list resumed>) = 0 [pid 676] <... set_robust_list resumed>) = 0 [pid 677] rt_sigprocmask(SIG_SETMASK, [], [pid 676] rt_sigprocmask(SIG_SETMASK, [], [pid 677] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 676] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 677] memfd_create("syzkaller", 0 [pid 676] memfd_create("syzkaller", 0 [pid 677] <... memfd_create resumed>) = 3 [pid 676] <... memfd_create resumed>) = 3 [pid 675] <... write resumed>) = 1048576 [pid 677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 675] munmap(0x7f391b0c1000, 138412032 [pid 674] munmap(0x7f391b0c1000, 138412032 [pid 677] <... mmap resumed>) = 0x7f391b0c1000 [pid 676] <... mmap resumed>) = 0x7f391b0c1000 [pid 674] <... munmap resumed>) = 0 [pid 676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 674] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 675] <... munmap resumed>) = 0 [pid 674] ioctl(4, LOOP_SET_FD, 3 [pid 675] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 677] <... write resumed>) = 1048576 [pid 666] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 665] <... mmap resumed>) = 0x7f39234a0000 [pid 676] <... write resumed>) = 1048576 [pid 674] <... ioctl resumed>) = 0 [pid 676] munmap(0x7f391b0c1000, 138412032) = 0 [pid 676] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 676] ioctl(4, LOOP_SET_FD, 3 [pid 675] <... openat resumed>) = 4 [pid 674] close(3 [pid 677] munmap(0x7f391b0c1000, 138412032) = 0 [pid 675] ioctl(4, LOOP_SET_FD, 3 [pid 674] <... close resumed>) = 0 [pid 677] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 674] close(4 [pid 676] <... ioctl resumed>) = 0 [pid 676] close(3) = 0 [pid 676] close(4 [pid 675] <... ioctl resumed>) = 0 [pid 674] <... close resumed>) = 0 [pid 666] +++ killed by SIGBUS +++ [pid 665] +++ killed by SIGBUS +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=665, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 677] <... openat resumed>) = 4 [pid 677] ioctl(4, LOOP_SET_FD, 3 [pid 675] close(3) = 0 [pid 675] close(4 [pid 674] mkdir("./file0", 0777 [pid 677] <... ioctl resumed>) = 0 [pid 674] <... mkdir resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 677] close(3 [pid 676] <... close resumed>) = 0 [pid 674] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 677] <... close resumed>) = 0 [pid 676] mkdir("./file0", 0777 [pid 677] close(4 [pid 291] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 291] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./14/binderfs") = 0 [pid 676] <... mkdir resumed>) = 0 [pid 291] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 28.887920][ T666] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 676] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 675] <... close resumed>) = 0 [pid 675] mkdir("./file0", 0777) = 0 [pid 675] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 674] <... mount resumed>) = 0 [pid 674] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 674] chdir("./file0") = 0 [pid 674] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 677] <... close resumed>) = 0 [pid 677] mkdir("./file0", 0777) = 0 [pid 677] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 674] <... openat resumed>) = 4 [pid 291] <... umount2 resumed>) = 0 [pid 677] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 674] ioctl(4, LOOP_CLR_FD [pid 677] <... openat resumed>) = 3 [pid 674] <... ioctl resumed>) = 0 [pid 291] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 674] close(4 [pid 677] chdir("./file0" [pid 674] <... close resumed>) = 0 [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 674] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 671] <... futex resumed>) = 0 [pid 674] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] <... futex resumed>) = 0 [pid 674] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 671] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] newfstatat(AT_FDCWD, "./14/file0", [pid 674] <... open resumed>) = 4 [pid 674] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 674] <... futex resumed>) = 1 [pid 671] <... futex resumed>) = 0 [pid 677] <... chdir resumed>) = 0 [pid 674] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] <... futex resumed>) = 0 [pid 674] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 671] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 674] <... write resumed>) = 9 [pid 674] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 671] <... futex resumed>) = 0 [pid 674] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] <... futex resumed>) = 0 [pid 674] creat("./bus", 000 [pid 671] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 674] <... creat resumed>) = 5 [pid 291] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 674] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 671] <... futex resumed>) = 0 [pid 291] <... openat resumed>) = 4 [pid 677] <... openat resumed>) = 4 [pid 674] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] newfstatat(4, "", [pid 674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] <... futex resumed>) = 0 [pid 674] creat("./bus", 000 [pid 671] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] <... creat resumed>) = 6 [pid 674] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 671] <... futex resumed>) = 0 [pid 674] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] <... futex resumed>) = 0 [pid 674] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 671] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 674] <... open resumed>) = 7 [pid 674] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 671] <... futex resumed>) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 677] ioctl(4, LOOP_CLR_FD [pid 674] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] <... futex resumed>) = 0 [pid 677] <... ioctl resumed>) = 0 [pid 674] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 671] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] getdents64(4, [pid 677] close(4 [pid 674] <... mmap resumed>) = 0x20000000 [pid 674] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... getdents64 resumed>0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 677] <... close resumed>) = 0 [pid 674] <... futex resumed>) = 1 [pid 671] <... futex resumed>) = 0 [pid 291] getdents64(4, [pid 677] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... getdents64 resumed>0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 677] <... futex resumed>) = 1 [pid 674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] <... futex resumed>) = 0 [pid 668] <... futex resumed>) = 0 [pid 291] close(4 [pid 677] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 676] <... mount resumed>) = 0 [pid 674] ftruncate(6, 31 [pid 671] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... close resumed>) = 0 [pid 676] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 674] <... ftruncate resumed>) = 0 [pid 668] <... futex resumed>) = 0 [pid 291] rmdir("./14/file0" [pid 676] <... openat resumed>) = 3 [pid 674] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 676] chdir("./file0" [pid 674] <... futex resumed>) = 1 [pid 671] <... futex resumed>) = 0 [pid 676] <... chdir resumed>) = 0 [pid 674] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 671] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 671] <... futex resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 677] <... open resumed>) = 4 [pid 676] <... openat resumed>) = 4 [pid 291] getdents64(3, [pid 677] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... getdents64 resumed>0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 677] <... futex resumed>) = 1 [pid 291] close(3 [pid 677] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 291] <... close resumed>) = 0 [pid 291] rmdir("./14") = 0 [pid 291] mkdir("./15", 0777) = 0 [pid 291] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555568d8690) = 690 ./strace-static-x86_64: Process 690 attached [pid 690] set_robust_list(0x5555568d86a0, 24) = 0 [pid 690] chdir("./15") = 0 [pid 690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 690] setpgid(0, 0) = 0 [pid 690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 690] write(3, "1000", 4 [pid 671] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 0 [pid 676] ioctl(4, LOOP_CLR_FD [pid 675] <... mount resumed>) = 0 [pid 674] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 671] <... futex resumed>) = 0 [pid 668] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 677] <... futex resumed>) = 0 [pid 675] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 668] <... futex resumed>) = 1 [pid 677] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 675] <... openat resumed>) = 3 [pid 671] <... mmap resumed>) = 0x7f39234a0000 [pid 668] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... write resumed>) = 9 [pid 676] <... ioctl resumed>) = 0 [pid 675] chdir("./file0" [pid 671] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE [pid 677] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] <... chdir resumed>) = 0 [pid 671] <... mprotect resumed>) = 0 [pid 677] <... futex resumed>) = 1 [pid 675] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 671] rt_sigprocmask(SIG_BLOCK, ~[], [pid 668] <... futex resumed>) = 0 [pid 677] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] <... openat resumed>) = 4 [pid 671] <... rt_sigprocmask resumed>[], 8) = 0 [pid 668] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 675] ioctl(4, LOOP_CLR_FD [pid 671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} [pid 668] <... futex resumed>) = 0 [pid 677] creat("./bus", 000 [pid 675] <... ioctl resumed>) = 0 [pid 668] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... creat resumed>) = 5 [pid 675] close(4 [pid 671] <... clone3 resumed>, 88) = -1 (errno 18446744073709551613) ./strace-static-x86_64: Process 691 attached [pid 690] <... write resumed>) = 4 [pid 677] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] close(4 [pid 675] <... close resumed>) = 0 [pid 690] close(3 [pid 677] <... futex resumed>) = 1 [pid 676] <... close resumed>) = 0 [pid 675] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 0 [pid 676] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 676] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 690] <... close resumed>) = 0 [pid 677] creat("./bus", 000 [pid 675] <... futex resumed>) = 1 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 668] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 677] <... creat resumed>) = 6 [pid 675] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 670] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 0 [pid 677] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 668] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] symlink("/dev/binderfs", "./binderfs" [pid 677] <... futex resumed>) = 0 [pid 676] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 675] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 670] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 690] <... symlink resumed>) = 0 [pid 677] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 676] <... open resumed>) = 4 [pid 675] <... open resumed>) = 4 [pid 668] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 676] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 0 [pid 690] <... futex resumed>) = 0 [pid 677] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 676] <... futex resumed>) = 1 [pid 675] <... futex resumed>) = 1 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 668] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] rt_sigaction(SIGRT_1, {sa_handler=0x7f392354b220, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f392353c3d0}, [pid 677] <... open resumed>) = 7 [pid 676] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 670] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... rt_sigaction resumed>NULL, 8) = 0 [pid 677] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 690] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 677] <... futex resumed>) = 1 [pid 676] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 675] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 670] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 0 [pid 690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 677] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 676] <... write resumed>) = 9 [pid 675] <... write resumed>) = 9 [pid 668] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 676] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 0 [pid 690] <... mmap resumed>) = 0x7f39234c1000 [pid 677] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 676] <... futex resumed>) = 1 [pid 675] <... futex resumed>) = 1 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 668] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] mprotect(0x7f39234c2000, 131072, PROT_READ|PROT_WRITE [pid 677] <... mmap resumed>) = 0x20000000 [pid 676] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 670] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... mprotect resumed>) = 0 [pid 677] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 690] rt_sigprocmask(SIG_BLOCK, ~[], [pid 677] <... futex resumed>) = 1 [pid 676] creat("./bus", 000 [pid 675] creat("./bus", 000 [pid 674] +++ killed by SIGBUS +++ [pid 670] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 0 [pid 690] <... rt_sigprocmask resumed>[], 8) = 0 [pid 677] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 676] <... creat resumed>) = 5 [pid 675] <... creat resumed>) = 5 [pid 668] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234e1990, parent_tid=0x7f39234e1990, exit_signal=0, stack=0x7f39234c1000, stack_size=0x20300, tls=0x7f39234e16c0} [pid 677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 676] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 0 [pid 677] ftruncate(6, 31 [pid 676] <... futex resumed>) = 1 [pid 675] <... futex resumed>) = 1 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 668] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... clone3 resumed> => {parent_tid=[692]}, 88) = 692 [pid 