ci2-android-6-1/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-1/syz-executor103194962

<...>
Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts.
execve("ci2-android-6-1/syz-executor103194962", ["ci2-android-6-1/syz-executor103194962"], 0x7ffe51f07770 /* 10 vars */) = 0
brk(NULL)                               = 0x555587bf3000
brk(0x555587bf3e00)                     = 0x555587bf3e00
arch_prctl(ARCH_SET_FS, 0x555587bf3480) = 0
set_tid_address(0x555587bf3750)         = 305
set_robust_list(0x555587bf3760, 24)     = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-1/syz-executor103194962", 4096) = 43
getrandom("\x44\xd7\x16\xfb\xf9\x3f\x46\x89", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555587bf3e00
brk(0x555587c14e00)                     = 0x555587c14e00
brk(0x555587c15000)                     = 0x555587c15000
mprotect(0x7f0589668000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f05895a5d80, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f05895aadc0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f05895a5d80, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f05895aadc0}, NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555587bf3750) = 306
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555587bf3750) = 307
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555587bf3750) = 308
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555587bf3750) = 309
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555587bf3750) = 310
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-6-1/strace-static-x86_64: Process 310 attached
[pid   310] set_robust_list(0x555587bf3760, 24) = 0
[pid   310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   310] openat(AT_FDCWD, "/dev/loop4", O_RDONLYci2-android-6-1/strace-static-x86_64: Process 306 attached
 <unfinished ...>
[pid   306] set_robust_list(0x555587bf3760, 24) = 0
[pid   306] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   310] <... openat resumed>)       = 3
[pid   306] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   306] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
[pid   306] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   310] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   310] close(3)                    = 0
[pid   306] close(3 <unfinished ...>
[pid   310] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   306] <... close resumed>)        = 0
[pid   310] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555587bf3750) = 312
[pid   310] <... clone resumed>, child_tidptr=0x555587bf3750) = 311
[pid   306] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   306] <... rt_sigprocmask resumed>, NULL, 8) = 0
ci2-android-6-1/strace-static-x86_64: Process 312 attached
[pid   312] set_robust_list(0x555587bf3760, 24) = 0
[pid   312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   312] setpgid(0, 0)               = 0
[pid   312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   312] write(3, "1000", 4)         = 4
[pid   312] close(3)                    = 0
[pid   312] write(1, "executing program\n", 18) = 18
[pid   312] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] rt_sigaction(SIGRT_1, {sa_handler=0x7f05895daed0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f05895aadc0}, NULL, 8) = 0
[pid   312] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f058957b000
[pid   312] mprotect(0x7f058957c000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
executing program
[pid   312] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f058959b990, parent_tid=0x7f058959b990, exit_signal=0, stack=0x7f058957b000, stack_size=0x20240, tls=0x7f058959b6c0} => {parent_tid=[313]}, 88) = 313
[pid   312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   312] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 313 attached
 <unfinished ...>
[pid   313] set_robust_list(0x7f058959b9a0, 24) = 0
[pid   313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   313] memfd_create("syzkaller", 0) = 3
[pid   313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f058117b000
[pid   313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid   313] munmap(0x7f058117b000, 138412032) = 0
[pid   313] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid   313] ioctl(4, LOOP_SET_FD, 3ci2-android-6-1/strace-static-x86_64: Process 311 attached
ci2-android-6-1/strace-static-x86_64: Process 309 attached
ci2-android-6-1/strace-static-x86_64: Process 308 attached
ci2-android-6-1/strace-static-x86_64: Process 307 attached
)    = 0
[pid   313] close(3)                    = 0
[pid   313] close(4)                    = 0
[pid   313] mkdir("./file2", 0777)      = 0
[   24.900675][   T28] audit: type=1400 audit(1791018296.210:64): avc:  denied  { execmem } for  pid=305 comm="syz-executor103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   24.912871][  T313] loop0: detected capacity change from 0 to 512
[   24.920645][   T28] audit: type=1400 audit(1791018296.210:65): avc:  denied  { read } for  pid=310 comm="syz-executor103" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid   313] mount("/dev/loop0", "./file2", "ext4", MS_NODEV|MS_NOATIME, "max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000"... <unfinished ...>
[pid   311] set_robust_list(0x555587bf3760, 24 <unfinished ...>
