./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor226387955 <...> Warning: Permanently added '10.128.0.146' (ECDSA) to the list of known hosts. execve("./syz-executor226387955", ["./syz-executor226387955"], 0x7ffc8c8cbff0 /* 10 vars */) = 0 brk(NULL) = 0x5555566d6000 brk(0x5555566d6c40) = 0x5555566d6c40 arch_prctl(ARCH_SET_FS, 0x5555566d6300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555566d65d0) = 304 set_robust_list(0x5555566d65e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7fc82bcdb190, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fc82bcdb860}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7fc82bcdb230, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc82bcdb860}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor226387955", 4096) = 27 brk(0x5555566f7c40) = 0x5555566f7c40 brk(0x5555566f8000) = 0x5555566f8000 mprotect(0x7fc82bd9c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d65d0) = 305 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d65d0) = 306 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d65d0) = 307 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d65d0) = 308 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d65d0) = 309 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d65d0) = 310 ./strace-static-x86_64: Process 310 attached [pid 310] set_robust_list(0x5555566d65e0, 24) = 0 ./strace-static-x86_64: Process 308 attached [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 308] set_robust_list(0x5555566d65e0, 24) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 310] <... openat resumed>) = 3 [pid 308] <... openat resumed>) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x5555566d65d0) = 311 [pid 310] <... clone resumed>, child_tidptr=0x5555566d65d0) = 312 ./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x5555566d65e0, 24) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d65d0) = 313 ./strace-static-x86_64: Process 311 attached [pid 311] set_robust_list(0x5555566d65e0, 24) = 0 [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 311] setpgid(0, 0) = 0 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 311] write(3, "1000", 4) = 4 [pid 311] close(3) = 0 [pid 311] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc82bcaa000 [pid 311] mprotect(0x7fc82bcab000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 311] clone(child_stack=0x7fc82bcca3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[314], tls=0x7fc82bcca700, child_tidptr=0x7fc82bcca9d0) = 314 [pid 311] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 313 attached ./strace-static-x86_64: Process 309 attached [pid 313] set_robust_list(0x5555566d65e0, 24./strace-static-x86_64: Process 312 attached ./strace-static-x86_64: Process 307 attached ./strace-static-x86_64: Process 305 attached [pid 312] set_robust_list(0x5555566d65e0, 24 [pid 309] set_robust_list(0x5555566d65e0, 24 [pid 307] set_robust_list(0x5555566d65e0, 24 [pid 312] <... set_robust_list resumed>) = 0 [pid 309] <... set_robust_list resumed>) = 0 [pid 307] <... set_robust_list resumed>) = 0 [pid 305] set_robust_list(0x5555566d65e0, 24 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 309] <... openat resumed>) = 3 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 305] <... set_robust_list resumed>) = 0 [pid 312] <... prctl resumed>) = 0 [pid 309] ioctl(3, LOOP_CLR_FD [pid 307] <... openat resumed>) = 3 [pid 312] setpgid(0, 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] close(3 [pid 312] <... setpgid resumed>) = 0 [pid 307] ioctl(3, LOOP_CLR_FD [pid 309] <... close resumed>) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] close(3 [pid 312] <... openat resumed>) = 3 [pid 309] <... clone resumed>, child_tidptr=0x5555566d65d0) = 315 [pid 307] <... close resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 312] write(3, "1000", 4 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] ioctl(3, LOOP_CLR_FD [pid 312] <... write resumed>) = 4 [pid 313] <... set_robust_list resumed>) = 0 [pid 312] close(3 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 312] <... close resumed>) = 0 [pid 307] <... clone resumed>, child_tidptr=0x5555566d65d0) = 316 [pid 305] close(3 [pid 312] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] <... close resumed>) = 0 [pid 312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 312] <... mmap resumed>) = 0x7fc82bcaa000 [pid 312] mprotect(0x7fc82bcab000, 131072, PROT_READ|PROT_WRITE [pid 305] <... clone resumed>, child_tidptr=0x5555566d65d0) = 317 [pid 312] <... mprotect resumed>) = 0 [ 21.275716][ T22] audit: type=1400 audit(1676028431.800:73): avc: denied { execmem } for pid=304 comm="syz-executor226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 312] clone(child_stack=0x7fc82bcca3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[318], tls=0x7fc82bcca700, child_tidptr=0x7fc82bcca9d0) = 318 ./strace-static-x86_64: Process 318 attached ./strace-static-x86_64: Process 317 attached ./strace-static-x86_64: Process 316 attached ./strace-static-x86_64: Process 315 attached ./strace-static-x86_64: Process 314 attached [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 312] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] set_robust_list(0x7fc82bcca9e0, 24 [pid 317] set_robust_list(0x5555566d65e0, 24 [pid 312] <... futex resumed>) = 0 [pid 318] <... set_robust_list resumed>) = 0 [pid 317] <... set_robust_list resumed>) = 0 [pid 312] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 318] memfd_create("syzkaller", 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 316] set_robust_list(0x5555566d65e0, 24 [pid 315] set_robust_list(0x5555566d65e0, 24 [pid 314] set_robust_list(0x7fc82bcca9e0, 24 [pid 313] <... prctl resumed>) = 0 [pid 318] <... memfd_create resumed>) = 3 [pid 317] <... prctl resumed>) = 0 [pid 316] <... set_robust_list resumed>) = 0 [pid 315] <... set_robust_list resumed>) = 0 [pid 314] <... set_robust_list resumed>) = 0 [pid 313] setpgid(0, 0 [pid 318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 317] setpgid(0, 0 [pid 318] <... mmap resumed>) = 0x7fc8238aa000 [pid 317] <... setpgid resumed>) = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 314] memfd_create("syzkaller", 0 [pid 313] <... setpgid resumed>) = 0 [pid 316] <... prctl resumed>) = 0 [pid 315] <... prctl resumed>) = 0 [pid 314] <... memfd_create resumed>) = 3 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 316] setpgid(0, 0 [pid 315] setpgid(0, 0 [pid 314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 313] <... openat resumed>) = 3 [pid 316] <... setpgid resumed>) = 0 [pid 315] <... setpgid resumed>) = 0 [pid 314] <... mmap resumed>) = 0x7fc8238aa000 [pid 313] write(3, "1000", 4 [pid 318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 313] <... write resumed>) = 4 [pid 317] <... openat resumed>) = 3 [pid 316] <... openat resumed>) = 3 [pid 315] <... openat resumed>) = 3 [pid 313] close(3 [pid 317] write(3, "1000", 4) = 4 [pid 317] close(3) = 0 [pid 316] write(3, "1000", 4 [pid 315] write(3, "1000", 4 [pid 313] <... close resumed>) = 0 [pid 317] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 315] <... write resumed>) = 4 [pid 313] <... futex resumed>) = 0 [pid 317] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 316] <... write resumed>) = 4 [pid 315] close(3 [pid 313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 317] <... mmap resumed>) = 0x7fc82bcaa000 [pid 316] close(3 [pid 315] <... close resumed>) = 0 [pid 313] <... mmap resumed>) = 0x7fc82bcaa000 [pid 317] mprotect(0x7fc82bcab000, 131072, PROT_READ|PROT_WRITE [pid 316] <... close resumed>) = 0 [pid 315] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] mprotect(0x7fc82bcab000, 131072, PROT_READ|PROT_WRITE [pid 317] <... mprotect resumed>) = 0 [pid 316] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... futex resumed>) = 0 [pid 313] <... mprotect resumed>) = 0 [pid 317] clone(child_stack=0x7fc82bcca3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 316] <... futex resumed>) = 0 [pid 315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 313] clone(child_stack=0x7fc82bcca3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 315] <... mmap resumed>) = 0x7fc82bcaa000 [pid 317] <... clone resumed>, parent_tid=[325], tls=0x7fc82bcca700, child_tidptr=0x7fc82bcca9d0) = 325 [pid 316] <... mmap resumed>) = 0x7fc82bcaa000 [pid 315] mprotect(0x7fc82bcab000, 131072, PROT_READ|PROT_WRITE [pid 313] <... clone resumed>, parent_tid=[326], tls=0x7fc82bcca700, child_tidptr=0x7fc82bcca9d0) = 326 [pid 317] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] mprotect(0x7fc82bcab000, 131072, PROT_READ|PROT_WRITE [pid 315] <... mprotect resumed>) = 0 [pid 313] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 316] <... mprotect resumed>) = 0 [pid 315] clone(child_stack=0x7fc82bcca3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 313] <... futex resumed>) = 0 [pid 318] <... write resumed>) = 1048576 [pid 317] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 316] clone(child_stack=0x7fc82bcca3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 313] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 315] <... clone resumed>, parent_tid=[327], tls=0x7fc82bcca700, child_tidptr=0x7fc82bcca9d0) = 327 [pid 316] <... clone resumed>, parent_tid=[328], tls=0x7fc82bcca700, child_tidptr=0x7fc82bcca9d0) = 328 [pid 315] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... futex resumed>) = 0 [pid 316] <... futex resumed>) = 0 [pid 315] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 316] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 314] <... write resumed>) = 1048576 [pid 318] munmap(0x7fc8238aa000, 1048576) = 0 ./strace-static-x86_64: Process 327 attached ./strace-static-x86_64: Process 326 attached ./strace-static-x86_64: Process 325 attached [pid 318] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 327] set_robust_list(0x7fc82bcca9e0, 24 [pid 326] set_robust_list(0x7fc82bcca9e0, 24 [pid 325] set_robust_list(0x7fc82bcca9e0, 24 [pid 318] <... openat resumed>) = 4 [pid 327] <... set_robust_list resumed>) = 0 [pid 326] <... set_robust_list resumed>) = 0 [pid 325] <... set_robust_list resumed>) = 0 [pid 318] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x7fc82bcca9e0, 24) = 0 [pid 328] memfd_create("syzkaller", 0 [pid 314] munmap(0x7fc8238aa000, 1048576) = 0 [pid 328] <... memfd_create resumed>) = 3 [pid 328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc8238aa000 [pid 314] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 314] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 314] close(3) = 0 [ 21.311884][ T22] audit: type=1400 audit(1676028431.810:74): avc: denied { read write } for pid=310 comm="syz-executor226" name="loop5" dev="devtmpfs" ino=9559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 314] mkdir("./file0", 0777) = 0 [pid 314] mount("/dev/loop3", "./file0", "ext4", MS_SYNCHRONOUS|MS_NOATIME|MS_NODIRATIME|MS_REC, ",errors=continue" [pid 327] memfd_create("syzkaller", 0 [pid 326] memfd_create("syzkaller", 0 [pid 325] memfd_create("syzkaller", 0 [pid 327] <... memfd_create resumed>) = 3 [pid 326] <... memfd_create resumed>) = 3 [pid 325] <... memfd_create resumed>) = 3 [pid 327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 327] <... mmap resumed>) = 0x7fc8238aa000 [pid 326] <... mmap resumed>) = 0x7fc8238aa000 [pid 325] <... mmap resumed>) = 0x7fc8238aa000 [pid 327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 327] <... write resumed>) = 1048576 [pid 326] <... write resumed>) = 1048576 [pid 328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 318] <... ioctl resumed>) = 0 [pid 318] close(3) = 0 [pid 318] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 318] mount("/dev/loop5", "./file0", "ext4", MS_SYNCHRONOUS|MS_NOATIME|MS_NODIRATIME|MS_REC, ",errors=continue" [pid 327] munmap(0x7fc8238aa000, 1048576) = 0 [pid 325] <... write resumed>) = 1048576 [pid 327] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 325] munmap(0x7fc8238aa000, 1048576 [pid 327] ioctl(4, LOOP_SET_FD, 3 [pid 325] <... munmap resumed>) = 0 [pid 325] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 326] munmap(0x7fc8238aa000, 1048576 [pid 325] <... openat resumed>) = 4 [pid 326] <... munmap resumed>) = 0 [pid 325] ioctl(4, LOOP_SET_FD, 3 [pid 326] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 325] <... ioctl resumed>) = 0 [pid 325] close(3) = 0 [pid 325] mkdir("./file0", 0777 [pid 326] <... openat resumed>) = 4 [pid 325] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 326] ioctl(4, LOOP_SET_FD, 3 [pid 325] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NOATIME|MS_NODIRATIME|MS_REC, ",errors=continue" [pid 327] <... ioctl resumed>) = 0 [pid 327] close(3 [pid 328] <... write resumed>) = 1048576 [ 21.360735][ T22] audit: type=1400 audit(1676028431.810:75): avc: denied { open } for pid=310 comm="syz-executor226" path="/dev/loop5" dev="devtmpfs" ino=9559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.392201][ T22] audit: type=1400 audit(1676028431.810:76): avc: denied { ioctl } for pid=308 comm="syz-executor226" path="/dev/loop3" dev="devtmpfs" ino=9461 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 328] munmap(0x7fc8238aa000, 1048576) = 0 [pid 328] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 328] ioctl(4, LOOP_SET_FD, 3 [pid 327] <... close resumed>) = 0 [pid 326] <... ioctl resumed>) = 0 [pid 328] <... ioctl resumed>) = 0 [pid 328] close(3) = 0 [pid 328] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 328] mount("/dev/loop2", "./file0", "ext4", MS_SYNCHRONOUS|MS_NOATIME|MS_NODIRATIME|MS_REC, ",errors=continue" [pid 318] <... mount resumed>) = 0 [pid 318] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 318] chdir("./file0") = 0 [pid 318] ioctl(4, LOOP_CLR_FD [pid 327] mkdir("./file0", 0777 [pid 326] close(3 [pid 327] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 326] <... close resumed>) = 0 [pid 318] <... ioctl resumed>) = 0 [pid 318] close(4 [pid 327] mount("/dev/loop4", "./file0", "ext4", MS_SYNCHRONOUS|MS_NOATIME|MS_NODIRATIME|MS_REC, ",errors=continue" [pid 326] mkdir("./file0", 0777 [pid 318] <... close resumed>) = 0 [pid 318] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 312] <... futex resumed>) = 0 [pid 318] openat(AT_FDCWD, "blkio.throttle.io_service_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 312] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 318] <... openat