./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3337435574 <...> DUID 00:04:dd:0f:a4:e5:cb:b8:04:95:2f:30:92:03:b3:b6:0d:bc forked to background, child pid 4645 [ 36.945551][ T4646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.964573][ T4646] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.252' (ECDSA) to the list of known hosts. execve("./syz-executor3337435574", ["./syz-executor3337435574"], 0x7ffead2aec20 /* 10 vars */) = 0 brk(NULL) = 0x5555560e2000 brk(0x5555560e2c40) = 0x5555560e2c40 arch_prctl(ARCH_SET_FS, 0x5555560e2300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555560e25d0) = 5070 set_robust_list(0x5555560e25e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f1eae643610, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f1eae643ce0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f1eae6436b0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1eae643ce0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3337435574", 4096) = 28 brk(0x555556103c40) = 0x555556103c40 brk(0x555556104000) = 0x555556104000 mprotect(0x7f1eae705000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5071 attached , child_tidptr=0x5555560e25d0) = 5071 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] set_robust_list(0x5555560e25e0, 24) = 0 ./strace-static-x86_64: Process 5072 attached [pid 5070] <... clone resumed>, child_tidptr=0x5555560e25d0) = 5072 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] set_robust_list(0x5555560e25e0, 24 [pid 5071] getpid(./strace-static-x86_64: Process 5073 attached [pid 5072] <... set_robust_list resumed>) = 0 [pid 5071] <... getpid resumed>) = 5071 [pid 5070] <... clone resumed>, child_tidptr=0x5555560e25d0) = 5073 [pid 5072] getpid( [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... getpid resumed>) = 5072 [pid 5071] mkdir("./syzkaller.zzCyOE", 0700./strace-static-x86_64: Process 5074 attached [pid 5073] set_robust_list(0x5555560e25e0, 24 [pid 5072] mkdir("./syzkaller.150DvK", 0700 [pid 5070] <... clone resumed>, child_tidptr=0x5555560e25d0) = 5074 [pid 5073] <... set_robust_list resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] set_robust_list(0x5555560e25e0, 24) = 0 [pid 5073] getpid( [pid 5070] <... clone resumed>, child_tidptr=0x5555560e25d0) = 5075 [pid 5073] <... getpid resumed>) = 5073 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] mkdir("./syzkaller.l97uKM", 0700 [pid 5074] getpid() = 5074 [pid 5070] <... clone resumed>, child_tidptr=0x5555560e25d0) = 5076 [pid 5074] mkdir("./syzkaller.nPbvLT", 0700./strace-static-x86_64: Process 5075 attached ./strace-static-x86_64: Process 5076 attached [pid 5071] <... mkdir resumed>) = 0 [pid 5071] chmod("./syzkaller.zzCyOE", 0777 [pid 5075] set_robust_list(0x5555560e25e0, 24 [pid 5076] set_robust_list(0x5555560e25e0, 24 [pid 5071] <... chmod resumed>) = 0 [pid 5076] <... set_robust_list resumed>) = 0 [pid 5075] <... set_robust_list resumed>) = 0 [pid 5071] chdir("./syzkaller.zzCyOE" [pid 5074] <... mkdir resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5074] chmod("./syzkaller.nPbvLT", 0777 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] chmod("./syzkaller.150DvK", 0777 [pid 5071] <... chdir resumed>) = 0 [pid 5073] chmod("./syzkaller.l97uKM", 0777 [pid 5072] <... chmod resumed>) = 0 [pid 5073] <... chmod resumed>) = 0 [pid 5072] chdir("./syzkaller.150DvK" [pid 5073] chdir("./syzkaller.l97uKM" [pid 5071] mkdir("./0", 0777 [pid 5073] <... chdir resumed>) = 0 [pid 5072] <... chdir resumed>) = 0 [pid 5074] <... chmod resumed>) = 0 [pid 5074] chdir("./syzkaller.nPbvLT" [pid 5071] <... mkdir resumed>) = 0 [pid 5073] mkdir("./0", 0777 [pid 5072] mkdir("./0", 0777 [pid 5074] <... chdir resumed>) = 0 [pid 5076] getpid( [pid 5073] <... mkdir resumed>) = 0 [pid 5076] <... getpid resumed>) = 5076 [pid 5075] getpid( [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] mkdir("./syzkaller.37SiAZ", 0700 [pid 5075] <... getpid resumed>) = 5075 [pid 5074] mkdir("./0", 0777 [pid 5073] <... openat resumed>) = 3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] mkdir("./syzkaller.9Bvr2W", 0700 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5072] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] close(3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 3 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5072] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] chmod("./syzkaller.9Bvr2W", 0777 [pid 5074] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] close(3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5075] <... chmod resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... close resumed>) = 0 [pid 