[pid   309] set_robust_list(0x555587bf3760, 24 <unfinished ...>
[pid   308] set_robust_list(0x555587bf3760, 24 <unfinished ...>
[   24.934439][  T313] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   24.950536][   T28] audit: type=1400 audit(1791018296.210:66): avc:  denied  { open } for  pid=310 comm="syz-executor103" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   24.977906][  T313] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[pid   307] set_robust_list(0x555587bf3760, 24 <unfinished ...>
[pid   311] <... set_robust_list resumed>) = 0
[pid   309] <... set_robust_list resumed>) = 0
[pid   308] <... set_robust_list resumed>) = 0
[pid   307] <... set_robust_list resumed>) = 0
[   24.987529][   T28] audit: type=1400 audit(1791018296.210:67): avc:  denied  { ioctl } for  pid=306 comm="syz-executor103" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   24.999535][  T313] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[pid   311] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   309] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   308] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   307] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   311] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   309] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   308] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   307] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   311] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   309] openat(AT_FDCWD, "/dev/loop3", O_RDONLY <unfinished ...>
[pid   308] openat(AT_FDCWD, "/dev/loop2", O_RDONLY <unfinished ...>
[pid   307] openat(AT_FDCWD, "/dev/loop1", O_RDONLY <unfinished ...>
[pid   311] <... prctl resumed>)        = 0
[pid   309] <... openat resumed>)       = 3
[pid   308] <... openat resumed>)       = 3
[pid   307] <... openat resumed>)       = 3
[pid   311] setpgid(0, 0 <unfinished ...>
[pid   309] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   308] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   307] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   311] <... setpgid resumed>)      = 0
[pid   309] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   308] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   307] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   309] close(3 <unfinished ...>
[pid   308] close(3 <unfinished ...>
[pid   307] close(3 <unfinished ...>
[pid   311] <... openat resumed>)       = 3
[pid   309] <... close resumed>)        = 0
[pid   308] <... close resumed>)        = 0
[pid   307] <... close resumed>)        = 0
[pid   311] write(3, "1000", 4 <unfinished ...>
[pid   309] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   308] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   307] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   311] <... write resumed>)        = 4
[pid   309] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   308] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   307] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   311] close(3 <unfinished ...>
[pid   309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   311] <... close resumed>)        = 0
[pid   311] write(1, "executing program\n", 18 <unfinished ...>
[pid   309] <... clone resumed>, child_tidptr=0x555587bf3750) = 319
[pid   308] <... clone resumed>, child_tidptr=0x555587bf3750) = 317
[pid   307] <... clone resumed>, child_tidptr=0x555587bf3750) = 318
executing program
[pid   311] <... write resumed>)        = 18
[pid   309] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   308] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   307] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   311] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   309] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   308] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   307] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   311] <... futex resumed>)        = 0
[pid   311] rt_sigaction(SIGRT_1, {sa_handler=0x7f05895daed0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f05895aadc0}, NULL, 8) = 0
[pid   311] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f058957b000
[pid   311] mprotect(0x7f058957c000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f058959b990, parent_tid=0x7f058959b990, exit_signal=0, stack=0x7f058957b000, stack_size=0x20240, tls=0x7f058959b6c0} => {parent_tid=[320]}, 88) = 320
[pid   311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   311] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   311] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 318 attached
ci2-android-6-1/strace-static-x86_64: Process 319 attached
 <unfinished ...>
[pid   318] set_robust_list(0x555587bf3760, 24 <unfinished ...>
[pid   319] set_robust_list(0x555587bf3760, 24 <unfinished ...>
[pid   318] <... set_robust_list resumed>) = 0
[pid   319] <... set_robust_list resumed>) = 0
[pid   318] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   319] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   318] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   319] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   318] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   313] <... mount resumed>)        = 0