resumed>) = 4 [pid 312] <... futex resumed>) = 0 [pid 318] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] mount("/dev/loop1", "./file0", "ext4", MS_SYNCHRONOUS|MS_NOATIME|MS_NODIRATIME|MS_REC, ",errors=continue" [pid 318] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 318] write(4, "\x73\x79\x73\x74\x65\x6d\x5f\x75\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x68\x77\x63\x6c\x6f\x63\x6b\x5f\x65\x78\x65\x63\x5f\x74\x3a\x73\x30\x00", 36 [pid 312] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... write resumed>) = 36 [pid 312] <... futex resumed>) = 0 [pid 318] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 318] mmap(0x20000000, 11755520, PROT_WRITE|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 312] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... mmap resumed>) = 0x20000000 [pid 312] <... futex resumed>) = 0 [pid 318] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] <... futex resumed>) = 0 [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 318] madvise(0x20000000, 6291458, MADV_REMOVE [ 21.437447][ T318] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 21.439319][ T22] audit: type=1400 audit(1676028431.900:77): avc: denied { mounton } for pid=311 comm="syz-executor226" path="/root/file0" dev="sda1" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 21.452373][ T314] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 312] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] <... madvise resumed>) = -1 ENOSPC (No space left on device) [pid 318] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 312] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] <... futex resumed>) = 1 [pid 318] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000a0} --- [pid 312] <... futex resumed>) = ? [pid 318] +++ killed by SIGBUS +++ [pid 312] +++ killed by SIGBUS +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=312, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 325] <... mount resumed>) = 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = 0 [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d65d0) = 347 [pid 325] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 325] chdir("./file0") = 0 [pid 325] ioctl(4, LOOP_CLR_FD) = 0 [ 21.492621][ T318] EXT4-fs error (device loop5): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.502145][ T326] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 21.510599][ T325] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 21.518211][ T327] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 325] close(4) = 0 [pid 325] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] openat(AT_FDCWD, "blkio.throttle.io_service_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 325] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] write(4, "\x73\x79\x73\x74\x65\x6d\x5f\x75\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x68\x77\x63\x6c\x6f\x63\x6b\x5f\x65\x78\x65\x63\x5f\x74\x3a\x73\x30\x00", 36) = 36 [pid 325] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] mmap(0x20000000, 11755520, PROT_WRITE|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x20000000 [pid 325] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] madvise(0x20000000, 6291458, MADV_REMOVE [pid 328] <... mount resumed>) = 0 [pid 327] <... mount resumed>) = 0 [pid 326] <... mount resumed>) = 0 ./strace-static-x86_64: Process 347 attached [pid 347] set_robust_list(0x5555566d65e0, 24) = 0 [pid 347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 347] setpgid(0, 0) = 0 [pid 347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 347] write(3, "1000", 4) = 4 [pid 347] close(3) = 0 [pid 347] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc82bcaa000 [pid 347] mprotect(0x7fc82bcab000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 347] clone(child_stack=0x7fc82bcca3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[348], tls=0x7fc82bcca700, child_tidptr=0x7fc82bcca9d0) = 348 [pid 347] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 348 attached [pid 348] set_robust_list(0x7fc82bcca9e0, 24) = 0 [pid 348] memfd_create("syzkaller", 0) = 3 [pid 348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc8238aa000 [pid 314] <... mount resumed>) = 0 [pid 348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 314] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 314] chdir("./file0") = 0 [pid 314] ioctl(4, LOOP_CLR_FD) = 0 [pid 314] close(4 [pid 328] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 314] <... close resumed>) = 0 [pid 314] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... openat resumed>) = 3 [pid 326] <... openat resumed>) = 3 [pid 328] <... openat resumed>) = 3 [pid 326] chdir("./file0" [pid 327] chdir("./file0" [pid 328] chdir("./file0" [pid 311] <... futex resumed>) = 0 [pid 311] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] <... futex resumed>) = 1 [ 21.536057][ T328] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 21.545306][ T325] EXT4-fs error (device loop0): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.551552][ T22] audit: type=1400 audit(1676028431.980:78): avc: denied { mount } for pid=312 comm="syz-executor226" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [pid 314] openat(AT_FDCWD, "blkio.throttle.io_service_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 328] <... chdir resumed>) = 0 [pid 327] <... chdir resumed>) = 0 [pid 326] <... chdir resumed>) = 0 [pid 314] <... openat resumed>) = 4 [pid 314] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 0 [pid 311] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] <... futex resumed>) = 1 [pid 314] write(4, "\x73\x79\x73\x74\x65\x6d\x5f\x75\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x68\x77\x63\x6c\x6f\x63\x6b\x5f\x65\x78\x65\x63\x5f\x74\x3a\x73\x30\x00", 36) = 36 [pid 314] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 0 [pid 311] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] <... futex resumed>) = 1 [pid 314] mmap(0x20000000, 11755520, PROT_WRITE|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x20000000 [pid 317] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 317] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 314] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 317] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 311] <... futex resumed>) = 0 [pid 317] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 311] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 311] <... futex resumed>) = 0 [pid 317] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 311] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] futex(0x7fc82bda26fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc823989000 [pid 317] mprotect(0x7fc82398a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 317] clone(child_stack=0x7fc8239a93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[349], tls=0x7fc8239a9700, child_tidptr=0x7fc8239a99d0) = 349 [pid 317] futex(0x7fc82bda26f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7fc82bda26fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] <... futex resumed>) = 1 [ 21.590585][ T22] audit: type=1400 audit(1676028432.010:79): avc: denied { write } for pid=312 