5071] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] chdir("./syzkaller.9Bvr2W" [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] close(3 [pid 5076] chmod("./syzkaller.37SiAZ", 0777 [pid 5075] <... chdir resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... clone resumed>, child_tidptr=0x5555560e25d0) = 5077 [pid 5071] <... close resumed>) = 0 [pid 5076] <... chmod resumed>) = 0 [pid 5075] mkdir("./0", 0777 [pid 5072] <... clone resumed>, child_tidptr=0x5555560e25d0) = 5078 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5079 attached ./strace-static-x86_64: Process 5078 attached ./strace-static-x86_64: Process 5077 attached [pid 5076] chdir("./syzkaller.37SiAZ" [pid 5075] <... mkdir resumed>) = 0 [pid 5079] set_robust_list(0x5555560e25e0, 24 [pid 5078] set_robust_list(0x5555560e25e0, 24 [pid 5077] set_robust_list(0x5555560e25e0, 24 [pid 5076] <... chdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... clone resumed>, child_tidptr=0x5555560e25d0) = 5079 [pid 5071] <... clone resumed>, child_tidptr=0x5555560e25d0) = 5080 [pid 5079] <... set_robust_list resumed>) = 0 [pid 5078] <... set_robust_list resumed>) = 0 [pid 5077] <... set_robust_list resumed>) = 0 [pid 5076] mkdir("./0", 0777 [pid 5075] <... openat resumed>) = 3 [pid 5079] chdir("./0" [pid 5078] chdir("./0" [pid 5077] chdir("./0" [pid 5076] <... mkdir resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5080 attached [pid 5079] <... chdir resumed>) = 0 [pid 5078] <... chdir resumed>) = 0 [pid 5077] <... chdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] set_robust_list(0x5555560e25e0, 24 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5078] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... openat resumed>) = 3 [pid 5075] close(3 [pid 5080] <... set_robust_list resumed>) = 0 [pid 5079] <... prctl resumed>) = 0 [pid 5078] <... prctl resumed>) = 0 [pid 5077] <... prctl resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... close resumed>) = 0 [pid 5080] chdir("./0" [pid 5079] setpgid(0, 0 [pid 5078] setpgid(0, 0 [pid 5077] setpgid(0, 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... chdir resumed>) = 0 [pid 5079] <... setpgid resumed>) = 0 [pid 5078] <... setpgid resumed>) = 0 [pid 5077] <... setpgid resumed>) = 0 [pid 5076] close(3 [pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555560e25d0) = 5081 [pid 5080] <... prctl resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] setpgid(0, 0 [pid 5079] write(3, "1000", 4 [pid 5078] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [pid 5080] <... setpgid resumed>) = 0 [pid 5079] <... write resumed>) = 4 [pid 5078] write(3, "1000", 4 [pid 5077] write(3, "1000", 4 [pid 5076] <... clone resumed>, child_tidptr=0x5555560e25d0) = 5082 [pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] close(3 [pid 5078] <... write resumed>) = 4 [pid 5077] <... write resumed>) = 4 [pid 5078] close(3 [pid 5077] close(3 [pid 5080] <... openat resumed>) = 3 [pid 5079] <... close resumed>) = 0 [pid 5080] write(3, "1000", 4 [pid 5079] symlink("/dev/binderfs", "./binderfs" [pid 5078] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5080] <... write resumed>) = 4 [pid 5079] <... symlink resumed>) = 0 [pid 5080] close(3 [pid 5079] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] symlink("/dev/binderfs", "./binderfs" [pid 5077] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... close resumed>) = 0 [pid 5079] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5082 attached [pid 5078] <... symlink resumed>) = 0 [pid 5082] set_robust_list(0x5555560e25e0, 24 [pid 5080] symlink("/dev/binderfs", "./binderfs" [pid 5079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... symlink resumed>) = 0 [pid 5082] <... set_robust_list resumed>) = 0 [pid 5082] chdir("./0" [pid 5080] <... symlink resumed>) = 0 [pid 5078] <... futex resumed>) = 0 [pid 5082] <... chdir resumed>) = 0 [pid 5080] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... mmap resumed>) = 0x7f1eae612000 [pid 5078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... futex resumed>) = 0 [pid 5079] mprotect(0x7f1eae613000, 131072, PROT_READ|PROT_WRITE [pid 5078] <... mmap resumed>) = 0x7f1eae612000 [pid 5077] <... futex resumed>) = 0 [pid 5082] <... prctl resumed>) = 0 [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... mprotect resumed>) = 0 [pid 5078] mprotect(0x7f1eae613000, 131072, PROT_READ|PROT_WRITE [pid 5077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] setpgid(0, 0 [pid 5079] clone(child_stack=0x7f1eae6323f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] <... mprotect resumed>) = 0 [pid 5082] <... setpgid resumed>) = 0 [pid 5077] <... mmap resumed>) = 0x7f1eae612000 [pid 