ci2-android-6-1/strace-static-x86_64: Process 317 attached
[pid   313] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORYci2-android-6-1/strace-static-x86_64: Process 320 attached
 <unfinished ...>
[   25.023126][   T28] audit: type=1400 audit(1791018296.220:68): avc:  denied  { write } for  pid=312 comm="syz-executor103" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   25.035994][  T313] EXT4-fs (loop0): 1 truncate cleaned up
[   25.059540][   T28] audit: type=1400 audit(1791018296.240:69): avc:  denied  { mounton } for  pid=312 comm="syz-executor103" path="/root/file2" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   25.065832][  T313] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[pid   317] set_robust_list(0x555587bf3760, 24 <unfinished ...>
[pid   320] set_robust_list(0x7f058959b9a0, 24 <unfinished ...>
[pid   319] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   318] <... prctl resumed>)        = 0
[pid   317] <... set_robust_list resumed>) = 0
[pid   313] <... openat resumed>)       = 3
[pid   313] chdir("./file2")            = 0
[pid   313] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid   313] ioctl(4, LOOP_CLR_FD)       = 0
[pid   317] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   313] close(4)                    = 0
[pid   313] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   312] <... futex resumed>)        = 0
[pid   312] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   313] <... futex resumed>)        = 1
[pid   313] quotactl(QCMD(Q_QUOTAON, GRPQUOTA), "/dev/loop0", 0 /* QFMT_??? */, NULL) = -1 EFAULT (Bad address)
[pid   317] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   317] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   320] <... set_robust_list resumed>) = 0
[pid   320] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   317] <... prctl resumed>)        = 0
[pid   320] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   317] setpgid(0, 0 <unfinished ...>
[pid   320] memfd_create("syzkaller", 0 <unfinished ...>
[pid   317] <... setpgid resumed>)      = 0
[pid   317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   313] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   319] <... prctl resumed>)        = 0
[pid   312] <... futex resumed>)        = 0
[pid   312] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   319] setpgid(0, 0 <unfinished ...>
[pid   313] <... futex resumed>)        = 1
[pid   319] <... setpgid resumed>)      = 0
[pid   313] mprotect(0x200000000000, 12288, PROT_READ <unfinished ...>
[pid   319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   320] <... memfd_create resumed>) = 3
[pid   313] <... mprotect resumed>)     = 0
[pid   318] setpgid(0, 0)               = 0
[pid   320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   313] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   320] <... mmap resumed>)         = 0x7f058117b000
[pid   317] <... openat resumed>)       = 3
[pid   312] <... futex resumed>)        = 0
[pid   312] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   313] <... futex resumed>)        = 1
[pid   313] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} ---
[pid   319] <... openat resumed>)       = 3
[pid   320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   313] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid   318] <... openat resumed>)       = 3
[pid   317] write(3, "1000", 4 <unfinished ...>
[pid   319] write(3, "1000", 4 <unfinished ...>
[pid   317] <... write resumed>)        = 4
[pid   319] <... write resumed>)        = 4
[pid   317] close(3 <unfinished ...>
[pid   319] close(3)                    = 0
[pid   317] <... close resumed>)        = 0
[pid   317] write(1, "executing program\n", 18 <unfinished ...>
[pid   319] write(1, "executing program\n", 18 <unfinished ...>
[pid   317] <... write resumed>)        = 18
[pid   319] <... write resumed>)        = 18
[pid   317] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   319] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   318] write(3, "1000", 4)         = 4
[pid   313] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   319] <... futex resumed>)        = 0
[pid   317] <... futex resumed>)        = 0
[pid   312] <... futex resumed>)        = 0
[pid   312] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   319] rt_sigaction(SIGRT_1, {sa_handler=0x7f05895daed0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f05895aadc0} <unfinished ...>
[pid   318] close(3 <unfinished ...>
[pid   317] rt_sigaction(SIGRT_1, {sa_handler=0x7f05895daed0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f05895aadc0} <unfinished ...>
[pid   313] <... futex resumed>)        = 1
[pid   319] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   318] <... close resumed>)        = 0
[pid   317] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   313] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 <unfinished ...>
[pid   319] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   317] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   319] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   317] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   318] write(1, "executing program\n", 18 <unfinished ...>