677] <... ftruncate resumed>) = 0 [pid 676] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 670] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] rt_sigprocmask(SIG_SETMASK, [], [pid 677] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 677] <... futex resumed>) = 1 [pid 676] creat("./bus", 000 [pid 675] creat("./bus", 000 [pid 670] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 0 [pid 691] +++ killed by SIGBUS +++ [pid 690] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 677] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 676] <... creat resumed>) = 6 [pid 675] <... creat resumed>) = 6 [pid 671] +++ killed by SIGBUS +++ [pid 668] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... futex resumed>) = 0 [pid 677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 676] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 0 [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=671, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- ./strace-static-x86_64: Process 692 attached [pid 690] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 692] set_robust_list(0x7f39234e19a0, 24) = 0 [pid 692] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 692] memfd_create("syzkaller", 0) = 3 [pid 692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f391b0c1000 [ 29.075626][ T674] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 692] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 692] munmap(0x7f391b0c1000, 138412032) = 0 [pid 677] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 676] <... futex resumed>) = 1 [pid 675] <... futex resumed>) = 1 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 668] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 692] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 676] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 670] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 0 [pid 292] <... restart_syscall resumed>) = 0 [pid 692] <... openat resumed>) = 4 [pid 676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 668] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 692] ioctl(4, LOOP_SET_FD, 3 [pid 676] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 675] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 670] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... mmap resumed>) = 0x7f39234a0000 [pid 676] <... open resumed>) = 7 [pid 675] <... open resumed>) = 7 [pid 668] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE [pid 292] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 676] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... mprotect resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 676] <... futex resumed>) = 1 [pid 675] <... futex resumed>) = 1 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 668] rt_sigprocmask(SIG_BLOCK, ~[], [pid 292] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 676] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 675] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 670] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... rt_sigprocmask resumed>[], 8) = 0 [pid 292] <... openat resumed>) = 3 [pid 676] <... mmap resumed>) = 0x20000000 [pid 675] <... mmap resumed>) = 0x20000000 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 668] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} [pid 292] newfstatat(3, "", [pid 676] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 676] <... futex resumed>) = 0 [pid 675] <... futex resumed>) = 0 [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 668] <... clone3 resumed> => {parent_tid=[694]}, 88) = 694 [pid 292] getdents64(3, [pid 676] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 670] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] rt_sigprocmask(SIG_SETMASK, [], [pid 292] <... getdents64 resumed>0x5555568d9730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 694 attached [pid 692] <... ioctl resumed>) = 0 [pid 676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 668] <... rt_sigprocmask resumed> ) = ? [pid 292] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 692] close(3 [pid 676] ftruncate(6, 31 [pid 675] ftruncate(6, 31 [pid 670] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... close resumed>) = 0 [pid 676] <... ftruncate resumed>) = 0 [pid 675] <... ftruncate resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 692] close(4) = 0 [pid 692] mkdir("./file0", 0777) = 0 [pid 692] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 676] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 675] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] newfstatat(AT_FDCWD, "./15/binderfs", [pid 676] <... futex resumed>) = 1 [pid 