5078] clone(child_stack=0x7f1eae6323f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... mmap resumed>) = 0x7f1eae612000 [pid 5077] mprotect(0x7f1eae613000, 131072, PROT_READ|PROT_WRITE [pid 5082] <... openat resumed>) = 3 [pid 5080] mprotect(0x7f1eae613000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... clone resumed>, parent_tid=[5083], tls=0x7f1eae632700, child_tidptr=0x7f1eae6329d0) = 5083 [pid 5077] <... mprotect resumed>) = 0 [pid 5082] write(3, "1000", 4 [pid 5080] <... mprotect resumed>) = 0 [pid 5079] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... clone resumed>, parent_tid=[5084], tls=0x7f1eae632700, child_tidptr=0x7f1eae6329d0) = 5084 [pid 5077] clone(child_stack=0x7f1eae6323f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5083 attached [pid 5082] <... write resumed>) = 4 [pid 5079] <... futex resumed>) = 0 [pid 5078] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] clone(child_stack=0x7f1eae6323f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5081 attached [pid 5083] set_robust_list(0x7f1eae6329e0, 24 [pid 5082] close(3 [pid 5079] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5078] <... futex resumed>) = 0 [pid 5077] <... clone resumed>, parent_tid=[5085], tls=0x7f1eae632700, child_tidptr=0x7f1eae6329d0) = 5085 [pid 5083] <... set_robust_list resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5078] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] set_robust_list(0x5555560e25e0, 24 [pid 5077] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5085 attached [pid 5083] memfd_create("syzkaller", 0 [pid 5082] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... set_robust_list resumed>) = 0 [pid 5080] <... clone resumed>, parent_tid=[5086], tls=0x7f1eae632700, child_tidptr=0x7f1eae6329d0) = 5086 [pid 5077] <... futex resumed>) = 0 [pid 5085] set_robust_list(0x7f1eae6329e0, 24 [pid 5082] <... symlink resumed>) = 0 [pid 5081] chdir("./0" [pid 5080] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5085] <... set_robust_list resumed>) = 0 [pid 5082] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... chdir resumed>) = 0 [pid 5080] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5086 attached ./strace-static-x86_64: Process 5084 attached [pid 5085] memfd_create("syzkaller", 0 [pid 5082] <... futex resumed>) = 0 [pid 5085] <... memfd_create resumed>) = 3 [pid 5082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5086] set_robust_list(0x7f1eae6329e0, 24 [pid 5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] set_robust_list(0x7f1eae6329e0, 24 [pid 5082] <... mmap resumed>) = 0x7f1eae612000 [pid 5081] <... prctl resumed>) = 0 [pid 5086] <... set_robust_list resumed>) = 0 [pid 5085] <... mmap resumed>) = 0x7f1ea6212000 [pid 5082] mprotect(0x7f1eae613000, 131072, PROT_READ|PROT_WRITE [pid 5086] memfd_create("syzkaller", 0 [pid 5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5084] <... set_robust_list resumed>) = 0 [pid 5082] <... mprotect resumed>) = 0 [pid 5081] setpgid(0, 0 [pid 5082] clone(child_stack=0x7f1eae6323f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5086] <... memfd_create resumed>) = 3 [pid 5084] memfd_create("syzkaller", 0 [pid 5081] <... setpgid resumed>) = 0 [pid 5082] <... clone resumed>, parent_tid=[5088], tls=0x7f1eae632700, child_tidptr=0x7f1eae6329d0) = 5088 [pid 5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] <... memfd_create resumed>) = 3 [pid 5082] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5088 attached [pid 5088] set_robust_list(0x7f1eae6329e0, 24 [pid 5086] <... mmap resumed>) = 0x7f1ea6212000 [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... openat resumed>) = 3 [pid 5088] <... set_robust_list resumed>) = 0 [pid 5083] <... memfd_create resumed>) = 3 [pid 5088] memfd_create("syzkaller", 0 [pid 5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5088] <... memfd_create resumed>) = 3 [pid 5083] <... mmap resumed>) = 0x7f1ea6212000 [pid 5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5084] <... mmap resumed>) = 0x7f1ea6212000 [pid 5081] write(3, "1000", 4 [pid 5088] <... mmap resumed>) = 0x7f1ea6212000 syzkaller login: [ 60.201505][ T5083] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5083 'syz-executor333' [pid 5081] <... write resumed>) = 4 [pid 5088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5081] close(3) = 0 [pid 5081] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5081] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1eae612000 [pid 5081] mprotect(0x7f1eae613000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5085] <... write resumed>) = 1048576 [pid 5081] clone(child_stack=0x7f1eae6323f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5089], tls=0x7f1eae632700, child_tidptr=0x7f1eae6329d0) = 