[pid   317] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   318] <... write resumed>)        = 18
[pid   317] <... mmap resumed>)         = 0x7f058957b000
[pid   319] <... mmap resumed>)         = 0x7f058957b000
[pid   318] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   319] mprotect(0x7f058957c000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   318] <... futex resumed>)        = 0
[pid   317] mprotect(0x7f058957c000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   319] <... mprotect resumed>)     = 0
[pid   318] rt_sigaction(SIGRT_1, {sa_handler=0x7f05895daed0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f05895aadc0} <unfinished ...>
[pid   317] <... mprotect resumed>)     = 0
[pid   318] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   318] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   317] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   319] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   318] <... mmap resumed>)         = 0x7f058957b000
[pid   318] mprotect(0x7f058957c000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   319] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   317] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f058959b990, parent_tid=0x7f058959b990, exit_signal=0, stack=0x7f058957b000, stack_size=0x20240, tls=0x7f058959b6c0} <unfinished ...>
[pid   317] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f058959b990, parent_tid=0x7f058959b990, exit_signal=0, stack=0x7f058957b000, stack_size=0x20240, tls=0x7f058959b6c0} <unfinished ...>
[pid   318] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   318] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f058959b990, parent_tid=0x7f058959b990, exit_signal=0, stack=0x7f058957b000, stack_size=0x20240, tls=0x7f058959b6c0} <unfinished ...>
[pid   317] <... clone3 resumed> => {parent_tid=[322]}, 88) = 322
[pid   317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   317] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   319] <... clone3 resumed> => {parent_tid=[321]}, 88) = 321
[pid   317] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid   319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   319] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   319] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid   318] <... clone3 resumed> => {parent_tid=[323]}, 88) = 323
[pid   318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   318] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   318] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid   320] <... write resumed>)        = 262144
[pid   313] <... mmap resumed>)         = 0x200000000000
[pid   313] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   312] <... futex resumed>)        = 0
[pid   312] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid   313] <... futex resumed>)        = 1
[pid   313] memfd_create("syzkaller", 0) = 5
[pid   313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f058117b000
[pid   313] write(5, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536 <unfinished ...>
[pid   320] munmap(0x7f058117b000, 138412032) = 0
[pid   320] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4
[pid   313] <... write resumed>)        = 65536
executing program
executing program
executing program
[pid   320] ioctl(4, LOOP_SET_FD, 3ci2-android-6-1/strace-static-x86_64: Process 323 attached
ci2-android-6-1/strace-static-x86_64: Process 322 attached
ci2-android-6-1/strace-static-x86_64: Process 321 attached
 <unfinished ...>
[pid   313] munmap(0x7f058117b000, 138412032 <unfinished ...>
[pid   320] <... ioctl resumed>)        = 0
[pid   320] close(3)                    = 0
[pid   320] close(4)                    = 0
[pid   320] mkdir("./file2", 0777)      = -1 EEXIST (File exists)
[pid   320] mount("/dev/loop4", "./file2", "ext4", MS_NODEV|MS_NOATIME, "max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000"... <unfinished ...>
[pid   323] set_robust_list(0x7f058959b9a0, 24 <unfinished ...>
[pid   322] set_robust_list(0x7f058959b9a0, 24 <unfinished ...>
[pid   321] set_robust_list(0x7f058959b9a0, 24 <unfinished ...>
[pid   313] <... munmap resumed>)       = 0
[   25.096609][   T28] audit: type=1400 audit(1791018296.410:70): avc:  denied  { mount } for  pid=312 comm="syz-executor103" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   25.109664][  T320] loop4: detected capacity change from 0 to 512
[   25.119309][   T28] audit: type=1400 audit(1791018296.410:71): avc:  denied  { append } for  pid=312 comm="syz-executor103" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid   321] <... set_robust_list resumed>) = 0
[pid   323] <... set_robust_list resumed>) = 0
[pid   322] <... set_robust_list resumed>) = 0
[   25.149854][   T28] audit: type=1400 audit(1791018296.410:72): avc:  denied  { map } for  pid=312 comm="syz-executor103" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   25.150409][  T320] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[pid   313] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid   323] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   322] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   321] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   313] <... openat resumed>)       = 6