675] <... futex resumed>) = 1 [pid 670] <... futex resumed>) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 676] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 670] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] unlink("./15/binderfs" [pid 675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] <... futex resumed>) = 0 [pid 292] <... unlink resumed>) = 0 [pid 669] <... futex resumed>) = 0 [pid 669] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 669] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234a0000 [pid 669] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 669] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[695]}, 88) = 695 [pid 669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 669] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 292] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 676] <... futex resumed>) = 0 ./strace-static-x86_64: Process 695 attached [pid 694] +++ killed by SIGBUS +++ [pid 695] set_robust_list(0x7f39234c09a0, 24 [pid 677] +++ killed by SIGBUS +++ [pid 668] +++ killed by SIGBUS +++ [pid 695] <... set_robust_list resumed>) = 0 [pid 695] rt_sigprocmask(SIG_SETMASK, [], [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=668, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 695] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 290] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 290] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./13/binderfs") = 0 [pid 290] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 670] <... mmap resumed>) = 0x7f39234a0000 [pid 670] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 670] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 670] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[696]}, 88) = 696 [pid 670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 670] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 670] <... futex resumed>) = ? ./strace-static-x86_64: Process 696 attached [pid 692] <... mount resumed>) = 0 [pid 692] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 692] chdir("./file0") = 0 [pid 692] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 692] ioctl(4, LOOP_CLR_FD) = 0 [pid 692] close(4) = 0 [pid 692] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] <... futex resumed>) = 0 [pid 692] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 690] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] ioctl(-1, TIOCMBIC, [0] [pid 690] <... futex resumed>) = 0 [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 696] +++ killed by SIGBUS +++ [pid 695] <... ioctl resumed>) = ? [pid 690] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] <... futex resumed>) = ? [pid 692] <... open resumed>) = 4 [pid 676] +++ killed by SIGBUS +++ [pid 692] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 692] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 675] +++ killed by SIGBUS +++ [pid 690] <... futex resumed>) = 0 [pid 670] +++ killed by SIGBUS +++ [ 29.113241][ T677] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.140106][ T675] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.148109][ T676] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=670, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 288] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 288] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(3, 0x5555568d9730 /* 4 entries */, 32768) = 112 [pid 288] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./13/binderfs") = 0 [pid 288] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 690] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] <... futex resumed>) = 0 [pid 690] <... futex resumed>) = 1 [pid 692] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 690] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... write resumed>) = 9 [pid 692] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] <... futex resumed>) = 0 [pid 692] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 690] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 690] <... futex resumed>) = 0 [pid 692] creat("./bus", 000 [pid 690] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... creat resumed>) = 5 [pid 692] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] <... futex resumed>) = 0 [pid 692] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 690] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 690] <... futex resumed>) = 0 [pid 692] creat("./bus", 000 [pid 690] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... creat resumed>) = 6 [pid 692] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] <... futex resumed>) = 0 [pid 692] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 690] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 690] <... futex resumed>) = 0 [pid 692] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 690] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... open resumed>) = 7 [pid 692] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] <... futex resumed>) = 0 [pid 692] futex(0x7f39235ad708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 690] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 29.177148][ T695] ------------[ cut here ]------------ [ 29.182648][ T695] kernel BUG at fs/ext4/inode.c:2766! [ 29.188050][ T695] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 29.193927][ T695] CPU: 1 PID: 695 Comm: syz-executor211 Not tainted 5.10.209-syzkaller-00039-g8d3bb9cb3b7d #0 [ 29.203990][ T695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 29.213920][ T695] RIP: 0010:ext4_writepages+0x3bdf/0x3c00 [ 29.219441][ T695] Code: 73 8c ff 31 ff 89 de e8 7f 73 8c ff 45 84 f6 75 27 e8 e5 70 8c ff 49 be 00 00 00 00 00 fc ff df e9 0e f7 ff ff e8 d1 70 8c ff <0f> 0b e8 ca 70 8c ff e8 41 47 22 ff eb 9b e8 be 70 8c ff e8 35 47 [ 29.238881][ T695] RSP: 0018:ffffc90001b97280 EFLAGS: 00010293 [ 29.244784][ T695] RAX: ffffffff81de380f RBX: 0000008000000000 RCX: ffff88811ebe8000 [ 29.252593][ T695] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 29.260402][ T695] RBP: ffffc90001b97670 R08: ffffffff81de0283 R09: ffffed1023954d55 [ 29.268212][ T695] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 29.276025][ T695] R13: ffffc90001b977e0 R14: 0000009410000000 R15: ffffc90001b97540 [ 29.283839][ T695] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.292601][ T695] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.299024][ T695] CR2: 00007f39234c0d58 CR3: 000000011965e000 CR4: 00000000003506a0 [ 29.306840][ T695] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.314648][ T695] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.322454][ T695] Call Trace: [ 29.325596][ T695] ? __die_body+0x62/0xb0 [ 29.329752][ T695] ? die+0x88/0xb0 [ 29.333313][ T695] ? do_trap+0x1a4/0x310 [ 29.337391][ T695] ? ext4_writepages+0x3bdf/0x3c00 [ 29.342338][ T695] ? handle_invalid_op+0x95/0xc0 [ 29.347107][ T695] ? ext4_writepages+0x3bdf/0x3c00 [ 29.352077][ T695] ? exc_invalid_op+0x32/0x50 [ 29.356573][ T695] ? asm_exc_invalid_op+0x12/0x20 [ 29.361431][ T695] ? ext4_writepages+0x653/0x3c00 [ 29.366289][ T695] ? ext4_writepages+0x3bdf/0x3c00 [ 29.371240][ T695] ? ext4_writepages+0x3bdf/0x3c00 [ 29.376188][ T695] ? is_bpf_text_address+0x172/0x190 [ 29.381311][ T695] ? ext4_readpage+0x230/0x230 [ 29.385909][ T695] ? stack_trace_save+0x1c0/0x1c0 [ 29.390768][ T695] ? __kernel_text_address+0x9b/0x110 [ 29.395978][ T695] ? unwind_get_return_address+0x4d/0x90 [ 29.401443][ T695] ? arch_stack_walk+0xf3/0x140 [ 29.406133][ T695] ? kasan_set_track+0x5d/0x70 [ 29.410730][ T695] ? kasan_set_track+0x4b/0x70 [ 29.415328][ T695] ? kmem_cache_free+0xa9/0x1e0 [ 29.420013][ T695] ? ext4_readpage+0x230/0x230 [ 29.424615][ T695] do_writepages+0x12e/0x270 [ 29.429040][ T695] ? kasan_set_track+0x4b/0x70 [ 29.433641][ T695] ? kasan_set_free_info+0x23/0x40 [ 29.438588][ T695] ? ____kasan_slab_free+0x121/0x160 [ 29.443710][ T695] ? __writepage+0x130/0x130 [ 29.448138][ T695] ? _raw_spin_unlock+0x4d/0x70 [ 29.452826][ T695] __filemap_fdatawrite_range+0x33c/0x3f0 [ 29.458382][ T695] ? filemap_check_errors+0x150/0x150 [ 29.463589][ T695] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 29.470194][ T695] filemap_flush+0x23/0x30 [ 29.474435][ T695] ext4_alloc_da_blocks+0x77/0x1a0 [ 29.479383][ T695] ext4_release_file+0x84/0x310 [ 29.484069][ T695] ? ext4_file_open+0x660/0x660 [ 29.488759][ T695] __fput+0x309/0x760 [ 29.492573][ T695] ____fput+0x15/0x20 [ 29.496393][ T695] task_work_run+0x129/0x190 [ 29.500819][ T695] do_exit+0xc83/0x2a50 [ 29.504813][ T695] ? put_task_struct+0x80/0x80 [ 29.509414][ T695] ? wq_worker_last_func+0x50/0x50 [ 29.514360][ T695] ? __kasan_check_write+0x14/0x20 [ 29.519309][ T695] ? llist_add_batch+0x90/0xb0 [ 29.523908][ T695] ? __kasan_check_write+0x14/0x20 [ 29.528856][ T695] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 29.533802][ T695] do_group_exit+0x141/0x310 [ 29.538230][ T695] get_signal+0x10a0/0x1410 [ 29.542568][ T695] arch_do_signal_or_restart+0xbd/0x17c0 [ 29.548037][ T695] ? _raw_spin_lock_irqsave+0x210/0x210 [ 29.553420][ T695] ? _raw_spin_unlock_irq+0x4e/0x70 [ 29.558453][ T695] ? __kasan_check_write+0x14/0x20 [ 29.563399][ T695] ? ptrace_stop+0x6f4/0xa30 [ 29.567827][ T695] ? __do_sys_rt_sigreturn+0x1e0/0x1e0 [ 29.573117][ T695] ? _raw_spin_unlock_irq+0x4e/0x70 [ 29.578152][ T695] ? ptrace_notify+0x24c/0x350 [ 29.582770][ T695] exit_to_user_mode_loop+0x9b/0xd0 [ 29.587788][ T695] syscall_exit_to_user_mode+0xc5/0x1d0 [ 29.593166][ T695] do_syscall_64+0x40/0x70 [ 29.597440][ T695] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 29.603156][ T695] RIP: 0033:0x7f3923524e09 [ 29.607403][ T695] Code: Unable to access opcode bytes at RIP 0x7f3923524ddf. [ 29.614609][ T695] RSP: 002b:00007f39234c0218 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [pid 690] <... futex resumed>) = 0 [pid 692] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 29.622850][ T695] RAX: fffffffffffffff7 RBX: 00007f39235ad718 RCX: 00007f3923524e09 [ 29.630658][ T695] RDX: 0000000020000280 RSI: 0000000000005417 RDI: 00000000ffffffff [ 29.638469][ T695] RBP: 00007f39235ad710 R08: 00007ffd33b61e57 R09: 0000000000000000 [ 29.646284][ T695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f392357982c [ 29.654614][ T695] R13: 00007f39235790c0 R14: 0000000020000fc0 R15: 0030656c69662f2e [ 29.662426][ T695] Modules linked in: [ 29.666979][ T695] ---[ end trace 366574ced66a5fc8 ]--- [ 29.672291][ T695] RIP: 0010:ext4_writepages+0x3bdf/0x3c00 [pid 690] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... mmap resumed>) = 0x20000000 [pid 290] <... umount2 resumed>) = 0 [pid 290] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x5555568e1770 /* 2 entries */, 32768) = 48 [pid 290] getdents64(4, 0x5555568e1770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./13/file0") = 0 [pid 290] getdents64(3, 0x5555568d9730 /* 0 entries */, 32768) = 0 [pid 290] close(3) = 0 [pid 290] rmdir("./13") = 0 [pid 290] mkdir("./14", 0777) = 0 [pid 290] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 692] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... futex resumed>) = 0 [pid 690] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 690] futex(0x7f39235ad70c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... futex resumed>) = 1 [pid 692] ftruncate(6, 31) = 0 [pid 692] futex(0x7f39235ad70c, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... futex resumed>) = 0 [pid 690] futex(0x7f39235ad708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 690] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f39234a0000 [pid 690] mprotect(0x7f39234a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 690] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f39234c0990, parent_tid=0x7f39234c0990, exit_signal=0, stack=0x7f39234a0000, stack_size=0x20300, tls=0x7f39234c06c0} => {parent_tid=[700]}, 88) = 700 [pid 690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 690] futex(0x7f39235ad718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 690] futex(0x7f39235ad71c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... futex resumed>) = 1 ./strace-static-x86_64: Process 700 attached [pid 700] set_robust_list(0x7f39234c09a0, 24) = 0 [pid 700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 700] ioctl(-1, TIOCMBIC, [0]) = -1 EBADF (Bad file descriptor) [pid 700] futex(0x7f39235ad71c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] <... futex resumed>) = 0 [pid 700] futex(0x7f39235ad718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 692] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000600} --- [pid 700] <... futex resumed>) = ? [pid 700] +++ killed by SIGBUS +++ [ 29.677827][ T695] Code: 73 8c ff 31 ff 89 de e8 7f 73 8c ff 45 84 f6 75 27 e8 e5 70 8c ff 49 be 00 00 00 00 00 fc ff df e9 0e f7 ff ff e8 d1 70 8c ff <0f> 0b e8 ca 70 8c ff e8 41 47 22 ff eb 9b e8 be 70 8c ff e8 35 47 [ 29.697360][ T695] RSP: 0018:ffffc90001b97280 EFLAGS: 00010293 [ 29.703203][ T695] RAX: ffffffff81de380f RBX: 0000008000000000 RCX: ffff88811ebe8000 [ 29.710518][ T692] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.710994][ T695] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 29.731081][ T692] ------------[ cut here ]------------ [ 29.733340][ T695] RBP: ffffc90001b97670 R08: ffffffff81de0283 R09: ffffed1023954d55 [ 29.738960][ T692] kernel BUG at fs/ext4/inode.c:2766! [ 29.746427][ T695] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 29.746436][ T695] R13: ffffc90001b977e0 R14: 0000009410000000 R15: ffffc90001b97540 [ 29.746446][ T695] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.746455][ T695] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.746463][ T695] CR2: 00007f39234c0d58 CR3: 000000011f499000 CR4: 00000000003506a0 [ 29.746474][ T695] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.746482][ T695] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.746488][ T695] Kernel panic - not syncing: Fatal exception [ 29.746761][ T695] Kernel Offset: disabled [ 29.816245][ T695] Rebooting in 86400 seconds..