5089 [pid 5085] munmap(0x7f1ea6212000, 1048576 [pid 5081] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... munmap resumed>) = 0 [pid 5081] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5089 attached [pid 5085] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5089] set_robust_list(0x7f1eae6329e0, 24 [pid 5085] <... openat resumed>) = 4 [pid 5086] <... write resumed>) = 1048576 [pid 5085] ioctl(4, LOOP_SET_FD, 3 [pid 5089] <... set_robust_list resumed>) = 0 [pid 5086] munmap(0x7f1ea6212000, 1048576 [pid 5085] <... ioctl resumed>) = 0 [pid 5084] <... write resumed>) = 1048576 [pid 5089] memfd_create("syzkaller", 0 [pid 5086] <... munmap resumed>) = 0 [pid 5084] munmap(0x7f1ea6212000, 1048576 [pid 5089] <... memfd_create resumed>) = 3 [pid 5084] <... munmap resumed>) = 0 [pid 5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5086] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5084] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5089] <... mmap resumed>) = 0x7f1ea6212000 [pid 5086] <... openat resumed>) = 4 [pid 5084] <... openat resumed>) = 4 [pid 5083] <... write resumed>) = 1048576 [pid 5088] <... write resumed>) = 1048576 [pid 5088] munmap(0x7f1ea6212000, 1048576 [pid 5083] munmap(0x7f1ea6212000, 1048576) = 0 [pid 5088] <... munmap resumed>) = 0 [pid 5089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5086] ioctl(4, LOOP_SET_FD, 3 [pid 5088] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5084] ioctl(4, LOOP_SET_FD, 3 [pid 5088] <... openat resumed>) = 4 [pid 5083] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5088] ioctl(4, LOOP_SET_FD, 3 [pid 5085] close(3 [pid 5083] <... openat resumed>) = 4 [pid 5085] <... close resumed>) = 0 [pid 5083] ioctl(4, LOOP_SET_FD, 3 [pid 5085] mkdir("./bus", 0777) = 0 [pid 5085] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5084] <... ioctl resumed>) = 0 [ 60.295973][ T5085] loop2: detected capacity change from 0 to 2048 [ 60.319755][ T5084] loop1: detected capacity change from 0 to 2048 [ 60.320489][ T5088] loop5: detected capacity change from 0 to 2048 [ 60.327374][ T5086] loop0: detected capacity change from 0 to 2048 [ 60.333755][ T5083] loop3: detected capacity change from 0 to 2048 [pid 5084] close(3 [pid 5089] <... write resumed>) = 1048576 [pid 5086] <... ioctl resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5089] munmap(0x7f1ea6212000, 1048576 [pid 5086] close(3 [pid 5084] mkdir("./bus", 0777 [pid 5086] <... close resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5086] mkdir("./bus", 0777 [pid 5088] <... ioctl resumed>) = 0 [pid 5088] close(3) = 0 [pid 5088] mkdir("./bus", 0777 [pid 5089] <... munmap resumed>) = 0 [pid 5088] <... mkdir resumed>) = 0 [pid 5086] <... mkdir resumed>) = 0 [pid 5084] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5088] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5089] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5086] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5089] <... openat resumed>) = 4 [pid 5089] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5089] close(3) = 0 [pid 5089] mkdir("./bus", 0777 [pid 5083] <... ioctl resumed>) = 0 [pid 5083] close(3) = 0 [pid 5083] mkdir("./bus", 0777 [pid 5089] <... mkdir resumed>) = 0 [pid 5083] <... mkdir resumed>) = 0 [pid 5083] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [ 60.356652][ T5087] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 60.391160][ T5089] loop4: detected capacity change from 0 to 2048 [ 60.395350][ T5087] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.423965][ T5087] Buffer I/O error on dev loop3, logical block 0, async page read [ 60.434071][ T5085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 60.442073][ T5086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 60.447519][ T5088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5089] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5085] <... mount resumed>) = 0 [pid 5085] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5085] chdir("./bus") = 0 [pid 5085] ioctl(4, LOOP_CLR_FD) = 0 [pid 5085] close(4) = 0 [pid 5085] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... futex resumed>) = 1 [ 60.470072][ T5085] ext4 filesystem being mounted at /root/syzkaller.l97uKM/0/bus supports timestamps until 2038 (0x7fffffff) [ 60.472473][ T5084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 60.482609][ T5088] ext4 filesystem being mounted at /root/syzkaller.37SiAZ/0/bus supports timestamps until 2038 (0x7fffffff) [pid 5085] chdir("./file0" [pid 5088] <... mount resumed>) = 0 [pid 5085] <... chdir resumed>) = 0 [pid 