[pid   323] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   322] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   321] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   313] ioctl(6, LOOP_SET_FD, 5 <unfinished ...>
[pid   323] memfd_create("syzkaller", 0 <unfinished ...>
[pid   322] memfd_create("syzkaller", 0 <unfinished ...>
[pid   321] memfd_create("syzkaller", 0 <unfinished ...>
[pid   313] <... ioctl resumed>)        = -1 EBUSY (Device or resource busy)
[pid   323] <... memfd_create resumed>) = 3
[pid   322] <... memfd_create resumed>) = 3
[pid   321] <... memfd_create resumed>) = 3
[pid   313] ioctl(6, LOOP_CLR_FD <unfinished ...>
[pid   323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   313] <... ioctl resumed>)        = 0
[pid   323] <... mmap resumed>)         = 0x7f058117b000
[pid   322] <... mmap resumed>)         = 0x7f058117b000
[pid   321] <... mmap resumed>)         = 0x7f058117b000
[pid   323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 <unfinished ...>
[pid   313] ioctl(6, LOOP_SET_FD, 5)    = -1 EBUSY (Device or resource busy)
[pid   313] close(6)                    = 0
[pid   322] <... write resumed>)        = 262144
[pid   323] <... write resumed>)        = 262144
[pid   321] <... write resumed>)        = 262144
[pid   313] close(5 <unfinished ...>
[pid   321] munmap(0x7f058117b000, 138412032) = 0
[pid   322] munmap(0x7f058117b000, 138412032) = 0
[pid   321] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid   322] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
[pid   321] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   323] munmap(0x7f058117b000, 138412032 <unfinished ...>
[pid   322] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   320] <... mount resumed>)        = 0
[pid   313] <... close resumed>)        = 0
[pid   323] <... munmap resumed>)       = 0
[pid   313] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   323] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid   313] <... futex resumed>)        = 1
[pid   323] <... openat resumed>)       = 4
[pid   313] futex(0x7f058966ee28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   323] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   321] <... ioctl resumed>)        = 0
[pid   320] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   312] <... futex resumed>)        = 0
[pid   312] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   312] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   321] close(3)                    = 0
[pid   321] close(4 <unfinished ...>
[pid   320] <... openat resumed>)       = 3
[pid   321] <... close resumed>)        = 0
[pid   321] mkdir("./file2", 0777 <unfinished ...>
[pid   320] chdir("./file2" <unfinished ...>
[pid   321] <... mkdir resumed>)        = -1 EEXIST (File exists)
[pid   320] <... chdir resumed>)        = 0
[pid   320] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4
[pid   321] mount("/dev/loop3", "./file2", "ext4", MS_NODEV|MS_NOATIME, "max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000"... <unfinished ...>
[pid   320] ioctl(4, LOOP_CLR_FD)       = 0
[pid   320] close(4)                    = 0
[pid   320] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   320] futex(0x7f058966ee28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   313] <... futex resumed>)        = 0
[pid   311] <... futex resumed>)        = 0
[pid   313] openat(AT_FDCWD, 0x200000000000, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 <unfinished ...>
[   25.174436][   T28] audit: type=1400 audit(1791018296.460:73): avc:  denied  { mounton } for  pid=311 comm="syz-executor103" path="/root/file2" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   25.185848][  T320] EXT4-fs (loop4): 1 truncate cleaned up
[   25.215561][  T320] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   25.219050][  T321] loop3: detected capacity change from 0 to 512
[   25.228457][  T322] loop2: detected capacity change from 0 to 512
[   25.232253][  T321] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[pid   311] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   313] <... openat resumed>)       = 5
[pid   311] <... futex resumed>)        = 1
[pid   313] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   311] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   313] <... futex resumed>)        = 1
[pid   323] <... ioctl resumed>)        = 0
[pid   313] futex(0x7f058966ee28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   323] close(3)                    = 0
[pid   312] <... futex resumed>)        = 0
[pid   323] close(4)                    = 0
[pid   322] <... ioctl resumed>)        = 0
[pid   312] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   323] mkdir("./file2", 0777)      = -1 EEXIST (File exists)
[pid   313] <... futex resumed>)        = 0
[pid   312] <... futex resumed>)        = 1
[pid   323] mount("/dev/loop1", "./file2", "ext4", MS_NODEV|MS_NOATIME, "max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000"... <unfinished ...>
[pid   313] write(5, 0x200000000040, 34136651 <unfinished ...>
[pid   312] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   320] <... futex resumed>)        = 0