comm="syz-executor226" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.596744][ T314] EXT4-fs error (device loop3): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 314] madvise(0x20000000, 6291458, MADV_REMOVE [pid 328] ioctl(4, LOOP_CLR_FD [pid 327] ioctl(4, LOOP_CLR_FD [pid 326] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 349 attached [pid 349] set_robust_list(0x7fc8239a99e0, 24) = 0 [pid 348] <... write resumed>) = 1048576 [pid 348] munmap(0x7fc8238aa000, 1048576) = 0 [pid 348] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 348] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 348] ioctl(4, LOOP_CLR_FD) = 0 [pid 349] write(4, 0x20000080, 36 [pid 328] <... ioctl resumed>) = 0 [pid 327] <... ioctl resumed>) = 0 [pid 326] <... ioctl resumed>) = 0 [pid 317] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 311] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 311] futex(0x7fc82bda26fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc823989000 [pid 311] mprotect(0x7fc82398a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 311] clone(child_stack=0x7fc8239a93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[350], tls=0x7fc8239a9700, child_tidptr=0x7fc8239a99d0) = 350 [pid 311] futex(0x7fc82bda26f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7fc82bda26fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 348] close(4) = 0 [pid 348] close(3 [pid 325] <... madvise resumed>) = -1 ENOSPC (No space left on device) [pid 325] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7fc82bda26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] <... close resumed>) = 0 ./strace-static-x86_64: Process 350 attached [pid 350] set_robust_list(0x7fc8239a99e0, 24) = 0 [pid 348] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [pid 348] openat(AT_FDCWD, "blkio.throttle.io_service_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 348] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [pid 348] write(3, "\x73\x79\x73\x74\x65\x6d\x5f\x75\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x68\x77\x63\x6c\x6f\x63\x6b\x5f\x65\x78\x65\x63\x5f\x74\x3a\x73\x30\x00", 36) = 36 [pid 348] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [pid 348] mmap(0x20000000, 11755520, PROT_WRITE|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 3, 0) = 0x20000000 [pid 348] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [ 21.613251][ T22] audit: type=1400 audit(1676028432.010:80): avc: denied { add_name } for pid=312 comm="syz-executor226" name="blkio.throttle.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.635302][ T349] ------------[ cut here ]------------ [ 21.650747][ T22] audit: type=1400 audit(1676028432.010:81): avc: denied { create } for pid=312 comm="syz-executor226" name="blkio.throttle.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 21.655582][ T349] kernel BUG at fs/ext4/inode.c:2851! [ 21.683197][ T349] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [pid 348] madvise(0x20000000, 6291458, MADV_REMOVE) = 0 [pid 328] close(4 [pid 327] close(4 [pid 326] close(4 [pid 314] <... madvise resumed>) = -1 ENOSPC (No space left on device) [pid 348] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... close resumed>) = 0 [pid 327] <... close resumed>) = 0 [pid 326] <... close resumed>) = 0 [pid 348] <... futex resumed>) = 1 [pid 328] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] futex(0x7fc82bda26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] <... futex resumed>) = 1 [pid 327] <... futex resumed>) = 1 [pid 326] <... futex resumed>) = 1 [pid 316] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = 0 [pid 328] openat(AT_FDCWD, "blkio.throttle.io_service_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 327] openat(AT_FDCWD, "blkio.throttle.io_service_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 326] openat(AT_FDCWD, "blkio.throttle.io_service_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 316] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = 0 [pid 316] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7fc82bda26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 350] write(4, 0x20000080, 36 [pid 328] <... openat resumed>) = 4 [pid 327] <... openat resumed>) = 4 [pid 326] <... openat resumed>) = 4 [pid 350] <... write resumed>) = -1 EFAULT (Bad address) [pid 328] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] futex(0x7fc82bda26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = 1 [pid 327] <... futex resumed>) = 1 [pid 326] <... futex resumed>) = 1 [pid 316] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = 0 [pid 350] <... futex resumed>) = 1 [pid 328] write(4, "\x73\x79\x73\x74\x65\x6d\x5f\x75\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x68\x77\x63\x6c\x6f\x63\x6b\x5f\x65\x78\x65\x63\x5f\x74\x3a\x73\x30\x00", 36 [pid 327] write(4, "\x73\x79\x73\x74\x65\x6d\x5f\x75\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x68\x77\x63\x6c\x6f\x63\x6b\x5f\x65\x78\x65\x63\x5f\x74\x3a\x73\x30\x00", 36 [pid 326] write(4, "\x73\x79\x73\x74\x65\x6d\x5f\x75\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x68\x77\x63\x6c\x6f\x63\x6b\x5f\x65\x78\x65\x63\x5f\x74\x3a\x73\x30\x00", 36 [pid 316] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] futex(0x7fc82bda26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 316] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = 0 [pid 316] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 21.684428][ T22] audit: type=1400 audit(1676028432.010:82): avc: denied { mounton } for pid=315 comm="syz-executor226" path="/root/file0" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.689788][ T349] CPU: 0 PID: 349 Comm: syz-executor226 Not tainted 5.4.225-syzkaller #0 [ 21.720969][ T349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 21.731128][ T349] RIP: 0010:ext4_writepages+0x3a16/0x3a40 [pid 313] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 0 [pid 347] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = 0 [pid 347] <... futex resumed>) = 1 [pid 348] write(3, 0x20000080, 36 [pid 347] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... write resumed>) = 36 [pid 348] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 347] <... futex resumed>) = 0 [pid 348] futex(0x7fc82bda26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 347] exit_group(0 [pid 348] <... futex resumed>) = ? [pid 347] <... exit_group resumed>) = ? [pid 348] +++ exited with 0 +++ [pid 347] +++ exited with 0 +++ [pid 311] <... futex resumed>) = 0 [pid 311] exit_group(0 [pid 350] <... futex resumed>) = ? [pid 314] <... futex resumed>) = ? [pid 311] <... exit_group resumed>) = ? [pid 350] +++ exited with 0 +++ [pid 314] +++ exited with 0 +++ [pid 311] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=311, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = 0 [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d65d0) = 351 [pid 316] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 316] futex(0x7fc82bda26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 316] <... futex resumed>) = 0 [pid 315] futex(0x7fc82bda26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 315] <... futex resumed>) = 0 [pid 313] futex(0x7fc82bda26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... mmap