5085] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5085] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... futex resumed>) = 0 [pid 5085] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5077] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5089] <... mount resumed>) = 0 [pid 5088] <... openat resumed>) = 3 [pid 5089] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5088] chdir("./bus" [pid 5085] <... open resumed>) = 4 [ 60.537610][ T5089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 60.550527][ T5089] ext4 filesystem being mounted at /root/syzkaller.9Bvr2W/0/bus supports timestamps until 2038 (0x7fffffff) [ 60.565153][ T5084] ext4 filesystem being mounted at /root/syzkaller.150DvK/0/bus supports timestamps until 2038 (0x7fffffff) [pid 5089] <... openat resumed>) = 3 [pid 5088] <... chdir resumed>) = 0 [pid 5085] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... futex resumed>) = 1 [pid 5085] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5085] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... futex resumed>) = 1 [pid 5085] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5085] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... futex resumed>) = 1 [pid 5085] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5085] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... futex resumed>) = 1 [pid 5085] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5089] chdir("./bus" [pid 5088] ioctl(4, LOOP_CLR_FD [pid 5089] <... chdir resumed>) = 0 [pid 5088] <... ioctl resumed>) = 0 [pid 5089] ioctl(4, LOOP_CLR_FD [pid 5088] close(4 [pid 5089] <... ioctl resumed>) = 0 [pid 5088] <... close resumed>) = 0 [pid 5085] <... write resumed>) = 262144 [pid 5085] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 0 [pid 5077] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... futex resumed>) = 1 [pid 5085] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5086] <... mount resumed>) = 0 [pid 5086] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5086] chdir("./bus") = 0 [pid 5086] ioctl(4, LOOP_CLR_FD) = 0 [pid 5086] close(4) = 0 [pid 5086] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5086] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... futex resumed>) = 0 [pid 5080] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 0 [pid 5080] <... futex resumed>) = 1 [pid 5086] chdir("./file0" [pid 5089] close(4 [pid 5088] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] <... chdir resumed>) = 0 [pid 5089] <... close resumed>) = 0 [pid 5088] <... futex resumed>) = 1 [pid 5086] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = 0 [pid 5089] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] <... futex resumed>) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = 1 [pid 5086] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... futex resumed>) = 0 [pid 5080] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5086] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5081] <... futex resumed>) = 0 [pid 5080] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] chdir("./file0" [pid 5081] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] <... chdir resumed>) = 0 [pid 5088] <... futex resumed>) = 0 [pid 5088] chdir("./file0" [pid 5089] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... open resumed>) = 4 [pid 5089] <... futex resumed>) = 1 [pid 5088] <... chdir resumed>) = 0 [pid 5089] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = 0 [pid 5088] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5086] <... futex resumed>) = 1 [pid 5082] <... futex resumed>) = 0 [pid 5081] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... futex resumed>) = 0 [pid 5088] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = 1 [pid 5080] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... futex resumed>) = 0 [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] <... futex resumed>) = 0 [pid 5081] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... futex resumed>) = 0 [pid 5089] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5088] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5086] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5082] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] <... mount resumed>) = 0 [pid 5086] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5080] <... futex resumed>) = 0 [pid 5080] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5088] <... open resumed>) = 4 [pid 5080] <... futex resumed>) = 0 [pid 5086] <... open resumed>) = 5 [pid 5080] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5089] <... open resumed>) = 4 [pid 5080] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 