[pid   320] quotactl(QCMD(Q_QUOTAON, GRPQUOTA), "/dev/loop4", 0 /* QFMT_??? */, NULL) = -1 EFAULT (Bad address)
[pid   320] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   320] futex(0x7f058966ee28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   311] <... futex resumed>)        = 0
[pid   311] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   320] <... futex resumed>)        = 0
[pid   311] <... futex resumed>)        = 1
[pid   320] mprotect(0x200000000000, 12288, PROT_READ <unfinished ...>
[pid   311] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   320] <... mprotect resumed>)     = 0
[pid   320] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   311] <... futex resumed>)        = 0
[pid   320] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} ---
[pid   311] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   320] openat(-1, "/dev/loop4", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 <unfinished ...>
[pid   311] <... futex resumed>)        = 0
[pid   320] <... openat resumed>)       = 4
[pid   311] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   320] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   311] <... futex resumed>)        = 0
[pid   320] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 <unfinished ...>
[pid   311] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   311] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   320] <... mmap resumed>)         = 0x200000000000
[pid   320] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   311] <... futex resumed>)        = 0
[pid   311] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   311] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid   320] memfd_create("syzkaller", 0) = 5
[pid   320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f058117b000
[pid   320] write(5, "\xeb\x58\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x08\x20\x00\x01\x00\x00\x00\x00\xf8\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x0b\xf3\xd9\x1d\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x46\x41\x54\x33\x32\x20\x20\x20\x0e\x1f\xbe\x77\x7c\x09\x00\x00\x00\x00"..., 65536) = 65536
[pid   320] munmap(0x7f058117b000, 138412032) = 0
[pid   320] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6
[pid   320] ioctl(6, LOOP_SET_FD, 5)    = -1 EBUSY (Device or resource busy)
[pid   320] ioctl(6, LOOP_CLR_FD)       = 0
[pid   320] ioctl(6, LOOP_SET_FD, 5)    = -1 EBUSY (Device or resource busy)
[pid   320] close(6)                    = 0
[pid   320] close(5)                    = 0
[pid   320] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   311] <... futex resumed>)        = 0
[pid   311] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   311] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   320] openat(AT_FDCWD, 0x200000000000, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid   320] futex(0x7f058966ee2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   311] <... futex resumed>)        = 0
[pid   311] futex(0x7f058966ee28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[   25.236631][  T323] loop1: detected capacity change from 0 to 512
[   25.258285][  T323] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   25.270221][  T313] EXT4-fs (loop0): pa ffff8881231c33f0: logic 0, phys. 193, len 32
[   25.278327][  T313] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4894: group 0, free 4, pa_free 16
[   25.285499][  T320] EXT4-fs (loop4): pa ffff888117ccc5e8: logic 0, phys. 193, len 32
[pid   311] futex(0x7f058966ee2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   320] write(5, 0x200000000040, 34136651 <unfinished ...>
[pid   322] close(3 <unfinished ...>
[pid   312] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   312] futex(0x7f058966ee3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f058955a000
[pid   312] mprotect(0x7f058955b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   312] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f058957a990, parent_tid=0x7f058957a990, exit_signal=0, stack=0x7f058955a000, stack_size=0x20240, tls=0x7f058957a6c0} => {parent_tid=[331]}, 88) = 331
[pid   312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   312] futex(0x7f058966ee38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] futex(0x7f058966ee3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 331 attached
 <unfinished ...>
[pid   331] set_robust_list(0x7f058957a9a0, 24) = 0
[pid   331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   331] memfd_create(0x200000000300, 0) = 6
[pid   331] futex(0x7f058966ee3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   312] <... futex resumed>)        = 0
[pid   331] <... futex resumed>)        = 1
[pid   331] futex(0x7f058966ee38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   322] <... close resumed>)        = 0
[   25.296272][  T320] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4894: group 0, free 4, pa_free 16
[   25.307154][  T313] EXT4-fs (loop0): Remounting filesystem read-only
[   25.312161][  T320] EXT4-fs (loop4): Remounting filesystem read-only
[   25.317281][  T313] ------------[ cut here ]------------
[   25.321377][  T320] EXT4-fs (loop4): pa ffff888117ccca80: logic 32, phys. 97, len 96
[   25.325813][  T313] kernel BUG at fs/ext4/mballoc.c:4867!