resumed>) = 0x7fc823989000 [pid 315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 313] <... futex resumed>) = 0 [pid 316] mprotect(0x7fc82398a000, 131072, PROT_READ|PROT_WRITE [pid 315] <... mmap resumed>) = 0x7fc823989000 [pid 313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 316] <... mprotect resumed>) = 0 [pid 315] mprotect(0x7fc82398a000, 131072, PROT_READ|PROT_WRITE [pid 313] <... mmap resumed>) = 0x7fc823989000 [pid 316] clone(child_stack=0x7fc8239a93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 315] <... mprotect resumed>) = 0 [pid 313] mprotect(0x7fc82398a000, 131072, PROT_READ|PROT_WRITE [pid 315] clone(child_stack=0x7fc8239a93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 313] <... mprotect resumed>) = 0 [pid 316] <... clone resumed>, parent_tid=[352], tls=0x7fc8239a9700, child_tidptr=0x7fc8239a99d0) = 352 [pid 313] clone(child_stack=0x7fc8239a93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 316] futex(0x7fc82bda26f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... clone resumed>, parent_tid=[353], tls=0x7fc8239a9700, child_tidptr=0x7fc8239a99d0) = 353 [pid 316] <... futex resumed>) = 0 [pid 315] futex(0x7fc82bda26f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... clone resumed>, parent_tid=[354], tls=0x7fc8239a9700, child_tidptr=0x7fc8239a99d0) = 354 [pid 316] futex(0x7fc82bda26fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 0 [pid 313] futex(0x7fc82bda26f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fc82bda26fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... futex resumed>) = 0 [pid 313] futex(0x7fc82bda26fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 351 attached [pid 351] set_robust_list(0x5555566d65e0, 24) = 0 [pid 351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 351] setpgid(0, 0) = 0 [ 21.736845][ T349] Code: 7a a2 ff 31 ff 89 de e8 d8 7a a2 ff 45 84 f6 75 2e e8 be 78 a2 ff 49 bd 00 00 00 00 00 fc ff df e9 6e f9 ff ff e8 aa 78 a2 ff <0f> 0b e8 a3 78 a2 ff 0f 0b e8 9c 78 a2 ff e8 d7 88 3f ff eb 8f e8 [ 21.756446][ T349] RSP: 0018:ffff8881dbd7f440 EFLAGS: 00010293 [ 21.762509][ T349] RAX: ffffffff81c0bdd6 RBX: 0000010000000000 RCX: ffff8881dc2abf00 [ 21.770473][ T349] RDX: 0000000000000000 RSI: 0000010000000000 RDI: 0000000000000000 [ 21.778440][ T349] RBP: ffff8881dbd7f830 R08: ffffffff81c08bbf R09: ffffed103cd73669 [pid 351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 328] <... write resumed>) = 36 [pid 327] <... write resumed>) = 36 [pid 328] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=347, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 328] <... futex resumed>) = 0 [pid 327] <... futex resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 328] futex(0x7fc82bda26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 327] futex(0x7fc82bda26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... restart_syscall resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = 0 [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d65d0) = 355 [pid 351] <... openat resumed>) = 3 [pid 351] write(3, "1000", 4) = 4 [pid 351] close(3) = 0 [pid 351] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc82bcaa000 [pid 351] mprotect(0x7fc82bcab000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 351] clone(child_stack=0x7fc82bcca3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[356], tls=0x7fc82bcca700, child_tidptr=0x7fc82bcca9d0) = 356 [pid 351] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 353 attached ./strace-static-x86_64: Process 354 attached [pid 353] set_robust_list(0x7fc8239a99e0, 24 [pid 354] set_robust_list(0x7fc8239a99e0, 24) = 0 [pid 353] <... set_robust_list resumed>) = 0 [pid 354] mmap(0x20000000, 11755520, PROT_WRITE|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 353] mmap(0x20000000, 11755520, PROT_WRITE|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0./strace-static-x86_64: Process 352 attached [pid 352] set_robust_list(0x7fc8239a99e0, 24) = 0 [pid 352] mmap(0x20000000, 11755520, PROT_WRITE|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 316] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 316] futex(0x7fc82bda26fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 316] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 328] <... futex resumed>) = 0 [pid 327] <... futex resumed>) = 0 [pid 316] <... futex resumed>) = 1 [pid 315] <... futex resumed>) = 1 [pid 313] futex(0x7fc82bda270c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] madvise(0x20000000, 6291458, MADV_REMOVE [pid 327] madvise(0x20000000, 6291458, MADV_REMOVE [pid 316] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... futex resumed>) = 0 [pid 313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc823968000 [pid 313] mprotect(0x7fc823969000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 313] clone(child_stack=0x7fc8239883f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[357], tls=0x7fc823988700, child_tidptr=0x7fc8239889d0) = 357 [pid 313] futex(0x7fc82bda2708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] futex(0x7fc82bda270c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 357 attached [pid 357] set_robust_list(0x7fc8239889e0, 24) = 0 [ 21.780818][ T326] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 21.786404][ T349] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881e6b9b3f0 [ 21.786416][ T349] R13: dffffc0000000000 R14: 0000010410000000 R15: ffff8881dbd7f700 [ 21.814687][ T349] FS: 00007fc8239a9700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 21.823612][ T349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.830187][ T349] CR2: 00000000200000a0 CR3: 00000001dd595000 CR4: 00000000003406f0 [pid 357] madvise(0x20000000, 6291458, MADV_REMOVE./strace-static-x86_64: Process 355 attached [pid 355] set_robust_list(0x5555566d65e0, 24) = 0 [pid 355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 355] setpgid(0, 0) = 0 [pid 355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 355] write(3, "1000", 4) = 4 [pid 355] close(3) = 0 [pid 355] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc82bcaa000 [pid 355] mprotect(0x7fc82bcab000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 355] clone(child_stack=0x7fc82bcca3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[358], tls=0x7fc82bcca700, child_tidptr=0x7fc82bcca9d0) = 358 [pid 355] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 355] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 316] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 313] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 316] futex(0x7fc82bda270c, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fc82bda270c, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] futex(0x7fc82bda271c, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = 0 [pid 316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 316] <... mmap resumed>) = 0x7fc823968000 [pid 315] <... mmap resumed>) = 0x7fc823968000 [pid 313] <... mmap resumed>) = 0x7fc823947000 [pid 316] mprotect(0x7fc823969000, 131072, PROT_READ|PROT_WRITE [pid 315] mprotect(0x7fc823969000, 131072, PROT_READ|PROT_WRITE [pid 313] mprotect(0x7fc823948000, 131072, PROT_READ|PROT_WRITE [pid 316] <... mprotect resumed>) = 0 [pid 315] <... mprotect resumed>) = 0 [pid 313] <... mprotect resumed>) = 0 [pid 316] clone(child_stack=0x7fc8239883f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 315] clone(child_stack=0x7fc8239883f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 313] clone(child_stack=0x7fc8239673f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 316] <... clone resumed>, parent_tid=[360], tls=0x7fc823988700, child_tidptr=0x7fc8239889d0) = 360 [pid 315] <... clone resumed>, parent_tid=[361], tls=0x7fc823988700, child_tidptr=0x7fc8239889d0) = 361 [pid 313] <... clone resumed>, parent_tid=[359], tls=0x7fc823967700, child_tidptr=0x7fc8239679d0) = 359 [pid 316] futex(0x7fc82bda2708, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] futex(0x7fc82bda2708, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] futex(0x7fc82bda2718, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 315] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = 0 [pid 316] futex(0x7fc82bda270c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] futex(0x7fc82bda270c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] futex(0x7fc82bda271c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 359 attached ./strace-static-x86_64: Process 360 attached [pid 360] set_robust_list(0x7fc8239889e0, 24 [pid 359] set_robust_list(0x7fc8239679e0, 24 [pid 360] <... set_robust_list resumed>) = 0 [pid 359] <... set_robust_list resumed>) = 0 [ 21.833018][ T326] EXT4-fs (loop3): This should not happen!! Data will be lost [ 21.833018][ T326] [ 21.838148][ T349] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.838154][ T349] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.838157][ T349] Call Trace: [ 21.838176][ T349] ? ext4_get_group_desc+0x253/0x2a0 [ 21.849370][ T326] EXT4-fs (loop3): Total free blocks count 0 [ 21.855735][ T349] ? mark_buffer_dirty+0x1cc/0x3b0 [ 21.855748][ T349] ? __ext4_handle_dirty_metadata+0x279/0x610 ./strace-static-x86_64: Process 356 attached [pid 356] set_robust_list(0x7fc82bcca9e0, 24) = 0 [pid 356] memfd_create("syzkaller", 0) = 3 [pid 356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc8238aa000 [pid 356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 316] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 313] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 21.855760][ T349] ? ext4_mark_iloc_dirty+0x2375/0x3560 [ 21.855774][ T349] ? ext4_readpage+0x2e0/0x2e0 [ 21.855789][ T349] ? ext4_reserve_inode_write+0x19c/0x220 [ 21.873992][ T326] EXT4-fs (loop3): Free/Dirty block details [ 21.878250][ T349] ? ext4_mark_inode_dirty+0x4e7/0x7a0 [ 21.878262][ T349] ? ext4_blocks_for_truncate+0x210/0x210 [ 21.878273][ T349] ? ext4_write_inline_data_end+0x651/0x820 [ 21.878289][ T349] ? iov_iter_advance+0x258/0xb20 [ 21.878300][ T349] ? ext4_readpage+0x2e0/0x2e0 [ 21.878312][ T349] do_writepages+0x12b/0x270 [pid 356] <... write resumed>) = 1048576 [pid 356] munmap(0x7fc8238aa000, 1048576) = 0 [pid 356] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 356] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 356] ioctl(4, LOOP_CLR_FD) = 0 [pid 354] <... mmap resumed>) = 0x20000000 [pid 353] <... mmap resumed>) = 0x20000000 [pid 352] <... mmap resumed>) = 0x20000000 [pid 359] write(4, 0x20000080, 36 [pid 357] <... madvise resumed>) = 0 [pid 353] futex(0x7fc82bda26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] futex(0x7fc82bda26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... madvise resumed>) = 0 [pid 327] <... madvise resumed>) = 0 [pid 360] write(4, 0x20000080, 36 [pid 357] futex(0x7fc82bda270c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] futex(0x7fc82bda26fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] <... futex resumed>) = 0 [pid 352] <... futex resumed>) = 0 [pid 328] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... futex resumed>) = 0 [pid 354] <... futex resumed>) = 0 [pid 353] futex(0x7fc82bda26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 352] futex(0x7fc82bda26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] <... futex resumed>) = 0 [pid 327] <... futex resumed>) = 0 [pid 357] futex(0x7fc82bda2708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] futex(0x7fc82bda26f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7fc82bda26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 327] futex(0x7fc82bda26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 356] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 356] close(4) = 0 [pid 356] close(3) = 0 [pid 356] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 356] <... futex resumed>) = 1 [pid 356] openat(AT_FDCWD, "blkio.throttle.io_service_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 356] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 351] <... futex resumed>) = 0 [pid 356] futex(0x7fc82bda26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 351] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 351] <... futex resumed>) = 0 [pid 356] write(3, "\x73\x79\x73\x74\x65\x6d\x5f\x75\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x68\x77\x63\x6c\x6f\x63\x6b\x5f\x65\x78\x65\x63\x5f\x74\x3a\x73\x30\x00", 36 [pid 351] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 356] <... write resumed>) = 36 [pid 326] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... futex resumed>) = 0 [pid 356] <... futex resumed>) = 1 [pid 351] <... futex resumed>) = 0 [pid 326] futex(0x7fc82bda26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 356] futex(0x7fc82bda26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 351] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 351] <... futex resumed>) = 0 [ 21.878326][ T349] ? debug_smp_processor_id+0x20/0x20 [ 21.878337][ T349] ? __writepage+0x110/0x110 [ 21.878354][ T349] ? balance_dirty_pages_ratelimited+0x36c/0x530 [ 21.891821][ T326] EXT4-fs (loop3): free_blocks=2415919104 [ 21.895024][ T349] file_write_and_wait_range+0x341/0x410 [ 21.895042][ T349] ? __filemap_set_wb_err+0x190/0x190 [ 21.900521][ T326] EXT4-fs (loop3): dirty_blocks=16 [ 21.905477][ T349] ? grab_cache_page_write_begin+0x90/0x90 [ 21.905488][ T349] ? file_remove_privs+0x640/0x640 [pid 356] mmap(0x20000000, 11755520, PROT_WRITE|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 3, 0 [pid 351] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 356] <... mmap resumed>) = 0x20000000 [pid 356] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 351] <... futex resumed>) = 0 [pid 356] madvise(0x20000000, 6291458, MADV_REMOVE [pid 351] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 356] <... madvise resumed>) = 0 [pid 356] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 351] <... futex resumed>) = 0 [pid 356] write(3, 0x20000080, 36 [pid 351] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... write resumed>) = 36 [pid 351] <... futex resumed>) = 0 [pid 356] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 356] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 356] futex(0x7fc82bda26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 351] exit_group(0 [pid 356] <... futex resumed>) = ? [pid 351] <... exit_group resumed>) = ? [pid 356] +++ exited with 0 +++ [pid 351] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=351, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = 0 [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d65d0) = 362 ./strace-static-x86_64: Process 362 attached [pid 362] set_robust_list(0x5555566d65e0, 24) = 0 [pid 362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 362] setpgid(0, 0) = 0 [pid 362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 362] write(3, "1000", 4) = 4 [pid 362] close(3) = 0 [pid 362] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc82bcaa000 [pid 362] mprotect(0x7fc82bcab000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 362] clone(child_stack=0x7fc82bcca3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[363], tls=0x7fc82bcca700, child_tidptr=0x7fc82bcca9d0) = 363 [pid 362] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 363 attached [pid 363] set_robust_list(0x7fc82bcca9e0, 24) = 0 [pid 363] memfd_create("syzkaller", 0) = 3 [pid 363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc8238aa000 [pid 359] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 359] futex(0x7fc82bda271c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] exit_group(0 [pid 357] <... futex resumed>) = ? [pid 354] <... futex resumed>) = ? [pid 326] <... futex resumed>) = ? [pid 313] <... exit_group resumed>) = ? [pid 359] +++ exited with 0 +++ [pid 357] +++ exited with 0 +++ [pid 354] +++ exited with 0 +++ [pid 326] +++ exited with 0 +++ [pid 313] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- [ 21.905504][ T349] __generic_file_fsync+0x6e/0x190 [ 21.912027][ T326] EXT4-fs (loop3): Block reservation details [ 21.916814][ T349] ext4_sync_file+0x251/0xcc0 [ 21.916831][ T349] ext4_file_write_iter+0xa03/0x10e0 [ 21.934807][ T326] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 21.938149][ T349] ? ext4_file_read_iter+0x140/0x140 [ 21.938165][ T349] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 21.955165][ T360] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [pid 360] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 360] futex(0x7fc82bda270c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] exit_group(0 [pid 352] <... futex resumed>) = ? [pid 328] <... futex resumed>) = ? [pid 316] <... exit_group resumed>) = ? [pid 352] +++ exited with 0 +++ [pid 328] +++ exited with 0 +++ [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = 0 [pid 306] close(3 [pid 363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 360] +++ exited with 0 +++ [pid 316] +++ exited with 0 +++ [pid 306] <... close resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d65d0) = 364 ./strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x5555566d65e0, 24) = 0 [pid 364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 364] setpgid(0, 0) = 0 [pid 364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 364] write(3, "1000", 4) = 4 [pid 364] close(3) = 0 [pid 364] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc82bcaa000 [pid 364] mprotect(0x7fc82bcab000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 364] clone(child_stack=0x7fc82bcca3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[365], tls=0x7fc82bcca700, child_tidptr=0x7fc82bcca9d0) = 365 [pid 364] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 363] <... write resumed>) = 1048576 [pid 363] munmap(0x7fc8238aa000, 1048576) = 0 ./strace-static-x86_64: Process 365 attached [pid 365] set_robust_list(0x7fc82bcca9e0, 24 [pid 363] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 365] <... set_robust_list resumed>) = 0 [pid 363] <... openat resumed>) = 4 [pid 365] memfd_create("syzkaller", 0 [pid 363] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 363] ioctl(4, LOOP_CLR_FD [pid 365] <... memfd_create resumed>) = 3 [pid 363] <... ioctl resumed>) = 0 [pid 365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc8238aa000 [pid 363] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [ 21.958983][ T349] ? _raw_spin_lock_irqsave+0x210/0x210 [ 21.958995][ T349] ? cgroup_update_frozen+0x157/0xab0 [ 21.959011][ T349] ? cgroup_update_frozen+0x157/0xab0 [ 22.017023][ T360] EXT4-fs (loop3): This should not happen!! Data will be lost [ 22.017023][ T360] [ 22.018615][ T349] ? cgroup_leave_frozen+0x13c/0x290 [ 22.018626][ T349] ? iov_iter_init+0x82/0x160 [ 22.018639][ T349] __vfs_write+0x5d3/0x750 [ 22.018653][ T349] ? __kernel_write+0x350/0x350 [ 22.018666][ T349] ? check_preemption_disabled+0x9f/0x320 [pid 363] close(4) = 0 [pid 363] close(3) = 0 [pid 363] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 363] openat(AT_FDCWD, "blkio.throttle.io_service_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 363] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 363] write(3, "\x73\x79\x73\x74\x65\x6d\x5f\x75\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x68\x77\x63\x6c\x6f\x63\x6b\x5f\x65\x78\x65\x63\x5f\x74\x3a\x73\x30\x00", 36) = 36 [pid 363] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 363] <... futex resumed>) = 1 [pid 362] <... futex resumed>) = 0 [pid 363] mmap(0x20000000, 11755520, PROT_WRITE|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 3, 0 [pid 362] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... mmap resumed>) = 0x20000000 [pid 363] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 362] <... futex resumed>) = 0 [pid 363] madvise(0x20000000, 6291458, MADV_REMOVE [pid 362] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... madvise resumed>) = 0 [pid 363] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 362] <... futex resumed>) = 0 [pid 363] write(3, 0x20000080, 36 [pid 362] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 363] <... write resumed>) = 36 [pid 362] <... futex resumed>) = 0 [pid 363] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 0 [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 361 attached ./strace-static-x86_64: Process 358 attached [pid 363] futex(0x7fc82bda26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 362] exit_group(0 [pid 363] <... futex resumed>) = ? [pid 362] <... exit_group resumed>) = ? [pid 363] +++ exited with 0 +++ [pid 362] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=362, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 22.018678][ T349] ? debug_smp_processor_id+0x20/0x20 [ 22.018689][ T349] ? selinux_file_permission+0x2be/0x530 [ 22.018703][ T349] vfs_write+0x206/0x4e0 [ 22.018720][ T349] ksys_write+0x199/0x2c0 [ 22.111461][ T349] ? do_syscall_64+0x1c0/0x1c0 [ 22.116228][ T349] ? __ia32_sys_read+0x80/0x80 [ 22.120985][ T349] ? __do_page_fault+0x725/0xbb0 [ 22.125918][ T349] do_syscall_64+0xca/0x1c0 [ 22.130418][ T349] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 22.136302][ T349] Modules linked in: [pid 308] ioctl(3, LOOP_CLR_FD) = 0 [pid 308] close(3 [pid 361] set_robust_list(0x7fc8239889e0, 24 [pid 358] set_robust_list(0x7fc82bcca9e0, 24 [pid 308] <... close resumed>) = 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=316, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 365] <... write resumed>) = 1048576 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d65d0) = 366 [pid 365] munmap(0x7fc8238aa000, 1048576) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 365] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 365] ioctl(4, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 366 attached [pid 366] set_robust_list(0x5555566d65e0, 24) = 0 [pid 365] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 365] close(4) = 0 [pid 361] <... set_robust_list resumed>) = 0 [pid 358] <... set_robust_list resumed>) = 0 [pid 365] close(3 [pid 366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 366] setpgid(0, 0) = 0 [pid 366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 361] write(4, 0x20000080, 36 [pid 358] memfd_create("syzkaller", 0 [pid 366] <... openat resumed>) = 3 [ 22.140696][ T349] ---[ end trace 15243570041e4f7c ]--- [ 22.146236][ T349] RIP: 0010:ext4_writepages+0x3a16/0x3a40 [ 22.152005][ T349] Code: 7a a2 ff 31 ff 89 de e8 d8 7a a2 ff 45 84 f6 75 2e e8 be 78 a2 ff 49 bd 00 00 00 00 00 fc ff df e9 6e f9 ff ff e8 aa 78 a2 ff <0f> 0b e8 a3 78 a2 ff 0f 0b e8 9c 78 a2 ff e8 d7 88 3f ff eb 8f e8 [ 22.171679][ T349] RSP: 0018:ffff8881dbd7f440 EFLAGS: 00010293 [ 22.177756][ T349] RAX: ffffffff81c0bdd6 RBX: 0000010000000000 RCX: ffff8881dc2abf00 [ 22.185777][ T349] RDX: 0000000000000000 RSI: 0000010000000000 RDI: 0000000000000000 [pid 366] write(3, "1000", 4) = 4 [pid 366] close(3) = 0 [pid 366] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 315] exit_group(0 [pid 366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 353] <... futex resumed>) = ? [pid 327] <... futex resumed>) = ? [pid 315] <... exit_group resumed>) = ? [pid 366] <... mmap resumed>) = 0x7fc82bcaa000 [pid 353] +++ exited with 0 +++ [pid 327] +++ exited with 0 +++ [pid 366] mprotect(0x7fc82bcab000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 366] clone(child_stack=0x7fc82bcca3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[367], tls=0x7fc82bcca700, child_tidptr=0x7fc82bcca9d0) = 367 [pid 366] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 358] <... memfd_create resumed>) = 3 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 361] <... write resumed>) = ? [pid 365] <... close resumed>) = 0 [pid 365] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 367 attached [pid 361] +++ exited with 0 +++ [pid 315] +++ exited with 0 +++ [pid 307] <... openat resumed>) = 3 [pid 358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 365] <... futex resumed>) = 1 [pid 364] <... futex resumed>) = 0 [pid 365] openat(AT_FDCWD, "blkio.throttle.io_service_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 364] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... openat resumed>) = 3 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] <... futex resumed>) = 0 [pid 365] write(3, "\x73\x79\x73\x74\x65\x6d\x5f\x75\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x68\x77\x63\x6c\x6f\x63\x6b\x5f\x65\x78\x65\x63\x5f\x74\x3a\x73\x30\x00", 36 [pid 364] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... write resumed>) = 36 [pid 364] <... futex resumed>) = 0 [pid 365] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... futex resumed>) = 0 [pid 364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 365] mmap(0x20000000, 11755520, PROT_WRITE|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 3, 0 [pid 364] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... mmap resumed>) = 0x20000000 [pid 364] <... futex resumed>) = 0 [pid 365] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... futex resumed>) = 0 [pid 364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 365] madvise(0x20000000, 6291458, MADV_REMOVE [pid 364] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... madvise resumed>) = 0 [pid 365] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] <... futex resumed>) = 0 [pid 365] write(3, 0x20000080, 36 [pid 364] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] set_robust_list(0x7fc82bcca9e0, 24 [pid 365] <... write resumed>) = 36 [pid 364] <... futex resumed>) = 0 [pid 358] <... mmap resumed>) = 0x7fc8238aa000 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 307] ioctl(3, LOOP_CLR_FD [pid 365] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... futex resumed>) = 0 [pid 364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 365] futex(0x7fc82bda26e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 364] exit_group(0 [pid 365] <... futex resumed>) = ? [pid 364] <... exit_group resumed>) = ? [pid 365] +++ exited with 0 +++ [pid 364] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=364, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 306] restart_syscall(<... resuming interrupted clone ...> [pid 367] <... set_robust_list resumed>) = 0 [pid 367] memfd_create("syzkaller", 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 367] <... memfd_create resumed>) = 3 [pid 367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc8238aa000 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 309] restart_syscall(<... resuming interrupted clone ...> [pid 307] <... ioctl resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 367] <... write resumed>) = 1048576 [pid 358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 306] ioctl(3, LOOP_CLR_FD) = 0 [pid 306] close(3 [pid 309] <... restart_syscall resumed>) = 0 [pid 307] close(3 [pid 306] <... close resumed>) = 0 [pid 358] <... write resumed>) = 1048576 [pid 307] <... close resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d65d0) = 369 ./strace-static-x86_64: Process 369 attached [pid 358] munmap(0x7fc8238aa000, 1048576 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 367] munmap(0x7fc8238aa000, 1048576) = 0 [pid 367] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 22.194401][ T349] RBP: ffff8881dbd7f830 R08: ffffffff81c08bbf R09: ffffed103cd73669 [ 22.203605][ T349] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881e6b9b3f0 [ 22.211751][ T349] R13: dffffc0000000000 R14: 0000010410000000 R15: ffff8881dbd7f700 [ 22.223289][ T349] FS: 00007fc8239a9700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 22.236374][ T349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [pid 367] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 367] ioctl(4, LOOP_CLR_FD) = 0 [pid 367] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 367] close(4) = 0 [pid 367] close(3 [pid 358] <... munmap resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 369] set_robust_list(0x5555566d65e0, 24 [pid 358] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 369] <... set_robust_list resumed>) = 0 [pid 358] <... openat resumed>) = 4 [pid 309] <... openat resumed>) = 3 [pid 307] <... clone resumed>, child_tidptr=0x5555566d65d0) = 370 [pid 367] <... close resumed>) = 0 [pid 367] futex(0x7fc82bda26ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7fc82bda26e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7fc82bda26ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... futex resumed>) = 1 [ 22.243135][ T349] CR2: 00007fc8239a9000 CR3: 00000001dd595000 CR4: 00000000003406f0 [ 22.251929][ T349] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.259934][ T349] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.268090][ T349] Kernel panic - not syncing: Fatal exception [ 22.274405][ T349] Kernel Offset: disabled [ 22.278745][ T349] Rebooting in 86400 seconds..