0 [ 60.569996][ T5086] ext4 filesystem being mounted at /root/syzkaller.zzCyOE/0/bus supports timestamps until 2038 (0x7fffffff) [ 60.577509][ T27] audit: type=1800 audit(1679291859.179:2): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor333" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 60.625155][ T5083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [pid 5089] <... futex resumed>) = 1 [pid 5081] <... futex resumed>) = 0 [pid 5088] <... futex resumed>) = 1 [pid 5086] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5082] <... futex resumed>) = 0 [pid 5080] <... futex resumed>) = 0 [pid 5077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5089] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] <... openat resumed>) = 6 [pid 5082] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5086] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = 0 [pid 5081] <... futex resumed>) = 0 [pid 5080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5089] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5088] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5086] <... futex resumed>) = 0 [pid 5082] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... mount resumed>) = 0 [pid 5086] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5089] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... mount resumed>) = 0 [pid 5080] <... futex resumed>) = 0 [pid 5080] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] <... futex resumed>) = 1 [pid 5081] <... futex resumed>) = 0 [pid 5089] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5088] <... futex resumed>) = 1 [pid 5082] <... futex resumed>) = 0 [pid 5081] <... futex resumed>) = 0 [pid 5089] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5088] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5082] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] <... open resumed>) = 5 [pid 5088] <... open resumed>) = 5 [pid 5082] <... futex resumed>) = 0 [pid 5089] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5089] <... futex resumed>) = 1 [pid 5088] <... futex resumed>) = 0 [pid 5082] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... futex resumed>) = 0 [pid 5089] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5081] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... futex resumed>) = 0 [pid 5089] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5088] <... openat resumed>) = 6 [pid 5081] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] <... openat resumed>) = 6 [pid 5088] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = 1 [pid 5082] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = 1 [pid 5088] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5082] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = 0 [pid 5089] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] <... futex resumed>) = 0 [pid 5081] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... futex resumed>) = 0 [pid 5081] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5089] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5084] <... mount resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] futex(0x7f1eae70b7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... openat resumed>) = 3 [pid 5080] <... mmap resumed>) = 0x7f1ea62f1000 [pid 5080] mprotect(0x7f1ea62f2000, 131072, PROT_READ|PROT_WRITE [pid 5084] chdir("./bus" [pid 5080] <... mprotect resumed>) = 0 [pid 5080] clone(child_stack=0x7f1ea63113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5106 attached , parent_tid=[5106], tls=0x7f1ea6311700, child_tidptr=0x7f1ea63119d0) = 5106 [pid 5080] futex(0x7f1eae70b7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... chdir resumed>) = 0 [pid 5080] <... futex resumed>) = 0 [pid 5080] futex(0x7f1eae70b7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] set_robust_list(0x7f1ea63119e0, 24 [pid 5084] ioctl(4, LOOP_CLR_FD [pid 5106] <... set_robust_list resumed>) = 0 [pid 5106] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5084] <... ioctl resumed>) = 0 [pid 5082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] close(4 [pid 5082] futex(0x7f1eae70b7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] <... close resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5081] futex(0x7f1eae70b7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... write resumed>) = 262144 [pid 5084] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... futex resumed>) = 0 [pid 5084] <... futex resumed>) = 1 [pid 5082] <... mmap resumed>) = 0x7f1ea62f1000 [pid 5081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5078] <... futex resumed>) = 0 [pid 5089] <... write resumed>) = 262144 [pid 