[   25.326038][  T313] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[   25.333909][  T320] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4894: group 0, 
[   25.339309][  T313] CPU: 1 PID: 313 Comm: syz-executor103 Not tainted syzkaller #0
[   25.339326][  T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   25.339333][  T313] RIP: 0010:ext4_mb_release_inode_pa+0xa73/0xa80
[   25.339378][  T313] Code: e2 07 80 c2 03 38 c2 0f 8c 2c fe ff ff 4c 89 f7 89 cb e8 80 24 c8 ff 89 d9 e9 1b fe ff ff e8 84 99 82 ff 0f 0b e8 7d 99 82 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90
[   25.339391][  T313] RSP: 0018:ffffc90000eb6c60 EFLAGS: 00010293
[   25.345437][  T320] free 17, pa_free 32
[   25.353819][  T313] RAX: ffffffff81eed4c3 RBX: 00000000000013ee RCX: ffff8881215bbcc0
[   25.353831][  T313] RDX: 0000000000000000 RSI: 0000000000000060 RDI: 0000000000000000
[   25.353840][  T313] RBP: ffffc90000eb6db0 R08: 0000000000000003 R09: 0000000000000004
[   25.353850][  T313] R10: dffffc0000000000 R11: fffff520001d6da8 R12: 1ffff920001d6da4
[   25.439210][  T313] R13: dffffc0000000000 R14: 0000000000000060 R15: 0000000000000000
[   25.447170][  T313] FS:  00007f058959b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   25.456083][  T313] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   25.462651][  T313] CR2: 0000559e6834cf60 CR3: 0000000122a65000 CR4: 00000000003506a0
[   25.470612][  T313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   25.478567][  T313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   25.486520][  T313] Call Trace:
[   25.489790][  T313]  <TASK>
[   25.492707][  T313]  ? __kasan_check_read+0x11/0x20
[   25.497734][  T313]  ? __kasan_check_write+0x14/0x20
[   25.502828][  T313]  ? ext4_mb_unload_buddy+0x1b0/0x1b0
[   25.508188][  T313]  ext4_mb_discard_group_preallocations+0xbdb/0xe20
[   25.514772][  T313]  ? ext4_mb_new_inode_pa+0x1310/0x1310
[   25.520310][  T313]  ext4_mb_discard_preallocations_should_retry+0x15a/0x5e0
[   25.527513][  T313]  ext4_mb_new_blocks+0x2f60/0x4070
[   25.532707][  T313]  ? __getblk_gfp+0x3b/0x7c0
[   25.537284][  T313]  ? __kasan_check_read+0x11/0x20
[   25.542295][  T313]  ? bh_uptodate_or_lock+0x3f/0x140
[   25.547491][  T313]  ? __cfi_ext4_mb_new_blocks+0x10/0x10
[   25.553021][  T313]  ext4_ind_map_blocks+0xdd1/0x2040
[   25.558214][  T313]  ? __cfi_ext4_ind_map_blocks+0x10/0x10
[   25.563828][  T313]  ? __kasan_check_write+0x14/0x20
[   25.568923][  T313]  ? downgrade_write+0x370/0x370
[   25.573853][  T313]  ? __cfi_down_read+0x10/0x10
[   25.578601][  T313]  ? ext4_es_lookup_extent+0x563/0x900
[   25.584053][  T313]  ext4_map_blocks+0x97a/0x1a80
[   25.588894][  T313]  ? alloc_page_buffers+0x1b3/0x3c0
[   25.594076][  T313]  ? create_empty_buffers+0x3d/0x4c0
[   25.599347][  T313]  ? __cfi_ext4_map_blocks+0x10/0x10
[   25.604620][  T313]  _ext4_get_block+0x1ea/0x540
[   25.609376][  T313]  ? ext4_get_block+0x50/0x50
[   25.614040][  T313]  ? kasan_save_alloc_info+0x1f/0x30
[   25.619308][  T313]  ? __kasan_slab_alloc+0x72/0x80
[   25.624323][  T313]  ? slab_post_alloc_hook+0x6d/0x2d0
[   25.629594][  T313]  ext4_get_block+0x39/0x50
[   25.634081][  T313]  ext4_block_write_begin+0x59b/0x1240
[   25.639523][  T313]  ? __cfi_ext4_get_block+0x10/0x10
[   25.644707][  T313]  ? ext4_print_free_blocks+0x390/0x390
[   25.650235][  T313]  ? __kasan_check_read+0x11/0x20
[   25.655254][  T313]  ? folio_wait_stable+0x6f/0x90
[   25.660187][  T313]  ext4_write_begin+0x614/0xfc0
[   25.665038][  T313]  ? __cfi_ext4_write_begin+0x10/0x10
[   25.670398][  T313]  generic_perform_write+0x32d/0x740
[   25.675672][  T313]  ? __cfi_generic_perform_write+0x10/0x10
[   25.681470][  T313]  ext4_buffered_write_iter+0x38f/0x690
[   25.687011][  T313]  ext4_file_write_iter+0x4b2/0x1540
[   25.692287][  T313]  ? __cfi___switch_to+0x10/0x10
[   25.697224][  T313]  ? avc_policy_seqno+0x1b/0x70
[   25.702078][  T313]  ? __cfi_ext4_file_write_iter+0x10/0x10
[   25.707803][  T313]  ? fsnotify_perm+0x67/0x5b0
[   25.712486][  T313]  ? security_file_permission+0x8a/0xb0