5088] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... write resumed>) = 1048576 [pid 5084] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] mprotect(0x7f1ea62f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5082] clone(child_stack=0x7f1ea63113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5107], tls=0x7f1ea6311700, child_tidptr=0x7f1ea63119d0) = 5107 [pid 5082] futex(0x7f1eae70b7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7f1eae70b7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5107 attached [pid 5081] <... mmap resumed>) = 0x7f1ea62f1000 [pid 5078] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = 0 [pid 5085] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5089] <... futex resumed>) = 0 [pid 5088] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] <... futex resumed>) = 0 [pid 5084] chdir("./file0" [pid 5081] mprotect(0x7f1ea62f2000, 131072, PROT_READ|PROT_WRITE [pid 5078] <... futex resumed>) = 0 [pid 5107] set_robust_list(0x7f1ea63119e0, 24 [pid 5089] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... chdir resumed>) = 0 [pid 5080] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] exit_group(0 [pid 5107] <... set_robust_list resumed>) = 0 [pid 5084] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... mprotect resumed>) = 0 [pid 5077] <... exit_group resumed>) = ? [ 60.730384][ T5083] ext4 filesystem being mounted at /root/syzkaller.nPbvLT/0/bus supports timestamps until 2038 (0x7fffffff) [ 60.764065][ T5086] EXT4-fs error (device loop0): ext4_map_blocks:731: inode #19: block 242: comm syz-executor333: lblock 50 mapped to illegal pblock 242 (length 1) [pid 5107] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5085] <... futex resumed>) = ? [pid 5084] <... futex resumed>) = 0 [pid 5081] clone(child_stack=0x7f1ea63113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5085] +++ exited with 0 +++ [pid 5077] +++ exited with 0 +++ [pid 5084] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5077, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5084] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5081] <... clone resumed>, parent_tid=[5108], tls=0x7f1ea6311700, child_tidptr=0x7f1ea63119d0) = 5108 [pid 5078] <... futex resumed>) = 0 [pid 5081] futex(0x7f1eae70b7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... futex resumed>) = 0 [pid 5081] futex(0x7f1eae70b7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... open resumed>) = 4 [pid 5083] <... mount resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5108 attached [pid 5084] <... futex resumed>) = 1 [pid 5083] <... openat resumed>) = 3 [pid 5078] <... futex resumed>) = 0 [pid 5084] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... openat resumed>) = 3 [pid 5108] set_robust_list(0x7f1ea63119e0, 24 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] chdir("./bus" [pid 5082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... futex resumed>) = 0 [pid 5073] fstat(3, [pid 5108] <... set_robust_list resumed>) = 0 [pid 5084] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5083] <... chdir resumed>) = 0 [pid 5078] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5084] <... mount resumed>) = 0 [pid 5083] ioctl(4, LOOP_CLR_FD [pid 5073] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5081] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] close(4) = 0 [pid 5083] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = 0 [pid 5084] <... futex resumed>) = 1 [pid 5078] <... futex resumed>) = 0 [pid 5073] getdents64(3, [pid 5084] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5079] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... getdents64 resumed>0x5555560e3620 /* 4 entries */, 32768) = 104 [pid 5084] <... open resumed>) = 5 [pid 5083] <... futex resumed>) = 0 [pid 5079] <... futex resumed>) = 1 [pid 5078] <... futex resumed>) = 0 [pid 5073] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] chdir("./file0" [pid 5079] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... futex resumed>) = 0 [pid 5083] <... chdir resumed>) = 0 [pid 5078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 60.829053][ T27] audit: type=1800 audit(1679291859.259:3): pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor333" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 60.861529][ T5086] EXT4-fs error (device loop0): __ext4_get_inode_loc:4560: comm syz-executor333: Invalid inode table block 0 in block_group 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] lstat("./0/binderfs", [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 1 [pid 5079] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = 0 [pid 5073] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5084] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5083] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5079] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... openat resumed>) = 6 [pid 5073] unlink("./0/binderfs" [pid 5084] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = 0 [pid 5079] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... unlink resumed>) = 0 [pid 5106] <... write resumed>) = 1048576 [pid 5084] <... futex resumed>) = 1 [pid 5078] <... futex resumed>) = 0 [pid 5106] futex(0x7f1eae70b7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... open resumed>) = 4 [pid 5073] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5106] <... futex resumed>) = 0 [pid 5084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] futex(0x7f1eae70b7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5083] <... futex resumed>) = 1 [pid 5079] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = 0 [pid 5079] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... write resumed>) = 262144 [pid 5083] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5079] <... futex resumed>) = 0 [ 60.938806][ T27] audit: type=1800 audit(1679291859.279:4): pid=5088 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor333" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 60.954738][ T41] EXT4-fs error (device loop2): __ext4_get_inode_loc:4560: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 5083] <... mount resumed>) = 0 [pid 5079] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5079] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5079] <... futex resumed>) = 0 [pid 5078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5107] <... write resumed>) = 1048576 [pid 5084] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... open resumed>) = 5 [pid 5079] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] futex(0x7f1eae70b7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] futex(0x7f1eae70b7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... futex resumed>) = 0 [pid 5083] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... futex resumed>) = 0 [pid 5107] <... futex resumed>) = 0 [pid 5084] futex(0x7f1eae70b7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... futex resumed>) = 0 [pid 5079] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5107] futex(0x7f1eae70b7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] exit_group(0 [pid 5107] <... futex resumed>) = ? [pid 5082] <... exit_group resumed>) = ? [pid 5107] +++ exited with 0 +++ [ 60.965818][ T27] audit: type=1800 audit(1679291859.279:5): pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor333" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 61.001779][ T41] EXT4-fs error (device loop2): __ext4_get_inode_loc:4560: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 61.011239][ T27] audit: type=1800 audit(1679291859.429:6): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor333" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 5083] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5079] <... futex resumed>) = 0 [pid 5088] <... futex resumed>) = ? [pid 5083] <... openat resumed>) = 6 [pid 5079] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5078] <... mmap resumed>) = 0x7f1ea62f1000 [pid 5078] mprotect(0x7f1ea62f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5078] clone(child_stack=0x7f1ea63113f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5109], tls=0x7f1ea6311700, child_tidptr=0x7f1ea63119d0) = 5109 [pid 5078] futex(0x7f1eae70b7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7f1eae70b7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] +++ exited with 0 +++ [pid 5083] futex(0x7f1eae70b7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] +++ exited with 0 +++ [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... futex resumed>) = 0 [pid 5079] futex(0x7f1eae70b7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5082, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5083] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5079] <... futex resumed>) = 0 [ 61.017178][ T41] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5909: Corrupt filesystem [ 61.035215][ T5086] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5909: Corrupt filesystem [ 61.046133][ T27] audit: type=1800 audit(1679291859.539:7): pid=5083 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor333" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 61.066376][ T41] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #19: comm kworker/u4:2: mark_inode_dirty error [pid 5079] futex(0x7f1eae70b7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}