[   25.718035][  T313]  vfs_write+0x5ef/0xd00
[   25.722284][  T313]  ? __cfi_vfs_write+0x10/0x10
[   25.727043][  T313]  ? __cfi_mutex_lock+0x10/0x10
[   25.731894][  T313]  ? __fdget_pos+0x2cd/0x380
[   25.736479][  T313]  ? ksys_write+0x70/0x260
[   25.740893][  T313]  ksys_write+0x14a/0x260
[   25.745207][  T313]  ? __cfi_ksys_write+0x10/0x10
[   25.750045][  T313]  ? fpregs_restore_userregs+0x128/0x260
[   25.755668][  T313]  __x64_sys_write+0x7b/0x90
[   25.760245][  T313]  x64_sys_call+0x27b/0x9a0
[   25.764745][  T313]  do_syscall_64+0x4c/0xa0
[   25.769151][  T313]  ? clear_bhb_loop+0x30/0x80
[   25.773828][  T313]  ? clear_bhb_loop+0x30/0x80
[   25.778510][  T313]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   25.784398][  T313] RIP: 0033:0x7f05895c8239
[   25.788813][  T313] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[   25.808414][  T313] RSP: 002b:00007f058959b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   25.816851][  T313] RAX: ffffffffffffffda RBX: 00007f058966ee28 RCX: 00007f05895c8239
[   25.824812][  T313] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000005
[   25.832767][  T313] RBP: 00007f058966ee20 R08: 00007f058959bcdc R09: 0000000000000000
[   25.841069][  T313] R10: 00007f058959bcdc R11: 0000000000000246 R12: 00007f058966ee2c
[pid   311] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   311] futex(0x7f058966ee3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f058955a000
[pid   311] mprotect(0x7f058955b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f058957a990, parent_tid=0x7f058957a990, exit_signal=0, stack=0x7f058955a000, stack_size=0x20240, tls=0x7f058957a6c0} => {parent_tid=[332]}, 88) = 332
[pid   311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   311] futex(0x7f058966ee38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   311] futex(0x7f058966ee3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 332 attached
 <unfinished ...>
[pid   332] set_robust_list(0x7f058957a9a0, 24) = 0
[pid   332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   332] memfd_create(0x200000000300, 0) = 6
[pid   332] futex(0x7f058966ee3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   311] <... futex resumed>)        = 0
[pid   332] <... futex resumed>)        = 1
[   25.849023][  T313] R13: 0000000000000006 R14: 00007fff0234f910 R15: 00007fff0234f9f8
[   25.856983][  T313]  </TASK>
[   25.859986][  T313] Modules linked in:
[   25.863984][  T313] ---[ end trace 0000000000000000 ]---
[   25.869462][  T313] RIP: 0010:ext4_mb_release_inode_pa+0xa73/0xa80
[   25.875803][  T313] Code: e2 07 80 c2 03 38 c2 0f 8c 2c fe ff ff 4c 89 f7 89 cb e8 80 24 c8 ff 89 d9 e9 1b fe ff ff e8 84 99 82 ff 0f 0b e8 7d 99 82 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90
[   25.895438][  T313] RSP: 0018:ffffc90000eb6c60 EFLAGS: 00010293
[pid   332] futex(0x7f058966ee38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   322] close(4)                    = 0
[pid   322] mkdir("./file2", 0777)      = -1 EEXIST (File exists)
[   25.901524][  T313] RAX: ffffffff81eed4c3 RBX: 00000000000013ee RCX: ffff8881215bbcc0
[   25.909522][  T313] RDX: 0000000000000000 RSI: 0000000000000060 RDI: 0000000000000000
[   25.913589][  T322] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   25.917502][  T313] RBP: ffffc90000eb6db0 R08: 0000000000000003 R09: 0000000000000004
[   25.917518][  T313] R10: dffffc0000000000 R11: fffff520001d6da8 R12: 1ffff920001d6da4
[   25.917530][  T313] R13: dffffc0000000000 R14: 0000000000000060 R15: 0000000000000000
[   25.917539][  T313] FS:  00007f058959b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   25.917553][  T313] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   25.917564][  T313] CR2: 0000559e6834cf60 CR3: 0000000122a65000 CR4: 00000000003506a0
[   25.917578][  T313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   25.917587][  T313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   25.917599][  T313] Kernel panic - not syncing: Fatal exception
[   25.917821][  T313] Kernel Offset: disabled
[   26.001068][  T313] Rebooting in 86400 seconds..